{"vulnerability": "CVE-2026-1019", "sightings": [{"uuid": "273e0472-ee13-461d-bd6f-c0b5052fdf2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1019", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10638-0e44b-2.html", "content": "", "creation_timestamp": "2026-01-16T02:15:00.000000Z"}, {"uuid": "cc11a2d6-039c-4c8c-858b-d4665702e9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1019", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcjdnuoyo32x", "content": "", "creation_timestamp": "2026-01-16T05:13:43.526575Z"}, {"uuid": "3f8a5c07-1325-4375-b348-dd6a09e45349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1019", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcki36v2qz2u", "content": "", "creation_timestamp": "2026-01-16T16:05:25.704071Z"}, {"uuid": "ff18de92-a742-4fbb-b302-3c6112aafc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10192", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116664608498253097", "content": "A severe vulnerability was disclosed for Tenda W12 (CVE-2026-10192) https://vuldb.com/vuln/367473", "creation_timestamp": "2026-05-30T17:04:12.746991Z"}, {"uuid": "675f75fb-ee96-4d83-980c-0062ad5bd636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn64ky42uh22", "content": "CVE-2026-10191 - Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow\nCVE ID : CVE-2026-10191\n \n Published : May 31, 2026, 4:16 p.m. | 56\u00a0minutes ago\n \n Description : A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilterSet of...", "creation_timestamp": "2026-05-31T17:44:41.420782Z"}, {"uuid": "8dcf4a1f-5759-4312-b4e9-e07ef8ee048c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10192", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn6b26y72e2s", "content": "CVE-2026-10192 - Tenda W12 httpd set_local_time_0 stack-based overflow\nCVE ID : CVE-2026-10192\n \n Published : May 31, 2026, 5:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_l...", "creation_timestamp": "2026-05-31T19:04:46.544160Z"}, {"uuid": "760f692f-74e4-4b95-835a-7d7a19fbf255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10191", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mn6b6rdmgg2u", "content": "Tenda W12 3.0.0.7(4763)\u3067cgiWifiMacFilterSet\u95a2\u6570\u306emacList.mac\u5f15\u6570\u306b\u30b9\u30bf\u30c3\u30af\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u3002\nCVE-2026-10191 CVSS 8.8 | HIGH", "creation_timestamp": "2026-05-31T19:07:19.856657Z"}, {"uuid": "31fafeac-4117-4318-86f9-71500e4cbd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10193", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn6bd5nuse22", "content": "CVE-2026-10193 - OFCMS ComnController ComnController.java query sql injection\nCVE ID : CVE-2026-10193\n \n Published : May 31, 2026, 5:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function...", "creation_timestamp": "2026-05-31T19:09:46.906974Z"}, {"uuid": "0577a4ba-858d-4192-936c-5349250f4c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn6bm45who2a", "content": "CVE-2026-10194 - OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow\nCVE ID : CVE-2026-10194\n \n Published : May 31, 2026, 5:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQ...", "creation_timestamp": "2026-05-31T19:14:47.688266Z"}, {"uuid": "33b25b6a-70bb-4745-985c-302e59f251a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn6jnsdwdw27", "content": "CVE-2026-10190 - Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service\nCVE ID : CVE-2026-10190\n \n Published : May 31, 2026, 4:16 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function...", "creation_timestamp": "2026-05-31T21:38:54.166728Z"}, {"uuid": "1fdf394c-a6eb-407a-b080-e213a5065b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn6o4xjs3o23", "content": "CVE-2026-10197 - Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference\nCVE ID : CVE-2026-10197\n \n Published : May 31, 2026, 10:16 p.m. | 15\u00a0minutes ago\n \n Description : A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF...", "creation_timestamp": "2026-05-31T22:58:58.087947Z"}, {"uuid": "558656e7-1ce3-48c3-ab44-e81c6b9333e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10192", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mn6ogmf3qr2d", "content": "CVE-2026-10192 - Critical stack buffer overflow in Tenda W12 routers. Remote RCE via /bin/httpd set_local_time_0 function. CVSS 8.8. Exploit public. No patch available. Isolate devices immediately. #CVE #Tenda #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-10192/", "creation_timestamp": "2026-05-31T23:04:21.716345Z"}, {"uuid": "82548782-2c6d-40d1-8e7b-c1eb01dbace7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10192", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mn73mxxr2l2n", "content": "Tenda