@blamejs/exceptd-skills 0.18.21 → 0.18.23

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. package/ARCHITECTURE.md +1 -1
  2. package/CHANGELOG.md +10 -0
  3. package/bin/exceptd.js +4 -1
  4. package/data/_indexes/_meta.json +9 -9
  5. package/data/_indexes/activity-feed.json +15 -15
  6. package/data/_indexes/catalog-summaries.json +10 -10
  7. package/data/_indexes/chains.json +120168 -747
  8. package/data/_indexes/frequency.json +20 -0
  9. package/data/attack-techniques.json +437 -8
  10. package/data/cve-catalog.json +18623 -4
  11. package/data/cwe-catalog.json +765 -18
  12. package/data/framework-control-gaps.json +1020 -13
  13. package/data/zeroday-lessons.json +7616 -1
  14. package/lib/auto-discovery.js +54 -67
  15. package/lib/cve-batch.js +216 -0
  16. package/lib/cve-curation.js +4 -0
  17. package/lib/cve-enrich.js +172 -0
  18. package/lib/prefetch.js +189 -110
  19. package/lib/scoring.js +24 -0
  20. package/manifest.json +53 -53
  21. package/package.json +2 -2
  22. package/sbom.cdx.json +65 -35
package/data/framework-control-gaps.json CHANGED
@@ -239,7 +239,42 @@
239
239
  "real_requirement": "User-application hardening enumerates AI assistants and MCP servers in scope; sets default-deny on tool grants with explicit per-tool acknowledgement; pins MCP server versions with signature verification; treats AI-tool config files (.claude/settings.json, .cursor/mcp.json, .vscode/settings.json's chat.tools.autoApprove) as integrity-monitored configuration with the same protection profile as security-sensitive files.",
240
240
  "status": "open",
241
241
  "opened_date": "2026-05-13",
242
- "evidence_cves": [],
242
+ "evidence_cves": [
243
+ "CVE-2008-4128",
244
+ "CVE-2012-4792",
245
+ "CVE-2013-0648",
246
+ "CVE-2014-0497",
247
+ "CVE-2014-0502",
248
+ "CVE-2016-3714",
249
+ "CVE-2017-3506",
250
+ "CVE-2018-9276",
251
+ "CVE-2019-16278",
252
+ "CVE-2022-23748",
253
+ "CVE-2024-23692",
254
+ "CVE-2024-29059",
255
+ "CVE-2024-29988",
256
+ "CVE-2024-30040",
257
+ "CVE-2024-38112",
258
+ "CVE-2024-38178",
259
+ "CVE-2024-38189",
260
+ "CVE-2024-38213",
261
+ "CVE-2024-38217",
262
+ "CVE-2024-38226",
263
+ "CVE-2024-41710",
264
+ "CVE-2024-43461",
265
+ "CVE-2024-43572",
266
+ "CVE-2024-43573",
267
+ "CVE-2024-44308",
268
+ "CVE-2024-49039",
269
+ "CVE-2024-4947",
270
+ "CVE-2024-55956",
271
+ "CVE-2024-7262",
272
+ "CVE-2024-8957",
273
+ "CVE-2024-9463",
274
+ "CVE-2024-9680",
275
+ "CVE-2025-0411",
276
+ "CVE-2026-48939"
277
+ ],
243
278
  "atlas_refs": [
244
279
  "AML.T0010",
245
280
  "AML.T0051"
@@ -341,36 +376,138 @@
341
376
  "status": "open",
342
377
  "opened_date": "2026-05-13",
343
378
  "evidence_cves": [
379
+ "CVE-2014-100005",
380
+ "CVE-2014-2120",
381
+ "CVE-2017-1000253",
344
382
  "CVE-2017-12637",
345
383
  "CVE-2017-3066",
384
+ "CVE-2018-0824",
385
+ "CVE-2018-14933",
386
+ "CVE-2018-19410",
346
387
  "CVE-2018-8639",
388
+ "CVE-2019-11001",
347
389
  "CVE-2019-9874",
348
390
  "CVE-2019-9875",
391
+ "CVE-2020-0618",
392
+ "CVE-2020-11023",
393
+ "CVE-2020-14644",
394
+ "CVE-2020-15069",
395
+ "CVE-2020-15415",
396
+ "CVE-2020-2883",
349
397
  "CVE-2021-20035",
398
+ "CVE-2021-20124",
399
+ "CVE-2021-26086",
400
+ "CVE-2021-40407",
401
+ "CVE-2021-40655",
402
+ "CVE-2021-41277",
403
+ "CVE-2022-0185",
404
+ "CVE-2022-21445",
405
+ "CVE-2022-22948",
406
+ "CVE-2022-23227",
407
+ "CVE-2022-24816",
408
+ "CVE-2022-2586",
350
409
  "CVE-2022-43769",
351
410
  "CVE-2022-43939",
352
411
  "CVE-2023-20118",
412
+ "CVE-2023-25280",
413
+ "CVE-2023-28461",
353
414
  "CVE-2023-34192",
354
415
  "CVE-2023-44221",
416
+ "CVE-2023-45249",
417
+ "CVE-2023-45727",
418
+ "CVE-2023-48365",
419
+ "CVE-2023-7028",
420
+ "CVE-2024-1086",
421
+ "CVE-2024-11667",
422
+ "CVE-2024-11680",
423
+ "CVE-2024-1212",
424
+ "CVE-2024-12356",
425
+ "CVE-2024-12686",
355
426
  "CVE-2024-13159",
356
427
  "CVE-2024-13160",
357
428
  "CVE-2024-13161",
358
429
  "CVE-2024-20439",
430
+ "CVE-2024-20767",
359
431
  "CVE-2024-20953",
432
+ "CVE-2024-21413",
433
+ "CVE-2024-23113",
434
+ "CVE-2024-26169",
435
+ "CVE-2024-27348",
436
+ "CVE-2024-28995",
437
+ "CVE-2024-29745",
438
+ "CVE-2024-29748",
439
+ "CVE-2024-29824",
440
+ "CVE-2024-30051",
441
+ "CVE-2024-30088",
442
+ "CVE-2024-32113",
443
+ "CVE-2024-3272",
444
+ "CVE-2024-3273",
445
+ "CVE-2024-3393",
446
+ "CVE-2024-3400",
447
+ "CVE-2024-35250",
448
+ "CVE-2024-36401",
449
+ "CVE-2024-36971",
450
+ "CVE-2024-38014",
451
+ "CVE-2024-38080",
452
+ "CVE-2024-38106",
453
+ "CVE-2024-38107",
454
+ "CVE-2024-38178",
455
+ "CVE-2024-38193",
360
456
  "CVE-2024-38475",
457
+ "CVE-2024-38812",
458
+ "CVE-2024-38813",
459
+ "CVE-2024-40711",
460
+ "CVE-2024-40766",
461
+ "CVE-2024-40890",
462
+ "CVE-2024-40891",
463
+ "CVE-2024-43047",
464
+ "CVE-2024-44309",
465
+ "CVE-2024-45195",
466
+ "CVE-2024-45519",
467
+ "CVE-2024-4610",
468
+ "CVE-2024-4671",
469
+ "CVE-2024-47575",
470
+ "CVE-2024-4761",
361
471
  "CVE-2024-48248",
362
472
  "CVE-2024-4885",
363
473
  "CVE-2024-49035",
474
+ "CVE-2024-49138",
364
475
  "CVE-2024-50302",
476
+ "CVE-2024-50603",
477
+ "CVE-2024-51378",
478
+ "CVE-2024-51567",
479
+ "CVE-2024-5274",
480
+ "CVE-2024-53104",
365
481
  "CVE-2024-53150",
366
482
  "CVE-2024-53197",
483
+ "CVE-2024-53704",
484
+ "CVE-2024-55550",
485
+ "CVE-2024-55591",
486
+ "CVE-2024-57727",
367
487
  "CVE-2024-57968",
368
488
  "CVE-2024-58136",
489
+ "CVE-2024-5910",
490
+ "CVE-2024-7593",
491
+ "CVE-2024-7965",
492
+ "CVE-2024-8190",
493
+ "CVE-2024-8956",
494
+ "CVE-2024-9379",
495
+ "CVE-2024-9380",
496
+ "CVE-2024-9474",
497
+ "CVE-2025-0108",
369
498
  "CVE-2025-0111",
499
+ "CVE-2025-0994",
370
500
  "CVE-2025-1316",
371
501
  "CVE-2025-1976",
502
+ "CVE-2025-21333",
503
+ "CVE-2025-21334",
504
+ "CVE-2025-21335",
505
+ "CVE-2025-21418",
372
506
  "CVE-2025-21590",
507
+ "CVE-2025-23006",
508
+ "CVE-2025-23209",
373
509
  "CVE-2025-24054",
510
+ "CVE-2025-24085",
374
511
  "CVE-2025-24472",
375
512
  "CVE-2025-24813",
376
513
  "CVE-2025-24983",
@@ -391,16 +528,24 @@
391
528
  "CVE-2025-42599",
392
529
  "CVE-2025-67038",
393
530
  "CVE-2026-12569",
531
+ "CVE-2026-15410",
394
532
  "CVE-2026-20230",
395
533
  "CVE-2026-20253",
396
534
  "CVE-2026-20262",
535
+ "CVE-2026-25089",
397
536
  "CVE-2026-34908",
398
537
  "CVE-2026-34909",
399
538
  "CVE-2026-34910",
539
+ "CVE-2026-39808",
400
540
  "CVE-2026-45659",
541
+ "CVE-2026-46817",
401
542
  "CVE-2026-48558",
402
543
  "CVE-2026-48907",
403
- "CVE-2026-54420"
544
+ "CVE-2026-54420",
545
+ "CVE-2026-56155",
546
+ "CVE-2026-56164",
547
+ "CVE-2026-56290",
548
+ "CVE-2026-56291"
404
549
  ],
405
550
  "atlas_refs": [],
406
551
  "attack_refs": [
@@ -1484,6 +1629,7 @@
1484
1629
  "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
1485
1630
  "CVE-2007-0671",
1486
1631
  "CVE-2008-0015",
1632
+ "CVE-2008-4128",
1487
1633
  "CVE-2008-4250",
1488
1634
  "CVE-2009-0238",
1489
1635
  "CVE-2009-0556",
@@ -1496,50 +1642,84 @@
1496
1642
  "CVE-2011-0411",
1497
1643
  "CVE-2011-3402",
1498
1644
  "CVE-2012-1854",
1645
+ "CVE-2012-4792",
1646
+ "CVE-2013-0643",
1647
+ "CVE-2013-0648",
1499
1648
  "CVE-2013-3893",
1500
1649
  "CVE-2013-3918",
1650
+ "CVE-2014-0497",
1651
+ "CVE-2014-0502",
1652
+ "CVE-2014-100005",
1653
+ "CVE-2014-2120",
1501
1654
  "CVE-2014-3931",
1502
1655
  "CVE-2014-6278",
1503
1656
  "CVE-2015-7755",
1504
1657
  "CVE-2016-10033",
1658
+ "CVE-2016-3714",
1505
1659
  "CVE-2016-7836",
1660
+ "CVE-2017-1000253",
1506
1661
  "CVE-2017-1000353",
1507
1662
  "CVE-2017-12637",
1508
1663
  "CVE-2017-3066",
1664
+ "CVE-2017-3506",
1509
1665
  "CVE-2017-7921",
1666
