@blamejs/exceptd-skills 0.18.24 → 0.18.25

package/data/_indexes/chains.json

@@ -419096,6 +419096,2566 @@
       ]
     }
   },
+  "CVE-2026-60137": {
+    "name": "WordPress Core SQL Injection Vulnerability",
+    "rwep": 78,
+    "cvss": 5.9,
+    "cisa_kev": true,
+    "epss_score": 0.20395,
+    "epss_percentile": 0.97219,
+    "referencing_skills": [
+      "kernel-lpe-triage",
+      "attack-surface-pentest",
+      "ot-ics-security",
+      "coordinated-vuln-disclosure",
+      "sector-energy",
+      "mail-server-hardening",
+      "network-trust",
+      "audit-log-integrity",
+      "self-update-integrity",
+      "multitenancy-isolation",
+      "decompression-dos",
+      "log-injection-telemetry",
+      "privacy-consent-ops"
+    ],
+    "chain": {
+      "cwes": [
+        {
+          "id": "CWE-1037",
+          "name": "Processor Optimization Removal or Modification of Security-critical Code",
+          "category": "Hardware / Side Channel"
+        },
+        {
+          "id": "CWE-117",
+          "name": "Improper Output Neutralization for Logs",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-125",
+          "name": "Out-of-bounds Read",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-1333",
+          "name": "Inefficient Regular Expression Complexity",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-1357",
+          "name": "Reliance on Insufficiently Trustworthy Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-1395",
+          "name": "Dependency on Vulnerable Third-Party Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-22",
+          "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
+          "category": "Path/Resource"
+        },
+        {
+          "id": "CWE-269",
+          "name": "Improper Privilege Management",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-284",
+          "name": "Improper Access Control",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-287",
+          "name": "Improper Authentication",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-306",
+          "name": "Missing Authentication for Critical Function",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-345",
+          "name": "Insufficient Verification of Data Authenticity",
+          "category": "Authenticity / Supply Chain"
+        },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-352",
+          "name": "Cross-Site Request Forgery (CSRF)",
+          "category": "Session"
+        },
+        {
+          "id": "CWE-353",
+          "name": "Missing Support for Integrity Check",
+          "category": "Integrity"
+        },
+        {
+          "id": "CWE-362",
+          "name": "Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)",
+          "category": "Concurrency"
+        },
+        {
+          "id": "CWE-400",
+          "name": "Uncontrolled Resource Consumption",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-409",
+          "name": "Improper Handling of Highly Compressed Data (Data Amplification)",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-416",
+          "name": "Use After Free",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-434",
+          "name": "Unrestricted Upload of File with Dangerous Type",
+          "category": "File Handling"
+        },
+        {
+          "id": "CWE-494",
+          "name": "Download of Code Without Integrity Check",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-532",
+          "name": "Insertion of Sensitive Information into Log File",
+          "category": "Information Disclosure"
+        },
+        {
+          "id": "CWE-611",
+          "name": "Improper Restriction of XML External Entity Reference",
+          "category": "XML / Injection"
+        },
+        {
+          "id": "CWE-639",
+          "name": "Authorization Bypass Through User-Controlled Key",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-668",
+          "name": "Exposure of Resource to Wrong Sphere",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-732",
+          "name": "Incorrect Permission Assignment for Critical Resource",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-77",
+          "name": "Improper Neutralization of Special Elements used in a Command (Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-770",
+          "name": "Allocation of Resources Without Limits or Throttling",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-776",
+          "name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')",
+          "category": "XML"
+        },
+        {
+          "id": "CWE-778",
+          "name": "Insufficient Logging",
+          "category": "Logging"
+        },
+        {
+          "id": "CWE-78",
+          "name": "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-787",
+          "name": "Out-of-bounds Write",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-79",
+          "name": "Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-798",
+          "name": "Use of Hard-coded Credentials",
+          "category": "Credentials"
+        },
+        {
+          "id": "CWE-807",
+          "name": "Reliance on Untrusted Inputs in a Security Decision",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-829",
+          "name": "Inclusion of Functionality from Untrusted Control Sphere",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-834",
+          "name": "Excessive Iteration",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-89",
+          "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-918",
+          "name": "Server-Side Request Forgery (SSRF)",
+          "category": "Network"
+        },
+        {
+          "id": "CWE-93",
+          "name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')",
+          "category": "Injection"
+        }
+      ],
+      "atlas": [
+        {
+          "id": "AML.T0010",
+          "name": "ML Supply Chain Compromise",
+          "tactic": "Initial Access"
+        },
+        {
+          "id": "AML.T0043",
+          "name": "Craft Adversarial Data",
+          "tactic": "ML Attack Staging"
+        },
+        {