W12 routers (v3.0.0.7) hit by HIGH-severity buffer overflow (CVE-2026-10192). Remote code execution risk, exploit public, no patch yet. Limit exposure & watch for fixes. https://radar.offseq.com/threat/cve-2026-10192-stack-based-buffer-overflow-in-tend-47dfe2f7 #OffSeq #Vulnerability #IoTSe...", "creation_timestamp": "2026-06-01T03:00:35.816340Z"}, {"uuid": "0ed7c356-6838-42b0-b060-97668891a196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10192", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116672615661027166", "content": "\u26a0\ufe0f CVE-2026-10192: HIGH-severity buffer overflow in Tenda W12 (v3.0.0.7). Remote code execution possible, exploit is public, no patch yet. Restrict remote admin & monitor for updates. https://radar.offseq.com/threat/cve-2026-10192-stack-based-buffer-overflow-in-tend-47dfe2f7 #OffSeq #Vulnerability #Infosec #RouterSecurity", "creation_timestamp": "2026-06-01T03:00:36.912833Z"}, {"uuid": "fde7c666-3764-4f62-a597-b9f72e40f8cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10199", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn745jn5v22y", "content": "CVE-2026-10199 - Assimp glTF2Asset.h LazyDict null pointer dereference\nCVE ID : CVE-2026-10199\n \n Published : May 31, 2026, 11:16 p.m. | 3\u00a0hours, 3\u00a0minutes ago\n \n Description : A vulnerability has been found in Assimp up to 6.0.4. Affected by this issue is the function glTF2::...", "creation_timestamp": "2026-06-01T03:09:58.918244Z"}, {"uuid": "7ed24a60-3dbf-42d2-8a51-1ab0c5270e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10198", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn74icqu6k2j", "content": "CVE-2026-10198 - Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference\nCVE ID : CVE-2026-10198\n \n Published : May 31, 2026, 11:16 p.m. | 3\u00a0hours, 3\u00a0minutes ago\n \n Description : A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is ...", "creation_timestamp": "2026-06-01T03:15:51.330861Z"}, {"uuid": "edb8d3ff-1a31-4705-92ea-6d46de2599f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10191", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116672969519738836", "content": "\u26a0\ufe0f HIGH severity: Stack-based buffer overflow in Tenda W12 3.0.0.7(4763) (CVE-2026-10191). Remote attackers can exploit via /bin/httpd. No patch yet \u2014 limit device exposure & monitor for updates. https://radar.offseq.com/threat/cve-2026-10191-stack-based-buffer-overflow-in-tend-8fb77ae8 #OffSeq #Vulnerability #Tenda #Infosec", "creation_timestamp": "2026-06-01T04:30:31.938623Z"}, {"uuid": "4f89e125-29be-4b0f-bde8-2024e9ee00c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10191", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mn7anvbbqk2n", "content": "Tenda W12 v3.0.0.7(4763): HIGH severity buffer overflow (CVE-2026-10191) enables remote attacks. No patch \u2014 limit device exposure & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-10191-stack-based-buffer-overflow-in-tend-8fb77ae8 #OffSeq #Vulnerability #NetworkSecurity", "creation_timestamp": "2026-06-01T04:30:34.186439Z"}, {"uuid": "d30ee5ca-9101-4181-94a2-ac8687b3c1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10190", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116673323315187265", "content": "\u26a0\ufe0f HIGH severity: Tenda W12 (3.0.0.7(4763)) has a remote DoS vuln (CVE-2026-10190) in web_over_time param. Exploit public, no patch. Restrict admin access & watch for vendor updates. https://radar.offseq.com/threat/cve-2026-10190-denial-of-service-in-tenda-w12-143946b0 #OffSeq #Vulnerability #RouterSecurity", "creation_timestamp": "2026-06-01T06:00:30.430989Z"}, {"uuid": "84919608-42df-4493-aae8-f69fca5c26a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10190", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mn7forr6aj25", "content": "Tenda W12 (v3.0.0.7(4763)) faces HIGH severity remote DoS risk. Exploit public, no patch \u2014 restrict admin web access & monitor for fixes. https://radar.offseq.com/threat/cve-2026-10190-denial-of-service-in-tenda-w12-143946b0 #OffSeq #Vulnerability #NetworkSecurity", "creation_timestamp": "2026-06-01T06:00:32.935093Z"}, {"uuid": "400b4103-e3ca-4a39-a0c3-35e50ed1bffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10196", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3murirmbllh2r", "content": "CVE-2026-10196 - mail mint \u2013 email marketing, newsletter, email automation & woocommerce emails\nThe Mail Mint email plugin for WordPress can be tricked by anyone sending data through its forms to execute code on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#getwpfunnels #CVE #infosec", "creation_timestamp": "2026-09-05T12:40:04.911764Z"}, {"uuid": "93a5f36d-d2d3-4168-84a8-5ac7dbec4131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bqybj3vdcghwk", "content": "CVE-2026-10196 - Mail Mint\nCVE ID : CVE-2026-10196\n \n Published : Sept. 5, 2026, 12:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : The Mail Mint \u2013 Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injectio...", "creation_timestamp": "2026-09-05T13:41:01.779750Z"}, {"uuid": "7b8f7077-5fc9-4aef-8059-aaf03a66cd9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10196", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3murnnw3xnz25", "content": "\ud83d\udea8 CVE-2026-10196 \u2014 CVSS 9.8 CRITICAL\n\nThe Mail Mint \u2013 Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-10196\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T14:07:29.627920Z"}, {"uuid": "8902e306-7f51-4b97-839c-0ac2ca9906a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10196", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3musetismnr2r", "content": "\ud83d\udd34 CVE-2026-10196 - Critical (9.8)\n\nThe Mail Mint \u2013 Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for W...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10196/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T21:02:13.759182Z"}, {"uuid": "e83633aa-ed06-4ece-9da5-8bcb3ea8f003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101901", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwltt3iwtr24", "content": "CVE-2026-101901: axios patched three flaws in its Node.js and browser HTTP client before 1.20.0: an HTTP/2 denial of service, an HTTP/2 proxy and DNS bypass (CVE-2026-101898), and fetch adapter header injection (CVE-2026-101900). Update to 1.20.0.", "creation_timestamp": "2026-09-28T17:32:10.220045Z"}, {"uuid": "c4529fcf-53e2-41c4-b0bc-253d7d575d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101900", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwltt3iwtr24", "content": "CVE-2026-101901: axios patched three flaws in its Node.js and browser HTTP client before 1.20.0: an HTTP/2 denial of service, an HTTP/2 proxy and DNS bypass (CVE-2026-101898), and fetch adapter header injection (CVE-2026-101900). Update to 1.20.0.", "creation_timestamp": "2026-09-28T17:32:10.287470Z"}, {"uuid": "e310b4e4-8bbd-44a0-bccb-08b569ec5e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101914", "type": "seen", "source": "https://gist.github.com/alon710/8f28320497c3189bf7bde732901bd401", "content": "# CVE-2026-101914: CVE-2026-101914: Authorization Bypass via Case-Insensitive Path Matching in @grpc/grpc-js-xds\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-101914\n\n## Summary\nAn authorization bypass vulnerability exists in the @grpc/grpc-js Node.js package (specifically within the xDS plugin wrapper @grpc/grpc-js-xds) due to a logical error in its Role-Based Access Control (RBAC) path matching component. When case-insensitive path matching is enabled, the matching logic performs a prefix comparison using the startsWith method instead of a strict equality comparison. This logic flaw allows unauthenticated or low-privilege clients with access to a shorter path to gain unauthorized access to longer, more privileged method names that share the same prefix.\n\n## TL;DR\nA logical error in the @grpc/grpc-js xDS path matcher applies a prefix match instead of an exact match when case-insensitive comparison is enabled. This allows clients to bypass RBAC policies and access restricted service endpoints that share a prefix with authorized endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-187\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 6.5\n- **Confidentiality Impact**: Low\n- **Integrity Impact**: High\n- **Exploit Status**: PoC available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- Node.js applications running pure JavaScript gRPC deployments\n- Systems utilizing xDS-based RBAC policies with case-insensitive matching enabled in @grpc/grpc-js-xds\n- **@grpc/grpc-js**: < 1.13.1 (Fixed in: `1.13.1`)\n- **@grpc/grpc-js**: >= 1.14.0, < 1.14.1 (Fixed in: `1.14.1`)\n\n## Mitigation\n\n- Upgrade @grpc/grpc-js and @grpc/grpc-js-xds to version 1.13.1 or 1.14.1.\n- Disable case-insensitive exact path matching in xDS RBAC policy configurations.\n- Redesign gRPC method naming structures to avoid cases where an authorized method acts as a literal prefix of a restricted method.\n\n**Remediation Steps:**\n1. Open the application package.json and locate dependencies for @grpc/grpc-js.\n2. Update the version definition to '^1.13.1' or '^1.14.1' depending on your current release branch.\n3. Execute 'npm update @grpc/grpc-js' or 'yarn upgrade @grpc/grpc-js' to apply the updates.