+ "CVE-2018-0824",
1510
1667
  "CVE-2018-14634",
1668
+ "CVE-2018-14933",
1511
1669
  "CVE-2018-4063",
1512
1670
  "CVE-2018-8639",
1671
+ "CVE-2019-0344",
1672
+ "CVE-2019-16278",
1513
1673
  "CVE-2019-19006",
1514
1674
  "CVE-2019-5418",
1515
1675
  "CVE-2019-6693",
1516
1676
  "CVE-2019-9621",
1517
1677
  "CVE-2019-9874",
1518
1678
  "CVE-2019-9875",
1679
+ "CVE-2020-0618",
1680
+ "CVE-2020-11023",
1681
+ "CVE-2020-13965",
1682
+ "CVE-2020-14644",
1683
+ "CVE-2020-15069",
1519
1684
  "CVE-2020-17103-REREGRESSION-2026",
1685
+ "CVE-2020-17519",
1520
1686
  "CVE-2020-24363",
1521
1687
  "CVE-2020-25078",
1522
1688
  "CVE-2020-25079",
1523
1689
  "CVE-2020-7796",
1524
1690
  "CVE-2020-9715",
1525
1691
  "CVE-2021-20035",
1692
+ "CVE-2021-20123",
1693
+ "CVE-2021-20124",
1526
1694
  "CVE-2021-21311",
1527
1695
  "CVE-2021-22054",
1528
1696
  "CVE-2021-22175",
1529
1697
  "CVE-2021-22555",
1530
1698
  "CVE-2021-22681",
1699
+ "CVE-2021-26086",
1531
1700
  "CVE-2021-26828",
1532
1701
  "CVE-2021-26829",
1533
1702
  "CVE-2021-30952",
1703
+ "CVE-2021-31196",
1534
1704
  "CVE-2021-32030",
1705
+ "CVE-2021-33044",
1535
1706
  "CVE-2021-33515",
1536
1707
  "CVE-2021-38371",
1537
1708
  "CVE-2021-39935",
1709
+ "CVE-2021-40655",
1538
1710
  "CVE-2021-43226",
1539
1711
  "CVE-2021-43798",
1712
+ "CVE-2021-44529",
1713
+ "CVE-2022-0185",
1540
1714
  "CVE-2022-1471",
1541
1715
  "CVE-2022-20775",
1716
+ "CVE-2022-21445",
1717
+ "CVE-2022-23227",
1718
+ "CVE-2022-23748",
1719
+ "CVE-2022-24816",
1720
+ "CVE-2022-2586",
1542
1721
  "CVE-2022-37055",
1722
+ "CVE-2022-38028",
1543
1723
  "CVE-2022-40799",
1544
1724
  "CVE-2022-43769",
1545
1725
  "CVE-2022-43939",
@@ -1547,8 +1727,10 @@
1547
1727
  "CVE-2023-0386",
1548
1728
  "CVE-2023-20118",
1549
1729
  "CVE-2023-21529",
1730
+ "CVE-2023-24955",
1550
1731
  "CVE-2023-2533",
1551
1732
  "CVE-2023-27351",
1733
+ "CVE-2023-28461",
1552
1734
  "CVE-2023-33538",
1553
1735
  "CVE-2023-34192",
1554
1736
  "CVE-2023-36424",
@@ -1556,10 +1738,15 @@
1556
1738
  "CVE-2023-39780",
1557
1739
  "CVE-2023-41974",
1558
1740
  "CVE-2023-43000",
1741
+ "CVE-2023-43208",
1742
+ "CVE-2023-4346",
1559
1743
  "CVE-2023-43654",
1560
1744
  "CVE-2023-44221",
1561
1745
  "CVE-2023-44467",
1562
1746
  "CVE-2023-44487",
1747
+ "CVE-2023-45249",
1748
+ "CVE-2023-48365",
1749
+ "CVE-2023-48788",
1563
1750
  "CVE-2023-50224",
1564
1751
  "CVE-2023-50387",
1565
1752
  "CVE-2023-50868",
@@ -1572,6 +1759,7 @@
1572
1759
  "CVE-2023-6021",
1573
1760
  "CVE-2024-0129",
1574
1761
  "CVE-2024-0769",
1762
+ "CVE-2024-1086",
1575
1763
  "CVE-2024-11120",
1576
1764
  "CVE-2024-11182",
1577
1765
  "CVE-2024-11392",
@@ -1584,43 +1772,92 @@
1584
1772
  "CVE-2024-13161",
1585
1773
  "CVE-2024-1561",
1586
1774
  "CVE-2024-1708",
1775
+ "CVE-2024-20353",
1776
+ "CVE-2024-20359",
1777
+ "CVE-2024-20399",
1587
1778
  "CVE-2024-20439",
1588
1779
  "CVE-2024-20953",
1780
+ "CVE-2024-21287",
1589
1781
  "CVE-2024-21513",
1590
1782
  "CVE-2024-21575",
1591
1783
  "CVE-2024-21576",
1592
1784
  "CVE-2024-21762",
1785
+ "CVE-2024-23692",
1786
+ "CVE-2024-23897",
1787
+ "CVE-2024-24919",
1593
1788
  "CVE-2024-27132",
1594
1789
  "CVE-2024-27199",
1790
+ "CVE-2024-27348",
1595
1791
  "CVE-2024-27443",
1792
+ "CVE-2024-28986",
1793
+ "CVE-2024-28995",
1794
+ "CVE-2024-29745",
1795
+ "CVE-2024-29748",
1796
+ "CVE-2024-30051",
1797
+ "CVE-2024-3273",
1798
+ "CVE-2024-32896",
1799
+ "CVE-2024-34102",
1800
+ "CVE-2024-35250",
1801
+ "CVE-2024-36401",
1802
+ "CVE-2024-36971",
1596
1803
  "CVE-2024-37032",
1597
1804
  "CVE-2024-37079",
1805
+ "CVE-2024-38014",
1806
+ "CVE-2024-38080",
1807
+ "CVE-2024-38094",
1808
+ "CVE-2024-38106",
1809
+ "CVE-2024-38107",
1810
+ "CVE-2024-38178",
1811
+ "CVE-2024-38189",
1812
+ "CVE-2024-38193",
1598
1813
  "CVE-2024-38475",
1814
+ "CVE-2024-38856",
1599
1815
  "CVE-2024-39722",
1816
+ "CVE-2024-4040",
1600
1817
  "CVE-2024-42009",
1601
1818
  "CVE-2024-42478",
1602
1819
  "CVE-2024-42479",
1603
1820
  "CVE-2024-43468",
1821
+ "CVE-2024-4358",
1822
+ "CVE-2024-44309",
1823
+ "CVE-2024-4610",
1824
+ "CVE-2024-4671",
1825
+ "CVE-2024-4761",
1604
1826
  "CVE-2024-48248",
1827
+ "CVE-2024-4879",
1605
1828
  "CVE-2024-4885",
1606
1829
  "CVE-2024-4889",
1607
1830
  "CVE-2024-49035",
1831
+ "CVE-2024-4947",
1608
1832
  "CVE-2024-50050",
1609
1833
  "CVE-2024-50302",
1834
+ "CVE-2024-51567",
1835
+ "CVE-2024-5217",
1836
+ "CVE-2024-5274",
1610
1837
  "CVE-2024-53150",
1611
1838
  "CVE-2024-53197",
1839
+ "CVE-2024-53704",
1612
1840
  "CVE-2024-54085",
1613
1841
  "CVE-2024-56145",
1614
1842
  "CVE-2024-57726",
1843
+ "CVE-2024-57727",
1615
1844
  "CVE-2024-57728",
1616
1845
  "CVE-2024-57968",
1617
1846
  "CVE-2024-58136",
1618
1847
  "CVE-2024-6047",
1619
1848
  "CVE-2024-6587",
1849
+ "CVE-2024-6670",
1620
1850
  "CVE-2024-7399",
1851
+ "CVE-2024-7593",
1621
1852
  "CVE-2024-7694",
1853
+ "CVE-2024-7965",
1854
+ "CVE-2024-7971",
1622
1855
  "CVE-2024-8068",
1623
1856
  "CVE-2024-8069",
1857
+ "CVE-2024-8190",
1858
+ "CVE-2024-8963",
1859
+ "CVE-2024-9463",
1860
+ "CVE-2024-9465",
1624
1861
  "CVE-2025-0111",
1625
1862
  "CVE-2025-0282",
1626
1863
  "CVE-2025-10035",
@@ -1645,6 +1882,8 @@
1645
1882
  "CVE-2025-20393",
1646
1883
  "CVE-2025-21042",
1647
1884
  "CVE-2025-21043",
1885
+ "CVE-2025-21391",
1886
+ "CVE-2025-21418",
1648
1887
  "CVE-2025-21479",
1649
1888
  "CVE-2025-21480",
1650
1889
  "CVE-2025-21590",
@@ -1652,6 +1891,7 @@
1652
1891
  "CVE-2025-23254",
1653
1892
  "CVE-2025-24016",
1654
1893
  "CVE-2025-24054",
1894
+ "CVE-2025-24085",
1655
1895
  "CVE-2025-24201",
1656
1896
  "CVE-2025-24472",
1657
1897
  "CVE-2025-24813",
@@ -1880,13 +2120,18 @@
1880
2120
  "CVE-2026-45829",
1881
2121
  "CVE-2026-46300",
1882
2122
  "CVE-2026-46333",
2123
+ "CVE-2026-46817",
1883
2124
  "CVE-2026-48027",
1884
2125
  "CVE-2026-48172",
2126
+ "CVE-2026-48282",
1885
2127
  "CVE-2026-48558",
1886
2128
  "CVE-2026-48907",
2129
+ "CVE-2026-48908",
1887
2130
  "CVE-2026-50751",
1888
2131
  "CVE-2026-5281",
1889
2132
  "CVE-2026-54420",
2133
+ "CVE-2026-56291",
2134
+ "CVE-2026-58644",
1890
2135
  "CVE-2026-9082"
1891
2136
  ],
1892
2137
  "atlas_refs": [],
@@ -2030,6 +2275,24 @@
2030
2275
  "status": "open",
2031
2276
  "opened_date": "2026-05-13",
2032
2277
  "evidence_cves": [
2278
+ "CVE-2023-24955",
2279
+ "CVE-2023-7028",
2280
+ "CVE-2024-26169",
2281
+ "CVE-2024-29988",
2282
+ "CVE-2024-3400",
2283
+ "CVE-2024-37085",
2284
+ "CVE-2024-38094",
2285
+ "CVE-2024-38193",
2286
+ "CVE-2024-38213",
2287
+ "CVE-2024-38226",
2288
+ "CVE-2024-43451",
2289
+ "CVE-2024-49039",
2290
+ "CVE-2024-4947",
2291
+ "CVE-2024-51567",
2292
+ "CVE-2024-55591",
2293
+ "CVE-2024-55956",
2294
+ "CVE-2024-7971",
2295
+ "CVE-2025-21391",
2033
2296
  "CVE-2026-39987",
2034
2297
  "CVE-2026-42208",
2035
2298
  "CVE-2026-42897"
@@ -2068,7 +2331,15 @@
2068
2331
  "status": "open",
2069
2332
  "opened_date": "2026-03-15",
2070
2333
  "evidence_cves": [
2334
+ "CVE-2017-1000253",
2335
+ "CVE-2018-0824",
2336
+ "CVE-2020-0618",
2337
+ "CVE-2020-15415",
2338
+ "CVE-2021-31196",
2339
+ "CVE-2021-41277",
2340
+ "CVE-2022-0185",
2071
2341
  "CVE-2022-1471",
2342
+ "CVE-2022-2586",
2072
2343
  "CVE-2023-43654",
2073
2344
  "CVE-2023-44467",
2074
2345
  "CVE-2023-48022",
@@ -2077,22 +2348,42 @@
2077
2348
  "CVE-2023-6021",
2078
2349
  "CVE-2024-0129",
2079
2350
  "CVE-2024-0132",
2351
+ "CVE-2024-1086",
2080
2352
  "CVE-2024-11392",
2081
2353
  "CVE-2024-11393",
2082
2354
  "CVE-2024-11394",
2083
2355
  "CVE-2024-13059",
2084
2356
  "CVE-2024-1561",
2357
+ "CVE-2024-21413",
2085
2358
  "CVE-2024-21513",
2086
2359
  "CVE-2024-21575",
2087
2360
  "CVE-2024-21576",
2088
2361
  "CVE-2024-27132",
2362
+ "CVE-2024-29745",
2363
+ "CVE-2024-29748",
2364
+ "CVE-2024-30051",
2365
+ "CVE-2024-30088",
2366
+ "CVE-2024-35250",
2367
+ "CVE-2024-36971",
2089
2368
  "CVE-2024-37032",
2369
+ "CVE-2024-38014",
2370
+ "CVE-2024-38080",
2371
+ "CVE-2024-38107",
2372
+ "CVE-2024-38112",
2090
2373
  "CVE-2024-39722",
2374
+ "CVE-2024-40711",
2375
+ "CVE-2024-40766",
2091
2376
  "CVE-2024-42478",
2092
2377
  "CVE-2024-42479",
2378
+ "CVE-2024-4577",
2379
+ "CVE-2024-4610",
2093
2380
  "CVE-2024-4889",
2381
+ "CVE-2024-49138",
2094
2382
  "CVE-2024-50050",
2383
+ "CVE-2024-5274",
2095
2384
  "CVE-2024-6587",
2385
+ "CVE-2024-7965",
2386
+ "CVE-2024-8190",
2096
2387
  "CVE-2025-10585",
2097
2388
  "CVE-2025-1094",
2098
2389
  "CVE-2025-14174",
@@ -2123,6 +2414,7 @@
2123
2414
  "CVE-2026-24213",
2124
2415
  "CVE-2026-24214",
2125
2416
  "CVE-2026-24215",
2417
+ "CVE-2026-25089",
2126
2418
  "CVE-2026-25592",
2127
2419
  "CVE-2026-26015",
2128
2420
  "CVE-2026-26190",
@@ -2134,6 +2426,7 @@
2134
2426
  "CVE-2026-31431",
2135
2427
  "CVE-2026-34159",
2136
2428
  "CVE-2026-34926",
2429
+ "CVE-2026-39808",
2137
2430
  "CVE-2026-39884",
2138
2431
  "CVE-2026-40933",
2139
2432
  "CVE-2026-41091",
@@ -2143,6 +2436,7 @@
2143
2436
  "CVE-2026-45829",
2144
2437
  "CVE-2026-46300",
2145
2438
  "CVE-2026-46333",
2439
+ "CVE-2026-58644",
2146
2440
  "CVE-2026-9082",
2147
2441
  "MAL-2026-3083"
2148
2442
  ],
@@ -2297,6 +2591,8 @@
2297
2591
  "status": "open",
2298
2592
  "opened_date": "2026-03-01",
2299
2593
  "evidence_cves": [
2594
+ "CVE-2024-28987",
2595
+ "CVE-2024-37085",
2300
2596
  "CVE-2025-53773"
2301
2597
  ],
2302
2598
  "atlas_refs": [
@@ -2333,13 +2629,43 @@
2333
2629
  "opened_date": "2026-04-01",
2334
2630
  "evidence_cves": [
2335
2631
  "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
2632
+ "CVE-2008-4128",
2633
+ "CVE-2013-0643",
2634
+ "CVE-2013-0648",
2635
+ "CVE-2014-0497",
2636
+ "CVE-2017-3506",
2637
+ "CVE-2018-14933",
2638
+ "CVE-2019-16278",
2639
+ "CVE-2022-0185",
2640
+ "CVE-2022-23227",
2641
+ "CVE-2022-23748",
2642
+ "CVE-2022-2586",
2643
+ "CVE-2022-38028",
2644
+ "CVE-2023-25280",
2336
2645
  "CVE-2023-6016",
2646
+ "CVE-2024-1086",
2337
2647
  "CVE-2024-12366",
2338
2648
  "CVE-2024-24590",
2339
2649
  "CVE-2024-24591",
2650
+ "CVE-2024-29059",
2340
2651
  "CVE-2024-2912",
2341
2652
  "CVE-2024-3154",
2653
+ "CVE-2024-3272",
2654
+ "CVE-2024-38112",
2655
+ "CVE-2024-38189",
2656
+ "CVE-2024-40891",
2657
+ "CVE-2024-43093",
2658
+ "CVE-2024-43572",
2659
+ "CVE-2024-44308",
2660
+ "CVE-2024-4978",
2661
+ "CVE-2024-5274",
2662
+ "CVE-2024-53104",
2342
2663
  "CVE-2024-5565",
2664
+ "CVE-2024-55956",
2665
+ "CVE-2024-7965",
2666
+ "CVE-2024-9537",
2667
+ "CVE-2025-0411",
2668
+ "CVE-2025-24085",
2343
2669
  "CVE-2025-27520",
2344
2670
  "CVE-2025-3248",
2345
2671
  "CVE-2025-3466",
@@ -2355,6 +2681,7 @@
2355
2681
  "CVE-2026-42271",
2356
2682
  "CVE-2026-45247",
2357
2683
  "CVE-2026-48172",
2684
+ "CVE-2026-56290",
2358
2685
  "CVE-2026-8398"
2359
2686
  ],
2360
2687
  "atlas_refs": [
@@ -2500,25 +2827,88 @@
2500
2827
  "status": "open",
2501
2828
  "opened_date": "2026-05-01",
2502
2829
  "evidence_cves": [
2830
+ "CVE-2008-4128",
2831
+ "CVE-2014-100005",
2832
+ "CVE-2019-0344",
2833
+ "CVE-2019-7256",
2834
+ "CVE-2020-0618",
2835
+ "CVE-2020-14644",
2836
+ "CVE-2020-15069",
2837
+ "CVE-2020-15415",
2838
+ "CVE-2020-17519",
2839
+ "CVE-2020-2883",
2503
2840
  "CVE-2021-20035",
2841
+ "CVE-2021-20123",
2842
+ "CVE-2021-20124",
2843
+ "CVE-2021-31196",
2844
+ "CVE-2021-33044",
2845
+ "CVE-2021-33045",
2846
+ "CVE-2021-40655",
2847
+ "CVE-2021-44529",
2848
+ "CVE-2022-24816",
2504
2849
  "CVE-2022-36551",
2850
+ "CVE-2023-43208",
2851
+ "CVE-2023-4346",
2505
2852
  "CVE-2023-44221",
2853
+ "CVE-2023-45727",
2506
2854
  "CVE-2023-48022",
2855
+ "CVE-2023-48788",
2507
2856
  "CVE-2023-51449",
2508
2857
  "CVE-2023-6038",
2858
+ "CVE-2024-0012",
2509
2859
  "CVE-2024-0132",
2510
2860
  "CVE-2024-11120",
2861
+ "CVE-2024-11667",
2862
+ "CVE-2024-1212",
2863
+ "CVE-2024-12356",
2511
2864
  "CVE-2024-12450",
2512
2865
  "CVE-2024-1561",
2866
+ "CVE-2024-20353",
2867
+ "CVE-2024-20481",
2868
+ "CVE-2024-20767",
2513
2869
  "CVE-2024-21182",
2870
+ "CVE-2024-21413",
2514
2871
  "CVE-2024-21575",
2515
2872
  "CVE-2024-21576",
2873
+ "CVE-2024-23113",
2874
+ "CVE-2024-23692",
2875
+ "CVE-2024-23897",
2876
+ "CVE-2024-24919",
2877
+ "CVE-2024-28986",
2878
+ "CVE-2024-3272",
2879
+ "CVE-2024-3273",
2880
+ "CVE-2024-3400",
2881
+ "CVE-2024-34102",
2882
+ "CVE-2024-38812",
2883
+ "CVE-2024-39717",
2884
+ "CVE-2024-39891",
2885
+ "CVE-2024-4040",
2516
2886
  "CVE-2024-40635",
2887
+ "CVE-2024-40766",
2888
+ "CVE-2024-40890",
2889
+ "CVE-2024-41713",
2517
2890
  "CVE-2024-42478",
2518
2891
  "CVE-2024-42479",
2892
+ "CVE-2024-43451",
2893
+ "CVE-2024-4358",
2894
+ "CVE-2024-45519",
2895
+ "CVE-2024-4577",
2896
+ "CVE-2024-4879",
2897
+ "CVE-2024-50603",
2898
+ "CVE-2024-50623",
2899
+ "CVE-2024-5217",
2900
+ "CVE-2024-55591",
2519
2901
  "CVE-2024-6047",
2902
+ "CVE-2024-6670",
2903
+ "CVE-2024-8190",
2904
+ "CVE-2024-8956",
2905
+ "CVE-2024-8963",
2906
+ "CVE-2024-9474",
2907
+ "CVE-2024-9680",
2908
+ "CVE-2025-0108",
2520
2909
  "CVE-2025-1976",
2521
2910
  "CVE-2025-21590",
2911
+ "CVE-2025-23006",
2522
2912
  "CVE-2025-23266",
2523
2913
  "CVE-2025-24472",
2524
2914
  "CVE-2025-25297",
@@ -2528,18 +2918,25 @@
2528
2918
  "CVE-2025-56520",
2529
2919
  "CVE-2026-0257",
2530
2920
  "CVE-2026-10520",
2921
+ "CVE-2026-15409",
2531
2922
  "CVE-2026-20230",
2532
2923
  "CVE-2026-20262",
2533
2924
  "CVE-2026-22219",
2925
+ "CVE-2026-25089",
2534
2926
  "CVE-2026-3059",
2535
2927
  "CVE-2026-3060",
2536
2928
  "CVE-2026-34159",
2537
2929
  "CVE-2026-34908",
2538
2930
  "CVE-2026-34909",
2539
2931
  "CVE-2026-34910",
2932
+ "CVE-2026-39808",
2540
2933
  "CVE-2026-42897",
2934
+ "CVE-2026-46817",
2935
+ "CVE-2026-48282",
2541
2936
  "CVE-2026-50751",
2937
+ "CVE-2026-56164",
2542
2938
  "CVE-2026-5760",
2939
+ "CVE-2026-58644",
2543
2940
  "CVE-2026-7473"
2544
2941
  ],
2545
2942
  "atlas_refs": [
@@ -2756,51 +3153,88 @@
2756
3153
  "CVE-2011-0411",
2757
3154
  "CVE-2011-3402",
2758
3155
  "CVE-2012-1854",
3156
+ "CVE-2012-4792",
3157
+ "CVE-2013-0643",
3158
+ "CVE-2013-0648",
2759
3159
  "CVE-2013-3893",
2760
3160
  "CVE-2013-3918",
3161
+ "CVE-2014-0497",
3162
+ "CVE-2014-0502",
3163
+ "CVE-2014-100005",
3164
+ "CVE-2014-2120",
2761
3165
  "CVE-2014-3931",
2762
3166
  "CVE-2014-6278",
2763
3167
  "CVE-2015-7755",
2764
3168
  "CVE-2016-10033",
2765
3169
  "CVE-2016-7836",
3170
+ "CVE-2017-1000253",
2766
3171
  "CVE-2017-1000353",
2767
3172
  "CVE-2017-12637",
2768
3173
  "CVE-2017-3066",
2769
3174
  "CVE-2017-7921",
3175
+ "CVE-2018-0824",
2770
3176
  "CVE-2018-14634",
3177
+ "CVE-2018-14933",
2771
3178
  "CVE-2018-4063",
2772
3179
  "CVE-2018-8639",
3180
+ "CVE-2019-0344",
3181
+ "CVE-2019-11001",
2773
3182
  "CVE-2019-19006",
2774
3183
  "CVE-2019-5418",
2775
3184
  "CVE-2019-6693",
3185
+ "CVE-2019-7256",
2776
3186
  "CVE-2019-9621",
2777
3187
  "CVE-2019-9874",
2778
3188
  "CVE-2019-9875",
3189
+ "CVE-2020-0618",
3190
+ "CVE-2020-11023",
3191
+ "CVE-2020-13965",
3192
+ "CVE-2020-14644",
3193
+ "CVE-2020-15415",
2779
3194
  "CVE-2020-17103-REREGRESSION-2026",
3195
+ "CVE-2020-17519",
2780
3196
  "CVE-2020-24363",
2781
3197
  "CVE-2020-25078",
2782
3198
  "CVE-2020-25079",
3199
+ "CVE-2020-2883",
3200
+ "CVE-2020-29574",
2783
3201
  "CVE-2020-7796",
2784
3202
  "CVE-2020-9715",
2785
3203
  "CVE-2021-20035",
3204
+ "CVE-2021-20123",
3205
+ "CVE-2021-20124",