\n4. Audit existing xDS-based RBAC configurations and ensure that 'case_insensitive' options are set to false wherever possible as a defense-in-depth measure.\n5. Redeploy the updated application to production environments.\n\n## References\n\n- [GitHub Security Advisory GHSA-88h9-xgvx-hvf2](https://github.com/grpc/grpc-node/security/advisories/GHSA-88h9-xgvx-hvf2)\n- [CVE-2026-101914 Mitre Record](https://www.cve.org/CVERecord?id=CVE-2026-101914)\n- [Release tag for version 1.13.1](https://github.com/grpc/grpc-node/releases/tag/@grpc/grpc-js-xds%401.13.1)\n- [Release tag for version 1.14.1](https://github.com/grpc/grpc-node/releases/tag/@grpc/grpc-js-xds%401.14.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-101914) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-28T20:30:32.000000Z"}, {"uuid": "f431aff4-cd7d-4c4f-8c3e-864e0171b67a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101913", "type": "published-proof-of-concept", "source": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rpw4-54j3-4h4q", "content": "", "creation_timestamp": "2026-08-29T03:32:55.000000Z"}, {"uuid": "2a39c831-de47-4a6b-8466-3915e7af6155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101910", "type": "published-proof-of-concept", "source": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-2vr4-cq9g-pvrc", "content": "", "creation_timestamp": "2026-08-29T03:32:59.000000Z"}, {"uuid": "cca4b5cc-99b3-43cd-a88e-ff2cdfd918ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101910", "type": "seen", "source": "https://gist.github.com/alon710/d44db51e720dfe6d0e35e26eb2a0926c", "content": "# CVE-2026-101910: CVE-2026-101910: Server-Side Request Forgery Bypass via NAT64 Local-Use Address Range in ip-address Library\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-09-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-101910\n\n## Summary\nA validation bypass vulnerability exists in the npm package `ip-address` from version 10.2.0 to 10.5.1. The library's `Address6.isPrivate()` classifier fails to recognize the NAT64 local-use prefix range 64:ff9b:1::/48 as a restricted, private subnet. In networks implementing NAT64 routing configurations, an attacker can exploit this flaw to execute Server-Side Request Forgery (SSRF) and bypass local trust-boundary validations.\n\n## TL;DR\nThe `ip-address` library fails to identify the NAT64 local-use range 64:ff9b:1::/48 as private, enabling unauthenticated attackers to bypass SSRF validation checks and access internal network environments.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918: Server-Side Request Forgery (SSRF)\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **EPSS Score / Percentile**: Not available / No active threat intel indicators\n- **Exploit Status**: poc\n- **KEV Status**: Not listed on CISA KEV\n\n## Affected Systems\n\n- Node.js environments implementing the `ip-address` npm package for hostname/IP resolution sanitization.\n- Containerized services operating in dual-stack IPv4/IPv6 networks utilizing NAT64 local-use prefix routing.\n- **ip-address**: >= 10.2.0, < 10.5.1 (Fixed in: `10.5.1`)\n\n## Mitigation\n\n- Upgrade the ip-address dependency to version 10.5.1 or higher.\n- Implement a manual subnet validation check on outbound IPv6 addresses using the 64:ff9b:1::/48 subnet mask.\n- Configure network security groups and ingress/egress rules to restrict outbound calls from critical microservices to NAT64 translators.\n\n**Remediation Steps:**\n1. Identify all projects and package files using the `ip-address` library within the scope of version 10.2.0 to 10.5.0.\n2. Execute `npm install ip-address@10.5.1` or modify the `package.json` lockfile to lock dependencies on version 10.5.1.\n3. Incorporate the NAT64 local-use check `64:ff9b:1::/48` in any localized IP classification wrappers if library upgrades cannot be completed immediately.\n4. Deploy network-level policies preventing application containers from querying internal network assets or sensitive endpoints like the Cloud Metadata API.\n\n## References\n\n- [NVD - CVE-2026-101910 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-101910)\n- [GitHub Security Advisory (GHSA-2vr4-cq9g-pvrc)](https://github.com/beaugunderson/ip-address/security/advisories/GHSA-2vr4-cq9g-pvrc)\n- [ip-address Release Version Tag v10.5.1](https://github.com/beaugunderson/ip-address/releases/tag/v10.5.