2786
3206
  "CVE-2021-21311",
2787
3207
  "CVE-2021-22054",
2788
3208
  "CVE-2021-22175",
2789
3209
  "CVE-2021-22555",
2790
3210
  "CVE-2021-22681",
3211
+ "CVE-2021-26086",
2791
3212
  "CVE-2021-26828",
2792
3213
  "CVE-2021-26829",
2793
3214
  "CVE-2021-30952",
3215
+ "CVE-2021-31196",
2794
3216
  "CVE-2021-32030",
3217
+ "CVE-2021-33045",
2795
3218
  "CVE-2021-33515",
2796
3219
  "CVE-2021-38371",
2797
3220
  "CVE-2021-39935",
3221
+ "CVE-2021-40407",
3222
+ "CVE-2021-41277",
2798
3223
  "CVE-2021-43226",
2799
3224
  "CVE-2021-43798",
3225
+ "CVE-2021-44207",
3226
+ "CVE-2021-44529",
3227
+ "CVE-2022-0185",
2800
3228
  "CVE-2022-0492",
2801
3229
  "CVE-2022-1471",
2802
3230
  "CVE-2022-20775",
3231
+ "CVE-2022-21445",
3232
+ "CVE-2022-22948",
3233
+ "CVE-2022-23748",
3234
+ "CVE-2022-24816",
3235
+ "CVE-2022-2586",
2803
3236
  "CVE-2022-37055",
3237
+ "CVE-2022-38028",
2804
3238
  "CVE-2022-40799",
2805
3239
  "CVE-2022-43769",
2806
3240
  "CVE-2022-43939",
@@ -2808,8 +3242,11 @@
2808
3242
  "CVE-2023-0386",
2809
3243
  "CVE-2023-20118",
2810
3244
  "CVE-2023-21529",
3245
+ "CVE-2023-24955",
3246
+ "CVE-2023-25280",
2811
3247
  "CVE-2023-2533",
2812
3248
  "CVE-2023-27351",
3249
+ "CVE-2023-28461",
2813
3250
  "CVE-2023-33538",
2814
3251
  "CVE-2023-34192",
2815
3252
  "CVE-2023-3519",
@@ -2818,10 +3255,15 @@
2818
3255
  "CVE-2023-39780",
2819
3256
  "CVE-2023-41974",
2820
3257
  "CVE-2023-43000",
3258
+ "CVE-2023-43208",
3259
+ "CVE-2023-4346",
2821
3260
  "CVE-2023-43654",
2822
3261
  "CVE-2023-44221",
2823
3262
  "CVE-2023-44467",
2824
3263
  "CVE-2023-44487",
3264
+ "CVE-2023-45727",
3265
+ "CVE-2023-48365",
3266
+ "CVE-2023-48788",
2825
3267
  "CVE-2023-50224",
2826
3268
  "CVE-2023-50387",
2827
3269
  "CVE-2023-50868",
@@ -2832,14 +3274,20 @@
2832
3274
  "CVE-2023-52163",
2833
3275
  "CVE-2023-6019",
2834
3276
  "CVE-2023-6021",
3277
+ "CVE-2023-7028",
2835
3278
  "CVE-2024-0129",
2836
3279
  "CVE-2024-0132",
2837
3280
  "CVE-2024-0769",
3281
+ "CVE-2024-1086",
2838
3282
  "CVE-2024-11120",
2839
3283
  "CVE-2024-11182",
2840
3284
  "CVE-2024-11392",
2841
3285
  "CVE-2024-11393",
2842
3286
  "CVE-2024-11394",
3287
+ "CVE-2024-11667",
3288
+ "CVE-2024-1212",
3289
+ "CVE-2024-12356",
3290
+ "CVE-2024-12686",
2843
3291
  "CVE-2024-12987",
2844
3292
  "CVE-2024-13059",
2845
3293
  "CVE-2024-13159",
@@ -2847,35 +3295,107 @@
2847
3295
  "CVE-2024-13161",
2848
3296
  "CVE-2024-1561",
2849
3297
  "CVE-2024-1708",
3298
+ "CVE-2024-20353",
3299
+ "CVE-2024-20359",
3300
+ "CVE-2024-20399",
2850
3301
  "CVE-2024-20439",
3302
+ "CVE-2024-20767",
2851
3303
  "CVE-2024-20953",
2852
3304
  "CVE-2024-21182",
3305
+ "CVE-2024-21287",
3306
+ "CVE-2024-21413",
2853
3307
  "CVE-2024-21513",
2854
3308
  "CVE-2024-21575",
2855
3309
  "CVE-2024-21576",
2856
3310
  "CVE-2024-21762",
3311
+ "CVE-2024-23113",
3312
+ "CVE-2024-23692",
3313
+ "CVE-2024-23897",
3314
+ "CVE-2024-24919",
3315
+ "CVE-2024-26169",
2857
3316
  "CVE-2024-27132",
2858
3317
  "CVE-2024-27199",
3318
+ "CVE-2024-27348",
2859
3319
  "CVE-2024-27443",
3320
+ "CVE-2024-28986",
3321
+ "CVE-2024-29745",
3322
+ "CVE-2024-29748",
3323
+ "CVE-2024-29824",
3324
+ "CVE-2024-30040",
3325
+ "CVE-2024-30051",
3326
+ "CVE-2024-30088",
3327
+ "CVE-2024-32113",
3328
+ "CVE-2024-3272",
3329
+ "CVE-2024-3273",
3330
+ "CVE-2024-32896",
3331
+ "CVE-2024-3393",
3332
+ "CVE-2024-3400",
3333
+ "CVE-2024-34102",
3334
+ "CVE-2024-35250",
3335
+ "CVE-2024-36401",
3336
+ "CVE-2024-36971",
2860
3337
  "CVE-2024-37032",
2861
3338
  "CVE-2024-37052",
2862
3339
  "CVE-2024-37060",
2863
3340
  "CVE-2024-37079",
3341
+ "CVE-2024-38014",
3342
+ "CVE-2024-38080",
3343
+ "CVE-2024-38094",
3344
+ "CVE-2024-38107",
3345
+ "CVE-2024-38112",
3346
+ "CVE-2024-38178",
3347
+ "CVE-2024-38189",
3348
+ "CVE-2024-38193",
3349
+ "CVE-2024-38217",
3350
+ "CVE-2024-38226",
2864
3351
  "CVE-2024-38475",
3352
+ "CVE-2024-38812",
3353
+ "CVE-2024-38813",
3354
+ "CVE-2024-38856",
3355
+ "CVE-2024-39717",
2865
3356
  "CVE-2024-39722",
3357
+ "CVE-2024-4040",
3358
+ "CVE-2024-40711",
3359
+ "CVE-2024-40766",
3360
+ "CVE-2024-40890",
3361
+ "CVE-2024-40891",
3362
+ "CVE-2024-41713",
2866
3363
  "CVE-2024-42009",
2867
3364
  "CVE-2024-42478",
2868
3365
  "CVE-2024-42479",
3366
+ "CVE-2024-43047",
3367
+ "CVE-2024-43461",
2869
3368
  "CVE-2024-43468",
3369
+ "CVE-2024-43572",
3370
+ "CVE-2024-43573",
3371
+ "CVE-2024-4358",
3372
+ "CVE-2024-44308",
3373
+ "CVE-2024-44309",
3374
+ "CVE-2024-45519",
3375
+ "CVE-2024-4577",
3376
+ "CVE-2024-4610",
3377
+ "CVE-2024-4671",
3378
+ "CVE-2024-4761",
2870
3379
  "CVE-2024-48248",
3380
+ "CVE-2024-4879",
2871
3381
  "CVE-2024-4885",
2872
3382
  "CVE-2024-4889",
2873
3383
  "CVE-2024-49035",
3384
+ "CVE-2024-49039",
3385
+ "CVE-2024-49138",
3386
+ "CVE-2024-4947",
2874
3387
  "CVE-2024-50050",
2875
3388
  "CVE-2024-50302",
3389
+ "CVE-2024-50603",
3390
+ "CVE-2024-50623",
3391
+ "CVE-2024-51378",
3392
+ "CVE-2024-5217",
3393
+ "CVE-2024-5274",
2876
3394
  "CVE-2024-53150",
2877
3395
  "CVE-2024-53197",
2878
3396
  "CVE-2024-54085",
3397
+ "CVE-2024-55550",
3398
+ "CVE-2024-55956",
2879
3399
  "CVE-2024-56145",
2880
3400
  "CVE-2024-57726",
2881
3401
  "CVE-2024-57728",
@@ -2883,12 +3403,25 @@
2883
3403
  "CVE-2024-58136",
2884
3404
  "CVE-2024-6047",
2885
3405
  "CVE-2024-6587",
3406
+ "CVE-2024-6670",
3407
+ "CVE-2024-7262",
2886
3408
  "CVE-2024-7399",
2887
3409
  "CVE-2024-7694",
3410
+ "CVE-2024-7965",
3411
+ "CVE-2024-7971",
2888
3412
  "CVE-2024-8068",
2889
3413
  "CVE-2024-8069",
3414
+ "CVE-2024-8190",
3415
+ "CVE-2024-9379",
3416
+ "CVE-2024-9380",
3417
+ "CVE-2024-9463",
3418
+ "CVE-2024-9465",
3419
+ "CVE-2024-9474",
3420
+ "CVE-2024-9537",
3421
+ "CVE-2024-9680",
2890
3422
  "CVE-2025-0111",
2891
3423
  "CVE-2025-0282",
3424
+ "CVE-2025-0994",
2892
3425
  "CVE-2025-10035",
2893
3426
  "CVE-2025-10164",
2894
3427
  "CVE-2025-10585",
@@ -2913,10 +3446,16 @@
2913
3446
  "CVE-2025-20393",
2914
3447
  "CVE-2025-21042",
2915
3448
  "CVE-2025-21043",
3449
+ "CVE-2025-21333",
3450
+ "CVE-2025-21334",
3451
+ "CVE-2025-21335",
3452
+ "CVE-2025-21418",
2916
3453
  "CVE-2025-21479",
2917
3454
  "CVE-2025-21480",
2918
3455
  "CVE-2025-21590",
2919
3456
  "CVE-2025-22457",
3457
+ "CVE-2025-23006",
3458
+ "CVE-2025-23209",
2920
3459
  "CVE-2025-23254",
2921
3460
  "CVE-2025-23266",
2922
3461
  "CVE-2025-24016",
@@ -3080,6 +3619,8 @@
3080
3619
  "CVE-2026-12569",
3081
3620
  "CVE-2026-1281",
3082
3621
  "CVE-2026-1340",
3622
+ "CVE-2026-15409",
3623
+ "CVE-2026-15410",
3083
3624
  "CVE-2026-1603",
3084
3625
  "CVE-2026-1731",
3085
3626
  "CVE-2026-20045",
@@ -3117,6 +3658,7 @@
3117
3658
  "CVE-2026-2441",
3118
3659
  "CVE-2026-24423",
3119
3660
  "CVE-2026-24858",
3661
+ "CVE-2026-25089",
3120
3662
  "CVE-2026-25108",
3121
3663
  "CVE-2026-25592",
3122
3664
  "CVE-2026-26015",
@@ -3149,6 +3691,7 @@
3149
3691
  "CVE-2026-35616",
3150
3692
  "CVE-2026-3909",
3151
3693
  "CVE-2026-3910",
3694
+ "CVE-2026-39808",
3152
3695
  "CVE-2026-40933",
3153
3696
  "CVE-2026-41091",
3154
3697
  "CVE-2026-41940",
@@ -3162,11 +3705,18 @@
3162
3705
  "CVE-2026-45829",
3163
3706
  "CVE-2026-46300",
3164
3707
  "CVE-2026-46333",
3708
+ "CVE-2026-46817",
3709
+ "CVE-2026-48282",
3165
3710
  "CVE-2026-48558",
3166
3711
  "CVE-2026-48907",
3712
+ "CVE-2026-48908",
3713
+ "CVE-2026-48939",
3167
3714
  "CVE-2026-50751",
3168
3715
  "CVE-2026-5281",
3169
3716
  "CVE-2026-54420",
3717
+ "CVE-2026-56164",
3718
+ "CVE-2026-56291",
3719
+ "CVE-2026-58644",
3170
3720
  "CVE-2026-6973",
3171
3721
  "CVE-2026-7473",
3172
3722
  "CVE-2026-9082"
@@ -3201,12 +3751,31 @@
3201
3751
  "opened_date": "2026-02-01",
3202
3752
  "evidence_cves": [
3203
3753
  "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
3754
+ "CVE-2012-4792",
3755
+ "CVE-2016-3714",
3756
+ "CVE-2018-0824",
3757
+ "CVE-2020-13965",
3204
3758
  "CVE-2023-6016",
3205
3759
  "CVE-2023-6571",
3206
3760
  "CVE-2024-12366",
3207
3761
  "CVE-2024-2912",
3762
+ "CVE-2024-29988",
3763
+ "CVE-2024-30040",
3764
+ "CVE-2024-37383",
3765
+ "CVE-2024-38193",
3766
+ "CVE-2024-38213",
3767
+ "CVE-2024-38217",
3768
+ "CVE-2024-43047",
3769
+ "CVE-2024-43461",
3770
+ "CVE-2024-43573",
3771
+ "CVE-2024-4671",
3772
+ "CVE-2024-4947",
3773
+ "CVE-2024-4978",
3208
3774
  "CVE-2024-5565",
3775
+ "CVE-2024-7971",
3776
+ "CVE-2024-8957",
3209
3777
  "CVE-2024-9526",
3778
+ "CVE-2025-0411",
3210
3779
  "CVE-2025-11837",
3211
3780
  "CVE-2025-27363",
3212
3781
  "CVE-2025-27520",
@@ -3300,7 +3869,9 @@
3300
3869
  "real_requirement": "800-63B Rev 4 must add an AAL-A (agent assurance level) construct: per-invocation authenticator binding, capability-scoped tokens (what this agent is permitted to do this run), agent-to-agent delegation chains with non-repudiation, and explicit cross-walk to eIDAS 2.0 attestations, UK GPG 45, AU TDIF, and ISO 29115 for cross-border agent identity.",
3301
3870
  "status": "open",
3302
3871
  "opened_date": "2026-05-11",
3303
- "evidence_cves": [],
3872
+ "evidence_cves": [
3873
+ "CVE-2024-28987"
3874
+ ],
3304
3875
  "atlas_refs": [
3305
3876
  "AML.T0051",
3306
3877
  "AML.T0054"
@@ -3708,6 +4279,10 @@
3708
4279
  "CVE-2023-51765",
3709
4280
  "CVE-2023-51766",
3710
4281
  "CVE-2024-21762",
4282
+ "CVE-2024-29824",
4283
+ "CVE-2024-34102",
4284
+ "CVE-2024-4577",
4285
+ "CVE-2024-9379",
3711
4286
  "CVE-2025-0282",
3712
4287
  "CVE-2025-22457",
3713
4288
  "CVE-2025-31161",
@@ -4035,6 +4610,7 @@
4035
4610
  "status": "open",
4036
4611
  "opened_date": "2026-03-01",
4037
4612
  "evidence_cves": [
4613
+ "CVE-2024-6670",
4038
4614
  "CVE-2025-53773"
4039
4615
  ],
4040
4616
  "atlas_refs": [
@@ -4066,7 +4642,12 @@
4066
4642
  "real_requirement": "CC7 anomaly detection must include AI-specific threat signatures: baseline expected AI API usage per system/process, alert on AI API queries from security-sensitive processes, monitor AI tool action logs for out-of-scope actions, include AI-as-C2 in threat model.",
4067
4643
  "status": "open",
4068
4644
  "opened_date": "2026-02-01",
4069
- "evidence_cves": [],
4645
+ "evidence_cves": [
4646
+ "CVE-2024-26169",
4647
+ "CVE-2024-28986",
4648
+ "CVE-2024-38107",
4649
+ "CVE-2024-9537"
4650
+ ],
4070
4651
  "atlas_refs": [
4071
4652
  "AML.T0096",
4072
4653
  "AML.T0017"
@@ -4240,6 +4821,10 @@
4240
4821
  "status": "open",
4241
4822
  "opened_date": "2026-05-13",
4242
4823
  "evidence_cves": [
4824
+ "CVE-2018-19410",
4825
+ "CVE-2018-9276",
4826
+ "CVE-2020-2883",
4827
+ "CVE-2021-33045",
4243
4828
  "CVE-2022-1471",
4244
4829
  "CVE-2023-43654",
4245
4830
  "CVE-2023-43791",
@@ -4247,9 +4832,17 @@
4247
4832
  "CVE-2023-48022",
4248
4833
  "CVE-2023-6019",
4249
4834
  "CVE-2023-6021",
4835
+ "CVE-2024-0012",
4250
4836
  "CVE-2024-12776",
4837
+ "CVE-2024-28995",
4838
+ "CVE-2024-4358",
4839
+ "CVE-2024-45195",
4251
4840
  "CVE-2024-4889",
4841
+ "CVE-2024-49138",
4842
+ "CVE-2024-57727",
4252
4843
  "CVE-2024-6587",
4844
+ "CVE-2024-7593",
4845
+ "CVE-2024-8956",
4253
4846
  "CVE-2025-1796",
4254
4847
  "CVE-2025-64513",
4255
4848
  "CVE-2025-69286",
@@ -4260,7 +4853,10 @@
4260
4853
  "CVE-2026-26190",
4261
4854
  "CVE-2026-41947",
4262
4855
  "CVE-2026-41950",
4263
- "CVE-2026-50751"
4856
+ "CVE-2026-50751",
4857
+ "CVE-2026-55255",
4858
+ "CVE-2026-56155",
4859
+ "CVE-2026-56290"
4264
4860
  ],
4265
4861
  "atlas_refs": [
4266
4862
  "AML.T0010",
@@ -4295,7 +4891,16 @@
4295
4891
  "real_requirement": "Security monitoring includes prompt/response content classification on egress to AI providers, MCP tool-call audit trail (model decision + tool name + arguments + result), AI-API traffic baselines per service identity with anomaly alerts, and unified retention covering AI events alongside classical telemetry.",
4296
4892
  "status": "open",
4297
4893
  "opened_date": "2026-05-13",
4298
- "evidence_cves": [],
4894
+ "evidence_cves": [
4895
+ "CVE-2014-2120",
4896
+ "CVE-2020-13965",
4897
+ "CVE-2024-23897",
4898
+ "CVE-2024-24919",
4899
+ "CVE-2024-38094",
4900
+ "CVE-2024-41710",
4901
+ "CVE-2024-49039",
4902
+ "CVE-2025-0994"
4903
+ ],
4299
4904
  "atlas_refs": [
4300
4905
  "AML.T0096",
4301
4906
  "AML.T0024",
@@ -4330,7 +4935,13 @@
4330
4935
  "real_requirement": "Response plans include live kernel patching as a documented capability with operator drill cadence; AI-incident playbooks cover model rollback, prompt classifier updates, MCP allowlist tightening; backups validate AI-system artefacts; recovery clocks align to NIS2 24h + DORA 4h + GDPR 72h notification matrix.",
4331
4936
  "status": "open",
4332
4937
  "opened_date": "2026-05-13",
4333
- "evidence_cves": [],
4938
+ "evidence_cves": [
4939
+ "CVE-2024-20481",
4940
+ "CVE-2024-3393",
4941
+ "CVE-2024-51567",
4942
+ "CVE-2025-21391",
4943
+ "CVE-2025-21418"
4944
+ ],
4334
4945
  "atlas_refs": [],
4335
4946
  "attack_refs": [
4336
4947
  "T1068"
@@ -4728,7 +5339,11 @@
4728
5339
  "real_requirement": "Add a control-objective footnote requiring inventory of OAuth consent grants + federated-trust configuration + cross-tenant access settings, with documented change-control for each modification and continuous alerting on high-risk grants.",
4729
5340
  "status": "open",
4730
5341
  "opened_date": "2026-05-15",
4731
- "evidence_cves": [],
5342
+ "evidence_cves": [
5343
+ "CVE-2023-7028",
5344
+ "CVE-2024-37085",
5345
+ "CVE-2026-56155"
5346
+ ],
4732
5347
  "atlas_refs": [],
4733
5348
  "attack_refs": [
4734
5349
  "T1098.001",
@@ -5432,37 +6047,105 @@
5432
6047
  "status": "open",
5433
6048
  "opened_date": "2026-05-15",
5434
6049
  "evidence_cves": [
6050
+ "CVE-2012-4792",
6051
+ "CVE-2013-0643",
6052
+ "CVE-2013-0648",
6053
+ "CVE-2014-0497",
5435
6054
  "CVE-2017-12637",
5436
6055
  "CVE-2017-3066",
6056
+ "CVE-2018-14933",
6057
+ "CVE-2018-19410",
5437
6058
  "CVE-2018-8639",
6059
+ "CVE-2018-9276",
6060
+ "CVE-2019-0344",
6061
+ "CVE-2019-11001",
5438
6062
  "CVE-2019-9874",
5439
6063
  "CVE-2019-9875",
6064
+ "CVE-2020-11023",
6065
+ "CVE-2020-14644",
6066
+ "CVE-2020-15069",
6067
+ "CVE-2020-29574",
6068
+ "CVE-2021-26086",
6069
+ "CVE-2021-44207",
6070
+ "CVE-2021-44529",
6071
+ "CVE-2022-21445",
6072
+ "CVE-2022-23227",
6073
+ "CVE-2022-24816",
5440
6074
  "CVE-2022-43769",
5441
6075
  "CVE-2022-43939",
5442
6076
  "CVE-2023-20118",
6077
+ "CVE-2023-28461",
5443
6078
  "CVE-2023-34192",
5444
6079
  "CVE-2023-3519",
6080
+ "CVE-2023-45727",
5445
6081
  "CVE-2023-6571",
6082
+ "CVE-2024-0012",
6083
+ "CVE-2024-11680",
5446
6084
  "CVE-2024-12366",
6085
+ "CVE-2024-12686",
5447
6086
  "CVE-2024-13159",
5448
6087
  "CVE-2024-13160",
5449
6088
  "CVE-2024-13161",
6089
+ "CVE-2024-20359",
5450
6090
  "CVE-2024-20439",
6091
+ "CVE-2024-20767",
5451
6092
  "CVE-2024-20953",
6093
+ "CVE-2024-21287",
6094
+ "CVE-2024-27348",
6095
+ "CVE-2024-28987",
6096
+ "CVE-2024-29059",
5452
6097
  "CVE-2024-2912",
6098
+ "CVE-2024-29824",
6099
+ "CVE-2024-32113",
6100
+ "CVE-2024-34102",
6101
+ "CVE-2024-36401",
5453
6102
  "CVE-2024-38475",
6103
+ "CVE-2024-38813",
6104
+ "CVE-2024-40890",
6105
+ "CVE-2024-40891",
6106
+ "CVE-2024-41710",
6107
+ "CVE-2024-41713",
6108
+ "CVE-2024-43047",
6109
+ "CVE-2024-43093",
6110
+ "CVE-2024-43461",
6111
+ "CVE-2024-43572",
6112
+ "CVE-2024-43573",
6113
+ "CVE-2024-44308",
6114
+ "CVE-2024-44309",