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-101910) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-29T06:30:30.000000Z"}, {"uuid": "7d2640d1-e49b-4646-b62c-4a8b23f2dff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101910", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwnrsflezg2l", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-101910 impacts ip-address in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/696\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-09-29T12:01:19.260602Z"}, {"uuid": "f0d2094d-466c-4f3f-ac5d-5a49da5a233f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101913", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwnrskjnxm2v", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-101913 impacts ip-address in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/697\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-09-29T12:01:24.359237Z"}, {"uuid": "07ab710b-af06-4771-ae01-a1587a3226a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101907", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-7-vulnerabilita-in-prodotti-axios", "content": "", "creation_timestamp": "2026-09-29T07:31:20.000000Z"}, {"uuid": "121479c7-d169-4739-a4a8-324be4563f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101906", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-7-vulnerabilita-in-prodotti-axios", "content": "", "creation_timestamp": "2026-09-29T07:31:20.000000Z"}, {"uuid": "696c9404-4004-4963-9d53-e0d3aa88385f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101905", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-7-vulnerabilita-in-prodotti-axios", "content": "", "creation_timestamp": "2026-09-29T07:31:20.000000Z"}, {"uuid": "e05708c5-8ad0-40f8-bed8-028e51d04334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101909", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-7-vulnerabilita-in-prodotti-axios", "content": "", "creation_timestamp": "2026-09-29T07:31:20.000000Z"}, {"uuid": "33df625c-a1de-4f58-a721-3dd8b72e1715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101901", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-7-vulnerabilita-in-prodotti-axios", "content": "", "creation_timestamp": "2026-09-29T07:31:20.000000Z"}, {"uuid": "4b70ac48-4b4e-4822-bdff-0bd21699a796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101903", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-7-vulnerabilita-in-prodotti-axios", "content": "", "creation_timestamp": "2026-09-29T07:31:20.000000Z"}, {"uuid": "c65c3724-42f9-431c-972b-f062f447af8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101912", "type": "published-proof-of-concept", "source": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv", "content": "", "creation_timestamp": "2026-09-15T04:15:05.000000Z"}, {"uuid": "2ef9bb43-0d7b-4964-ba3d-38a08bca403d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101911", "type": "published-proof-of-concept", "source": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-h3mg-xc3c-68pw", "content": "", "creation_timestamp": "2026-09-15T04:15:03.000000Z"}, {"uuid": "9fdad84a-8e03-46e8-b80d-b0db58b42627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101912", "type": "seen", "source": "https://gist.github.com/alon710/695037b527e98708f813a603aa97604e", "content": "# CVE-2026-101912: CVE-2026-101912: Cross-Family IP Address Subnet Containment Logic Bypass in ip-address Library\n\n> **CVSS Score:** 6.3\n> **Published:** 2026-09-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-101912\n\n## Summary\nThe ip-address library is vulnerable to a logical bypass in its subnet containment methods. The functions isInSubnet() and isHostInSubnet() do not verify that compared addresses belong to the same IP family before performing masking checks. Under specific circumstances, an IPv6 address can share leading bit patterns with an IPv4 subnet, causing the containment check to evaluate as true. This allows attackers to bypass access control lists, firewalls, and server-side request forgery protection layers in applications relying on the library.\n\n## TL;DR\nA logical error in the ip-address library allows cross-family IP comparisons (IPv4 vs. IPv6) to collide. This enables attackers to bypass IP-based filters and access controls by submitting crafted IPv6 addresses that mimic private IPv4 subnets.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-697 / CWE-843\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 6.3 (Medium)\n- **EPSS Score**: 0.0037 (Percentile: 28.38%)\n- **Impact**: Partial Integrity (ACL/SSRF Filter Bypass)\n- **Exploit Status**: Proof-of-Concept (PoC) Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js applications using the ip-address npm library\n- **ip-address**: < 10.7.1 (Fixed in: `10.7.1`)\n\n## Mitigation\n\n- Upgrade to ip-address v10.7.1 or later\n- Manually restrict address family processing on entry points\n- Add length constraints to raw IP parser inputs\n- Employ network-layer firewall configurations as defense-in-depth\n\n**Remediation Steps:**\n1. Identify vulnerable dependencies by running 'npm ls ip-address' or examining the yarn/pnpm lockfile.