6115
+ "CVE-2024-4671",
6116
+ "CVE-2024-4761",
5454
6117
  "CVE-2024-48248",
6118
+ "CVE-2024-4879",
5455
6119
  "CVE-2024-4885",
5456
6120
  "CVE-2024-49035",
5457
6121
  "CVE-2024-50302",
6122
+ "CVE-2024-5217",
6123
+ "CVE-2024-53104",
5458
6124
  "CVE-2024-53150",
5459
6125
  "CVE-2024-53197",
6126
+ "CVE-2024-55550",
5460
6127
  "CVE-2024-5565",
6128
+ "CVE-2024-57727",
5461
6129
  "CVE-2024-57968",
5462
6130
  "CVE-2024-58136",
6131
+ "CVE-2024-6670",
6132
+ "CVE-2024-7593",
6133
+ "CVE-2024-8956",
6134
+ "CVE-2024-8957",
6135
+ "CVE-2024-9379",
6136
+ "CVE-2024-9380",
5463
6137
  "CVE-2024-9526",
6138
+ "CVE-2024-9537",
5464
6139
  "CVE-2025-0111",
6140
+ "CVE-2025-0411",
6141
+ "CVE-2025-21333",
6142
+ "CVE-2025-21334",
6143
+ "CVE-2025-21335",
6144
+ "CVE-2025-21418",
6145
+ "CVE-2025-23006",
6146
+ "CVE-2025-23209",
5465
6147
  "CVE-2025-24054",
6148
+ "CVE-2025-24085",
5466
6149
  "CVE-2025-24813",
5467
6150
  "CVE-2025-24983",
5468
6151
  "CVE-2025-24984",
@@ -5488,9 +6171,15 @@
5488
6171
  "CVE-2026-20253",
5489
6172
  "CVE-2026-42945",
5490
6173
  "CVE-2026-45659",
6174
+ "CVE-2026-46817",
6175
+ "CVE-2026-48282",
5491
6176
  "CVE-2026-48558",
5492
6177
  "CVE-2026-48907",
5493
- "CVE-2026-54420"
6178
+ "CVE-2026-48908",
6179
+ "CVE-2026-54420",
6180
+ "CVE-2026-55255",
6181
+ "CVE-2026-56155",
6182
+ "CVE-2026-56291"
5494
6183
  ],
5495
6184
  "atlas_refs": [],
5496
6185
  "attack_refs": [
@@ -5541,6 +6230,7 @@
5541
6230
  "CVE-2023-6021",
5542
6231
  "CVE-2023-6038",
5543
6232
  "CVE-2023-6571",
6233
+ "CVE-2024-0012",
5544
6234
  "CVE-2024-0129",
5545
6235
  "CVE-2024-0132",
5546
6236
  "CVE-2024-11392",
@@ -5556,6 +6246,7 @@
5556
6246
  "CVE-2024-21575",
5557
6247
  "CVE-2024-21576",
5558
6248
  "CVE-2024-21762",
6249
+ "CVE-2024-23897",
5559
6250
  "CVE-2024-24590",
5560
6251
  "CVE-2024-24591",
5561
6252
  "CVE-2024-27132",
@@ -5567,9 +6258,12 @@
5567
6258
  "CVE-2024-39722",
5568
6259
  "CVE-2024-42478",
5569
6260
  "CVE-2024-42479",
6261
+ "CVE-2024-47575",
6262
+ "CVE-2024-4879",
5570
6263
  "CVE-2024-4889",
5571
6264
  "CVE-2024-50050",
5572
6265
  "CVE-2024-5565",
6266
+ "CVE-2024-55956",
5573
6267
  "CVE-2024-6587",
5574
6268
  "CVE-2024-9526",
5575
6269
  "CVE-2025-0282",
@@ -5690,16 +6384,36 @@
5690
6384
  "status": "open",
5691
6385
  "opened_date": "2026-05-15",
5692
6386
  "evidence_cves": [
6387
+ "CVE-2014-100005",
6388
+ "CVE-2020-29574",
6389
+ "CVE-2021-40655",
6390
+ "CVE-2021-41277",
5693
6391
  "CVE-2022-0492",
5694
6392
  "CVE-2022-36551",
5695
6393
  "CVE-2023-43791",
5696
6394
  "CVE-2023-47117",
5697
6395
  "CVE-2023-6038",
6396
+ "CVE-2024-0012",
6397
+ "CVE-2024-11680",
5698
6398
  "CVE-2024-12776",
5699
6399
  "CVE-2024-1709",
5700
6400
  "CVE-2024-21182",
6401
+ "CVE-2024-21287",
6402
+ "CVE-2024-28995",
5701
6403
  "CVE-2024-31462",
6404
+ "CVE-2024-32113",
6405
+ "CVE-2024-37085",
6406
+ "CVE-2024-38856",
6407
+ "CVE-2024-39891",
6408
+ "CVE-2024-40766",
6409
+ "CVE-2024-4358",
6410
+ "CVE-2024-45195",
6411
+ "CVE-2024-47575",
6412
+ "CVE-2024-51378",
6413
+ "CVE-2024-51567",
6414
+ "CVE-2024-57727",
5702
6415
  "CVE-2025-1796",
6416
+ "CVE-2025-24200",
5703
6417
  "CVE-2025-25297",
5704
6418
  "CVE-2025-3248",
5705
6419
  "CVE-2025-3466",
@@ -5721,6 +6435,7 @@
5721
6435
  "CVE-2026-45247",
5722
6436
  "CVE-2026-48172",
5723
6437
  "CVE-2026-50751",
6438
+ "CVE-2026-55255",
5724
6439
  "CVE-2026-7482"
5725
6440
  ],
5726
6441
  "atlas_refs": [
@@ -5816,6 +6531,8 @@
5816
6531
  "CVE-2017-1000353",
5817
6532
  "CVE-2017-7921",
5818
6533
  "CVE-2018-4063",
6534
+ "CVE-2018-9276",
6535
+ "CVE-2019-11001",
5819
6536
  "CVE-2019-19006",
5820
6537
  "CVE-2019-6693",
5821
6538
  "CVE-2020-24363",
@@ -5824,26 +6541,51 @@
5824
6541
  "CVE-2021-22681",
5825
6542
  "CVE-2021-26828",
5826
6543
  "CVE-2021-32030",
6544
+ "CVE-2021-40407",
5827
6545
  "CVE-2022-0492",
6546
+ "CVE-2022-22948",
5828
6547
  "CVE-2022-37055",
6548
+ "CVE-2022-38028",
5829
6549
  "CVE-2022-40799",
5830
6550
  "CVE-2022-48503",
5831
6551
  "CVE-2023-0386",
5832
6552
  "CVE-2023-21529",
6553
+ "CVE-2023-24955",
5833
6554
  "CVE-2023-2533",
5834
6555
  "CVE-2023-27351",
5835
6556
  "CVE-2023-33538",
5836
6557
  "CVE-2023-39780",
6558
+ "CVE-2023-48788",
5837
6559
  "CVE-2023-50224",
5838
6560
  "CVE-2023-52163",
6561
+ "CVE-2024-12686",
5839
6562
  "CVE-2024-12987",
6563
+ "CVE-2024-20359",
6564
+ "CVE-2024-20399",
6565
+ "CVE-2024-26169",
6566
+ "CVE-2024-30088",
6567
+ "CVE-2024-32896",
6568
+ "CVE-2024-35250",
6569
+ "CVE-2024-36971",
5840
6570
  "CVE-2024-37079",
6571
+ "CVE-2024-38014",
6572
+ "CVE-2024-38080",
6573
+ "CVE-2024-38094",
6574
+ "CVE-2024-38813",
6575
+ "CVE-2024-40711",
6576
+ "CVE-2024-41710",
5841
6577
  "CVE-2024-43468",
6578
+ "CVE-2024-49138",
5842
6579
  "CVE-2024-54085",
6580
+ "CVE-2024-55550",
5843
6581
  "CVE-2024-56145",
5844
6582
  "CVE-2024-57726",
5845
6583
  "CVE-2024-7694",
5846
6584
  "CVE-2024-8069",
6585
+ "CVE-2024-9380",
6586
+ "CVE-2024-9463",
6587
+ "CVE-2024-9465",
6588
+ "CVE-2025-0994",
5847
6589
  "CVE-2025-10035",
5848
6590
  "CVE-2025-10725",
5849
6591
  "CVE-2025-11371",
@@ -5861,6 +6603,9 @@
5861
6603
  "CVE-2025-20393",
5862
6604
  "CVE-2025-21042",
5863
6605
  "CVE-2025-21043",
6606
+ "CVE-2025-21333",
6607
+ "CVE-2025-21334",
6608
+ "CVE-2025-21335",
5864
6609
  "CVE-2025-24016",
5865
6610
  "CVE-2025-24472",
5866
6611
  "CVE-2025-24893",
@@ -5947,6 +6692,7 @@
5947
6692
  "CVE-2025-9377",
5948
6693
  "CVE-2026-1281",
5949
6694
  "CVE-2026-1340",
6695
+ "CVE-2026-15410",
5950
6696
  "CVE-2026-1603",
5951
6697
  "CVE-2026-1731",
5952
6698
  "CVE-2026-20045",
@@ -5991,6 +6737,8 @@
5991
6737
  "CVE-2026-48172",
5992
6738
  "CVE-2026-48907",
5993
6739
  "CVE-2026-54420",
6740
+ "CVE-2026-55255",
6741
+ "CVE-2026-56155",
5994
6742
  "CVE-2026-6973"
5995
6743
  ],
5996
6744
  "atlas_refs": [],
@@ -6071,11 +6819,21 @@
6071
6819
  "opened_date": "2026-05-15",
6072
6820
  "evidence_cves": [
6073
6821
  "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
6822
+ "CVE-2024-29988",
6823
+ "CVE-2024-30040",
6824
+ "CVE-2024-38213",
6825
+ "CVE-2024-38217",
6826
+ "CVE-2024-38226",
6827
+ "CVE-2024-43461",
6828
+ "CVE-2024-4978",
6829
+ "CVE-2024-53104",
6830
+ "CVE-2024-7262",
6074
6831
  "CVE-2025-11837",
6075
6832
  "CVE-2025-30400",
6076
6833
  "CVE-2026-11645",
6077
6834
  "CVE-2026-32202",
6078
6835
  "CVE-2026-33825",
6836
+ "CVE-2026-56290",
6079
6837
  "CVE-2026-6973"
6080
6838
  ],
6081
6839
  "atlas_refs": [],
@@ -6199,25 +6957,48 @@
6199
6957
  "opened_date": "2026-05-17",
6200
6958
  "evidence_cves": [
6201
6959
  "CVE-2011-0411",
6960
+ "CVE-2013-0643",
6961
+ "CVE-2014-0502",
6962
+ "CVE-2016-3714",
6963
+ "CVE-2017-1000253",
6202
6964
  "CVE-2017-12637",
6203
6965
  "CVE-2017-3066",
6966
+ "CVE-2017-3506",
6204
6967
  "CVE-2018-8639",
6968
+ "CVE-2019-0344",
6969
+ "CVE-2019-16278",
6205
6970
  "CVE-2019-9874",
6206
6971
  "CVE-2019-9875",
6972
+ "CVE-2020-11023",
6973
+ "CVE-2020-15069",
6974
+ "CVE-2020-15415",
6975
+ "CVE-2020-17519",
6976
+ "CVE-2020-29574",
6207
6977
  "CVE-2021-20035",
6978
+ "CVE-2021-26086",
6208
6979
  "CVE-2021-33515",
6209
6980
  "CVE-2021-38371",
6981
+ "CVE-2021-44207",
6982
+ "CVE-2021-44529",
6210
6983
  "CVE-2022-0492",
6984
+ "CVE-2022-21445",
6985
+ "CVE-2022-23748",
6211
6986
  "CVE-2022-23812",
6212
6987
  "CVE-2022-36551",
6988
+ "CVE-2022-38028",
6213
6989
  "CVE-2022-43769",
6214
6990
  "CVE-2022-43939",
6215
6991
  "CVE-2023-20118",
6992
+ "CVE-2023-25280",
6993
+ "CVE-2023-28461",
6216
6994
  "CVE-2023-34192",
6995
+ "CVE-2023-4346",
6217
6996
  "CVE-2023-43791",
6218
6997
  "CVE-2023-44221",
6219
6998
  "CVE-2023-44467",
6999
+ "CVE-2023-45727",
6220
7000
  "CVE-2023-47117",
7001
+ "CVE-2023-48365",
6221
7002
  "CVE-2023-51449",
6222
7003
  "CVE-2023-6016",
6223
7004
  "CVE-2023-6038",
@@ -6228,56 +7009,127 @@
6228
7009
  "CVE-2024-11392",
6229
7010
  "CVE-2024-11393",
6230
7011
  "CVE-2024-11394",
7012
+ "CVE-2024-11667",
7013
+ "CVE-2024-11680",
7014
+ "CVE-2024-1212",
7015
+ "CVE-2024-12356",
6231
7016
  "CVE-2024-12366",
6232
7017
  "CVE-2024-12450",
7018
+ "CVE-2024-12686",
6233
7019
  "CVE-2024-13059",
6234
7020
  "CVE-2024-13159",
6235
7021
  "CVE-2024-13160",
6236
7022
  "CVE-2024-13161",
6237
7023
  "CVE-2024-1561",
6238
7024
  "CVE-2024-20439",
7025
+ "CVE-2024-20767",
6239
7026
  "CVE-2024-20953",
6240
7027
  "CVE-2024-21182",
7028
+ "CVE-2024-21287",
7029
+ "CVE-2024-21413",
6241
7030
  "CVE-2024-21513",
6242
7031
  "CVE-2024-21575",
6243
7032
  "CVE-2024-21576",
6244
7033
  "CVE-2024-21762",
7034
+ "CVE-2024-23113",
6245
7035
  "CVE-2024-24590",
6246
7036
  "CVE-2024-24591",
6247
7037
  "CVE-2024-27132",
7038
+ "CVE-2024-27348",
7039
+ "CVE-2024-29059",
6248
7040
  "CVE-2024-2912",
7041
+ "CVE-2024-29748",
7042
+ "CVE-2024-29824",
7043
+ "CVE-2024-29988",
7044
+ "CVE-2024-30088",
6249
7045
  "CVE-2024-31462",
7046
+ "CVE-2024-32113",
7047
+ "CVE-2024-32896",
7048
+ "CVE-2024-3400",
7049
+ "CVE-2024-36401",
6250
7050
  "CVE-2024-37032",
6251
7051
  "CVE-2024-37052",
6252
7052
  "CVE-2024-37060",
7053
+ "CVE-2024-37383",
7054
+ "CVE-2024-38106",
7055
+ "CVE-2024-38112",
7056
+ "CVE-2024-38178",
7057
+ "CVE-2024-38189",
7058
+ "CVE-2024-38217",
7059
+ "CVE-2024-38226",
6253
7060
  "CVE-2024-38475",
7061
+ "CVE-2024-38812",
7062
+ "CVE-2024-38813",
7063
+ "CVE-2024-38856",
7064
+ "CVE-2024-39717",
6254
7065
  "CVE-2024-39722",
7066
+ "CVE-2024-4040",
7067
+ "CVE-2024-40711",
7068
+ "CVE-2024-40890",
7069
+ "CVE-2024-40891",
7070
+ "CVE-2024-41713",
6255
7071
  "CVE-2024-42478",
6256
7072
  "CVE-2024-42479",
7073
+ "CVE-2024-43047",
7074
+ "CVE-2024-43093",
7075
+ "CVE-2024-43451",
7076
+ "CVE-2024-43572",
7077
+ "CVE-2024-43573",
7078
+ "CVE-2024-44308",
7079
+ "CVE-2024-44309",
7080
+ "CVE-2024-45519",
7081
+ "CVE-2024-4610",
7082
+ "CVE-2024-47575",
7083
+ "CVE-2024-4761",
6257
7084
  "CVE-2024-48248",
6258
7085
  "CVE-2024-4885",
6259
7086
  "CVE-2024-49035",
6260
7087
  "CVE-2024-50050",
6261
7088
  "CVE-2024-50302",
7089
+ "CVE-2024-50603",
7090
+ "CVE-2024-50623",
7091
+ "CVE-2024-51378",
7092
+ "CVE-2024-53104",
6262
7093
  "CVE-2024-53150",
6263
7094
  "CVE-2024-53197",
7095
+ "CVE-2024-53704",
7096
+ "CVE-2024-55550",
7097
+ "CVE-2024-55591",
6264
7098
  "CVE-2024-5565",
6265
7099
  "CVE-2024-57968",
6266
7100
  "CVE-2024-58136",
7101
+ "CVE-2024-5910",
6267
7102
  "CVE-2024-6047",
7103
+ "CVE-2024-7262",
7104
+ "CVE-2024-7971",
7105
+ "CVE-2024-8957",
7106
+ "CVE-2024-8963",
7107
+ "CVE-2024-9379",
7108
+ "CVE-2024-9380",
7109
+ "CVE-2024-9474",
6268
7110
  "CVE-2024-9526",
7111
+ "CVE-2024-9680",
7112
+ "CVE-2025-0108",
6269
7113
  "CVE-2025-0111",
6270
7114
  "CVE-2025-0282",
7115
+ "CVE-2025-0411",
6271
7116
  "CVE-2025-10164",
6272
7117
  "CVE-2025-1316",
6273
7118
  "CVE-2025-1550",
6274
7119
  "CVE-2025-1753",
6275
7120
  "CVE-2025-1976",
7121
+ "CVE-2025-21333",
7122
+ "CVE-2025-21334",
7123
+ "CVE-2025-21335",
6276
7124
  "CVE-2025-21590",
6277
7125
  "CVE-2025-22457",
7126
+ "CVE-2025-23006",
7127
+ "CVE-2025-23209",
6278
7128
  "CVE-2025-23254",
6279
7129
  "CVE-2025-23266",
6280
7130
  "CVE-2025-24054",
7131
+ "CVE-2025-24085",
7132
+ "CVE-2025-24200",
6281
7133
  "CVE-2025-24472",
6282
7134
  "CVE-2025-24813",
6283
7135
  "CVE-2025-24983",
@@ -6326,6 +7178,8 @@
6326
7178
  "CVE-2026-10520",
6327
7179
  "CVE-2026-11645",
6328
7180
  "CVE-2026-12569",
7181
+ "CVE-2026-15409",
7182
+ "CVE-2026-15410",
6329
7183
  "CVE-2026-20230",
6330
7184
  "CVE-2026-20253",
6331
7185
  "CVE-2026-20262",
@@ -6338,6 +7192,7 @@
6338
7192
  "CVE-2026-24213",
6339
7193
  "CVE-2026-24214",
6340
7194
  "CVE-2026-24215",
7195
+ "CVE-2026-25089",
6341
7196
  "CVE-2026-25592",
6342
7197
  "CVE-2026-26015",
6343
7198
  "CVE-2026-28318",
@@ -6356,6 +7211,7 @@
6356
7211
  "CVE-2026-34910",
6357
7212
  "CVE-2026-34926",
6358
7213
  "CVE-2026-35273",
7214
+ "CVE-2026-39808",
6359
7215
  "CVE-2026-40933",
6360
7216
  "CVE-2026-41091",
6361
7217
  "CVE-2026-42271",
@@ -6366,10 +7222,16 @@
6366
7222
  "CVE-2026-46300",
6367
7223
  "CVE-2026-46333",
6368
7224
  "CVE-2026-48172",
7225
+ "CVE-2026-48282",
6369
7226
  "CVE-2026-48558",
6370
7227
  "CVE-2026-48907",
7228
+ "CVE-2026-48908",
7229
+ "CVE-2026-48939",
6371
7230
  "CVE-2026-54420",
7231
+ "CVE-2026-56164",
7232
+ "CVE-2026-56291",
6372
7233
  "CVE-2026-5760",
7234
+ "CVE-2026-58644",
6373
7235
  "CVE-2026-7473",
6374
7236
  "CVE-2026-8398",
6375
7237
  "CVE-2026-9082",
@@ -6406,6 +7268,12 @@
6406
7268
  "status": "open",
6407
7269
  "opened_date": "2026-05-17",
6408
7270
  "evidence_cves": [
7271
+ "CVE-2019-7256",
7272
+ "CVE-2020-29574",
7273
+ "CVE-2021-20123",
7274
+ "CVE-2021-33044",
7275
+ "CVE-2021-33045",
7276
+ "CVE-2021-44207",
6409
7277
  "CVE-2022-0492",
6410
7278
  "CVE-2022-1471",
6411
7279
  "CVE-2022-36551",
@@ -6431,6 +7299,9 @@
6431
7299
  "CVE-2024-12776",
6432
7300
  "CVE-2024-13059",
6433
7301
  "CVE-2024-1561",
7302
+ "CVE-2024-20353",
7303
+ "CVE-2024-20359",
7304
+ "CVE-2024-20481",
6434
7305
  "CVE-2024-21182",
6435
7306
  "CVE-2024-21513",
6436
7307
  "CVE-2024-21575",
@@ -6439,28 +7310,37 @@
6439
7310
  "CVE-2024-24590",
6440
7311
  "CVE-2024-24591",
6441
7312
  "CVE-2024-27132",
7313
+ "CVE-2024-28987",
6442
7314
  "CVE-2024-2912",
6443
7315
  "CVE-2024-31462",
7316
+ "CVE-2024-32896",
6444
7317
  "CVE-2024-37032",
6445
7318
  "CVE-2024-37052",
6446
7319
  "CVE-2024-37060",
7320
+ "CVE-2024-39717",
6447
7321
  "CVE-2024-39722",
7322
+ "CVE-2024-41713",
6448
7323
  "CVE-2024-42478",
6449
7324
  "CVE-2024-42479",
7325
+ "CVE-2024-43093",
6450
7326
  "CVE-2024-4889",
7327
+ "CVE-2024-4978",
6451
7328
  "CVE-2024-50050",
6452
7329
  "CVE-2024-5565",
6453
7330
  "CVE-2024-6047",
6454
7331
  "CVE-2024-6587",
7332
+ "CVE-2024-8963",
6455
7333
  "CVE-2024-9526",
6456
7334
  "CVE-2025-0282",
6457
7335
  "CVE-2025-10164",
6458
7336
  "CVE-2025-1550",
6459
7337
  "CVE-2025-1753",
6460
7338
  "CVE-2025-1796",
7339
+ "CVE-2025-21391",
6461
7340
  "CVE-2025-22457",
6462
7341
  "CVE-2025-23254",
6463
7342
  "CVE-2025-23266",
7343
+ "CVE-2025-24200",
6464
7344
  "CVE-2025-25297",
6465
7345
  "CVE-2025-27363",
6466
7346
  "CVE-2025-27520",
@@ -6492,6 +7372,7 @@
6492
7372
  "CVE-2026-0766",
6493
7373
  "CVE-2026-10520",
6494
7374
  "CVE-2026-11645",
7375
+ "CVE-2026-15409",
6495
7376
  "CVE-2026-20245",
6496
7377
  "CVE-2026-21858",
6497
7378
  "CVE-2026-21877",
@@ -6531,6 +7412,7 @@
6531
7412
  "CVE-2026-46300",
6532
7413
  "CVE-2026-46333",
6533
7414
  "CVE-2026-48172",
7415
+ "CVE-2026-48908",
6534
7416
  "CVE-2026-50751",
6535
7417
  "CVE-2026-5760",
6536
7418
  "CVE-2026-7473",
@@ -6566,6 +7448,8 @@
6566
7448
  "status": "open",
6567
7449
  "opened_date": "2026-05-17",
6568
7450
  "evidence_cves": [
7451
+ "CVE-2024-9537",
7452
+ "CVE-2025-24200",
6569
7453
  "CVE-2025-34291",
6570
7454
  "CVE-2026-46300",
6571
7455
  "CVE-2026-46333"
@@ -6828,20 +7712,37 @@
6828
7712
  "status": "open",
6829
7713
  "opened_date": "2026-05-18",
6830
7714
  "evidence_cves": [
7715
+ "CVE-2018-19410",
6831
7716
  "CVE-2020-10148",
7717
+ "CVE-2021-31196",
7718
+ "CVE-2021-33044",
7719
+ "CVE-2021-44207",
6832
7720
  "CVE-2022-1471",
7721
+ "CVE-2022-23227",
6833
7722
  "CVE-2023-43654",
7723
+ "CVE-2023-45249",
6834
7724