\n2. Update package.json dependencies to require 'ip-address': '^10.7.1'.\n3. Execute dependency updates inside the development environment to rebuild the lockfile.\n4. Deploy the updated build to production environments.\n\n## References\n\n- [GitHub Security Advisory (GHSA-j6r3-76f7-8jcv)](https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv)\n- [Patch Commit](https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28)\n- [Release tag v10.7.1](https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1)\n- [NVD Record Details](https://nvd.nist.gov/vuln/detail/CVE-2026-101912)\n- [CVE.org Record Details](https://www.cve.org/CVERecord?id=CVE-2026-101912)\n- [Wiz Vulnerability Database Details](https://www.wiz.io/vulnerability-database/cve/cve-2026-101912)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-101912) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T04:30:31.000000Z"}, {"uuid": "e33194f7-ced7-4b40-a4f4-36798cd3df2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101911", "type": "seen", "source": "https://gist.github.com/alon710/8432dbe3939654e0587f7004c91b9879", "content": "# CVE-2026-101911: CVE-2026-101911: Denial of Service via Uncontrolled Resource Consumption in ip-address Library\n\n> **CVSS Score:** 6.3\n> **Published:** 2026-09-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-101911\n\n## Summary\nA denial-of-service vulnerability exists in the ip-address npm package prior to version 10.7.1. The library fails to limit the length of input strings parsed by the Address4 and Address6 constructors. When parsing highly malformed addresses, the diagnostic parser runs a synchronous regular expression search-and-replace that generates descriptive HTML error messages. Passing an excessively long string containing invalid characters causes severe memory amplification and CPU starvation, resulting in a thread hang or process crash in Node.js applications.\n\n## TL;DR\nThe ip-address library prior to 10.7.1 is vulnerable to uncontrolled resource consumption (CWE-400). Unvalidated input length in the Address6 constructor combined with a synchronous HTML-error formatting routine allows unauthenticated remote attackers to trigger severe memory exhaustion or hard process crashes via crafted IP strings.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400 / CWE-770\n- **Attack Vector**: Network (AV:N)\n- **CVSS 4.0 Score**: 6.3 (Medium)\n- **EPSS Score**: 0.30% (Percentile: 20.54%)\n- **Impact**: Denial of Service (CPU Exhaustion & Process Crash)\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Active\n\n## Affected Systems\n\n- Any Node.js or JavaScript application utilizing the 'ip-address' npm library versions prior to 10.7.1.\n- **ip-address**: < 10.7.1 (Fixed in: `10.7.1`)\n\n## Mitigation\n\n- Upgrade the ip-address library to version 10.7.1 or higher.\n- Implement application-level input validation limiting IP address fields to a maximum of 64 characters before parsing.\n- Configure web framework middleware (e.g., body-parser) to enforce strict global payload limits to reject multi-megabyte payloads.\n\n**Remediation Steps:**\n1. Run 'npm install ip-address@10.7.1' or update the package.json to specify version '^10.7.1'.\n2. Scan existing codebase to locate instances of 'new Address6()', 'new Address4()', and 'Address6.isValid()'.\n3. Wrap these parser calls in an validation wrapper that checks the type and restricts input length to less than 64 characters.\n\n## References\n\n- [GitHub Security Advisory GHSA-h3mg-xc3c-68pw](https://github.com/beaugunderson/ip-address/security/advisories/GHSA-h3mg-xc3c-68pw)\n- [NVD - CVE-2026-101911](https://nvd.nist.gov/vuln/detail/CVE-2026-101911)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-101911)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-101911) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T05:30:30.000000Z"}, {"uuid": "d22b864a-544d-4c3d-82b9-43fdc9eef7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101911", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwqcavpxvw2z", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-101911 impacts ip-address in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/705\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-09-30T12:01:05.170665Z"}, {"uuid": "d8258c89-f449-4546-b91c-3ae24df6d5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101912", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwqcay3mar2l", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-101912 impacts ip-address in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/706\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-09-30T12:01:07.714613Z"}]}