  "CVE-2023-48022",
6835
7725
  "CVE-2023-6016",
6836
7726
  "CVE-2023-6019",
6837
7727
  "CVE-2023-6021",
6838
7728
  "CVE-2023-6038",
7729
+ "CVE-2023-7028",
7730
+ "CVE-2024-11680",
6839
7731
  "CVE-2024-12776",
6840
7732
  "CVE-2024-1709",
6841
7733
  "CVE-2024-21182",
7734
+ "CVE-2024-28987",
6842
7735
  "CVE-2024-2912",
7736
+ "CVE-2024-37085",
7737
+ "CVE-2024-43451",
7738
+ "CVE-2024-47575",
6843
7739
  "CVE-2024-4889",
7740
+ "CVE-2024-53704",
7741
+ "CVE-2024-55591",
7742
+ "CVE-2024-5910",
6844
7743
  "CVE-2024-6587",
7744
+ "CVE-2024-7593",
7745
+ "CVE-2024-8956",
6845
7746
  "CVE-2025-1796",
6846
7747
  "CVE-2025-27520",
6847
7748
  "CVE-2025-3248",
@@ -6966,18 +7867,54 @@
6966
7867
  "status": "open",
6967
7868
  "opened_date": "2026-05-18",
6968
7869
  "evidence_cves": [
7870
+ "CVE-2008-4128",
7871
+ "CVE-2014-2120",
7872
+ "CVE-2016-3714",
7873
+ "CVE-2017-3506",
7874
+ "CVE-2019-7256",
7875
+ "CVE-2020-13965",
7876
+ "CVE-2020-17519",
7877
+ "CVE-2020-2883",
6969
7878
  "CVE-2021-20035",
7879
+ "CVE-2021-20123",
7880
+ "CVE-2021-20124",
7881
+ "CVE-2021-33044",
7882
+ "CVE-2021-33045",
7883
+ "CVE-2021-40407",
7884
+ "CVE-2021-40655",
7885
+ "CVE-2022-22948",
6970
7886
  "CVE-2022-36551",
7887
+ "CVE-2023-25280",
7888
+ "CVE-2023-4346",
6971
7889
  "CVE-2023-44221",
6972
7890
  "CVE-2023-44487",
7891
+ "CVE-2023-45249",
7892
+ "CVE-2023-48788",
6973
7893
  "CVE-2023-50387",
6974
7894
  "CVE-2023-50868",
6975
7895
  "CVE-2023-51764",
6976
7896
  "CVE-2023-51765",
6977
7897
  "CVE-2023-51766",
7898
+ "CVE-2024-11667",
7899
+ "CVE-2024-1212",
6978
7900
  "CVE-2024-12450",
7901
+ "CVE-2024-20353",
7902
+ "CVE-2024-20399",
7903
+ "CVE-2024-20481",
6979
7904
  "CVE-2024-21762",
7905
+ "CVE-2024-23113",
7906
+ "CVE-2024-23692",
7907
+ "CVE-2024-24919",
7908
+ "CVE-2024-28995",
6980
7909
  "CVE-2024-31462",
7910
+ "CVE-2024-3273",
7911
+ "CVE-2024-3393",
7912
+ "CVE-2024-38812",
7913
+ "CVE-2024-39891",
7914
+ "CVE-2024-4040",
7915
+ "CVE-2024-50603",
7916
+ "CVE-2024-9474",
7917
+ "CVE-2025-0108",
6981
7918
  "CVE-2025-0282",
6982
7919
  "CVE-2025-10164",
6983
7920
  "CVE-2025-1316",
@@ -6993,6 +7930,8 @@
6993
7930
  "CVE-2025-67038",
6994
7931
  "CVE-2025-68668",
6995
7932
  "CVE-2026-0257",
7933
+ "CVE-2026-15409",
7934
+ "CVE-2026-15410",
6996
7935
  "CVE-2026-20182",
6997
7936
  "CVE-2026-20230",
6998
7937
  "CVE-2026-20262",
@@ -7006,6 +7945,7 @@
7006
7945
  "CVE-2026-34909",
7007
7946
  "CVE-2026-34910",
7008
7947
  "CVE-2026-50751",
7948
+ "CVE-2026-56290",
7009
7949
  "CVE-2026-5760",
7010
7950
  "CVE-2026-7473"
7011
7951
  ],
@@ -7266,7 +8206,8 @@
7266
8206
  "status": "open",
7267
8207
  "opened_at": "2026-05-18",
7268
8208
  "evidence_cves": [
7269
- "CVE-2025-21085"
8209
+ "CVE-2025-21085",
8210
+ "CVE-2025-21391"
7270
8211
  ],
7271
8212
  "theater_test": {
7272
8213
  "claim": "We are compliant with AU-9 (Protection of Audit Information) because we follow the documented requirement: Protecting audit information and audit logging tools from unauthorized access, modification, and deletion. Anchored on the threat model that the adversary is trying to tamper with logs after the fact.",
@@ -7350,6 +8291,8 @@
7350
8291
  "status": "open",
7351
8292
  "opened_at": "2026-05-18",
7352
8293
  "evidence_cves": [
8294
+ "CVE-2024-5217",
8295
+ "CVE-2024-9465",
7353
8296
  "CVE-2025-1094"
7354
8297
  ],
7355
8298
  "theater_test": {
@@ -7379,11 +8322,31 @@
7379
8322
  "opened_at": "2026-05-18",
7380
8323
  "evidence_cves": [
7381
8324
  "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
8325
+ "CVE-2018-19410",
8326
+ "CVE-2018-9276",
8327
+ "CVE-2019-11001",
8328
+ "CVE-2019-7256",
8329
+ "CVE-2021-40407",
8330
+ "CVE-2021-41277",
8331
+ "CVE-2022-22948",
7382
8332
  "CVE-2024-11120",
8333
+ "CVE-2024-29059",
8334
+ "CVE-2024-3272",
8335
+ "CVE-2024-37383",
8336
+ "CVE-2024-39717",
8337
+ "CVE-2024-39891",
8338
+ "CVE-2024-41710",
8339
+ "CVE-2024-43093",
8340
+ "CVE-2024-45195",
8341
+ "CVE-2024-4577",
8342
+ "CVE-2024-5910",
7383
8343
  "CVE-2024-6047",
8344
+ "CVE-2024-8957",
8345
+ "CVE-2025-0108",
7384
8346
  "CVE-2025-49844",
7385
8347
  "CVE-2025-59529",
7386
- "CVE-2025-8671"
8348
+ "CVE-2025-8671",
8349
+ "CVE-2026-48939"
7387
8350
  ],
7388
8351
  "theater_test": {
7389
8352
  "claim": "We are compliant with A.8.9 (Configuration management) because we follow the documented requirement: Annex A.8.9 — establishing, documenting, implementing, monitoring, and reviewing configurations of hardware, software, services, and networks. Anchored on a documented baseline and continuous monitori",
@@ -7499,7 +8462,14 @@
7499
8462
  "status": "open",
7500
8463
  "opened_at": "2026-05-18",
7501
8464
  "evidence_cves": [
8465
+ "CVE-2023-43208",
8466
+ "CVE-2024-29745",
8467
+ "CVE-2024-37383",
8468
+ "CVE-2024-39891",
8469
+ "CVE-2024-43451",
7502
8470
  "CVE-2025-14847",
8471
+ "CVE-2025-23209",
8472
+ "CVE-2026-55255",
7503
8473
  "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER"
7504
8474
  ],
7505
8475
  "theater_test": {
@@ -7851,6 +8821,7 @@
7851
8821
  "status": "open",
7852
8822
  "opened_at": "2026-05-18",
7853
8823
  "evidence_cves": [
8824
+ "CVE-2023-45249",
7854
8825
  "CVE-2025-22224",
7855
8826
  "CVE-2025-22225"
7856
8827
  ],
@@ -7908,6 +8879,8 @@
7908
8879
  "status": "open",
7909
8880
  "opened_at": "2026-05-18",
7910
8881
  "evidence_cves": [
8882
+ "CVE-2024-40711",
8883
+ "CVE-2024-50623",
7911
8884
  "CVE-2025-22225"
7912
8885
  ],
7913
8886
  "theater_test": {
@@ -8466,17 +9439,41 @@
8466
9439
  "status": "open",
8467
9440
  "opened_date": "2026-05-18",
8468
9441
  "evidence_cves": [
9442
+ "CVE-2019-16278",
8469
9443
  "CVE-2019-6693",
8470
9444
  "CVE-2020-17103-REREGRESSION-2026",
8471
9445
  "CVE-2022-0492",
8472
9446
  "CVE-2023-21529",
8473
9447
  "CVE-2023-27351",
9448
+ "CVE-2023-43208",
9449
+ "CVE-2023-48365",
9450
+ "CVE-2024-12356",
8474
9451
  "CVE-2024-1708",
8475
9452
  "CVE-2024-21182",
8476
9453
  "CVE-2024-27199",
9454
+ "CVE-2024-28986",
9455
+ "CVE-2024-30040",
9456
+ "CVE-2024-37383",
9457
+ "CVE-2024-38106",
9458
+ "CVE-2024-38856",
9459
+ "CVE-2024-45195",
9460
+ "CVE-2024-45519",
9461
+ "CVE-2024-47575",
9462
+ "CVE-2024-4978",
9463
+ "CVE-2024-50623",
9464
+ "CVE-2024-51378",
9465
+ "CVE-2024-53704",
8477
9466
  "CVE-2024-57726",
8478
9467
  "CVE-2024-57728",
9468
+ "CVE-2024-5910",
9469
+ "CVE-2024-7262",
9470
+ "CVE-2024-8963",
9471
+ "CVE-2024-9463",
9472
+ "CVE-2024-9465",
9473
+ "CVE-2024-9680",
9474
+ "CVE-2025-0994",
8479
9475
  "CVE-2025-10035",
9476
+ "CVE-2025-24200",
8480
9477
  "CVE-2025-27363",
8481
9478
  "CVE-2025-30400",
8482
9479
  "CVE-2025-48595",
@@ -8493,7 +9490,9 @@
8493
9490
  "CVE-2026-20131",
8494
9491
  "CVE-2026-23760",
8495
9492
  "CVE-2026-24423",
8496
- "CVE-2026-41940"
9493
+ "CVE-2026-41940",
9494
+ "CVE-2026-48939",
9495
+ "CVE-2026-56164"
8497
9496
  ],
8498
9497
  "theater_test": {
8499
9498
  "claim": "Vulnerability handling and disclosure procedures align with NIS2 Art.21 obligations.",
@@ -8519,7 +9518,15 @@
8519
9518
  "status": "open",
8520
9519
  "opened_date": "2026-05-18",
8521
9520
  "evidence_cves": [
8522
- "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND"
9521
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
9522
+ "CVE-2023-24955",
9523
+ "CVE-2024-20399",
9524
+ "CVE-2024-20481",
9525
+ "CVE-2024-30051",
9526
+ "CVE-2024-3393",
9527
+ "CVE-2024-38106",
9528
+ "CVE-2024-38213",
9529
+ "CVE-2024-49039"
8523
9530
  ],
8524
9531
  "theater_test": {
8525
9532
  "claim": "System monitoring effectively detects compromise and security-control degradation per NIST 800-53 SI-4.",