+          "id": "AML.T0051",
+          "name": "LLM Prompt Injection",
+          "tactic": "Execution"
+        }
+      ],
+      "d3fend": [
+        {
+          "id": "D3-ASLR",
+          "name": "Address Space Layout Randomization",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-CSPP",
+          "name": "Client-server Payload Profiling",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-EAL",
+          "name": "Executable Allowlisting",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-NI",
+          "name": "Network Isolation",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-NTA",
+          "name": "Network Traffic Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-NTPM",
+          "name": "Network Traffic Policy Mapping",
+          "tactic": "Model"
+        },
+        {
+          "id": "D3-PA",
+          "name": "Process Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-PHRA",
+          "name": "Process Hardware Resource Access",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-PSEP",
+          "name": "Process Segment Execution Prevention",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-SCP",
+          "name": "System Call Filtering",
+          "tactic": "Isolate"
+        }
+      ],
+      "framework_gaps": [
+        {
+          "id": "AU-Essential-8-App-Hardening",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "User application hardening"
+        },
+        {
+          "id": "AU-Essential-8-Backup",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Regular backups"
+        },
+        {
+          "id": "AU-Essential-8-Patch",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Patch operating systems"
+        },
+        {
+          "id": "AU-ISM-1556",
+          "framework": "au-ism",
+          "control_name": "Multi-factor authentication for privileged users (telecom NMS application)"
+        },
+        {
+          "id": "CIS-Controls-v8-Control7",
+          "framework": "CIS Controls v8",
+          "control_name": "Continuous Vulnerability Management"
+        },
+        {
+          "id": "IEC-62443-3-3",
+          "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
+          "control_name": "System security requirements and security levels"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.15",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Logging"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.21",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Security of network services"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.8",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Management of technical vulnerabilities"
+        },
+        {
+          "id": "NERC-CIP-007-6-R4",
+          "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
+          "control_name": "Security event monitoring"
+        },
+        {
+          "id": "NIS2-Art21-incident-handling",
+          "framework": "EU NIS2 Directive (2022/2555)",
+          "control_name": "Incident handling"
+        },
+        {
+          "id": "NIS2-Art21-network-security",
+          "framework": "EU NIS2 Directive (Directive (EU) 2022/2555)",
+          "control_name": "Security of network and information systems"
+        },
+        {
+          "id": "NIS2-Art21-patch-management",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Vulnerability handling and disclosure"
+        },
+        {
+          "id": "NIST-800-115",
+          "framework": "NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)",
+          "control_name": "Technical Guide to Information Security Testing and Assessment"
+        },
+        {
+          "id": "NIST-800-218-SSDF",
+          "framework": "NIST SP 800-218 (Secure Software Development Framework v1.1)",
+          "control_name": "Secure Software Development Framework"
+        },
+        {
+          "id": "NIST-800-53-AC-3",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Access Enforcement"
+        },
+        {
+          "id": "NIST-800-53-SC-8",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Transmission Confidentiality and Integrity"
+        },
+        {
+          "id": "NIST-800-53-SI-2",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Flaw Remediation"
+        },
+        {
+          "id": "NIST-800-53-SR-11",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Component Authenticity"
+        },
+        {
+          "id": "NIST-800-82r3",
+          "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
+          "control_name": "Guide to Operational Technology (OT) Security"
+        },
+        {
+          "id": "OWASP-Pen-Testing-Guide-v5",
+          "framework": "OWASP Web Security Testing Guide v5 (WSTG)",
+          "control_name": "Web application penetration testing methodology"
+        },
+        {
+          "id": "PCI-DSS-4.0-6.3.3",
+          "framework": "PCI DSS 4.0",
+          "control_name": "All system components are protected from known vulnerabilities by installing applicable security patches/updates"
+        },
+        {
+          "id": "PTES-Pre-engagement",
+          "framework": "Penetration Testing Execution Standard (PTES)",
+          "control_name": "Pre-engagement Interactions"
+        },
+        {
+          "id": "SOC2-CC7-anomaly-detection",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "SOC2-CC9-vendor-management",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-A1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Governance"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        },
+        {
+          "id": "UK-CAF-B4",
+          "framework": "UK NCSC Cyber Assessment Framework (CAF)",
+          "control_name": "System security"
+        },
+        {
+          "id": "UK-CAF-D1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Response and recovery planning"
+        }
+      ],
+      "attack_refs": [
+        "T0855",
+        "T0883",
+        "T1036",
+        "T1059",
+        "T1068",
+        "T1070",
+        "T1071.003",
+        "T1071.004",
+        "T1078",
+        "T1133",
+        "T1190",
+        "T1195.002",
+        "T1213",
+        "T1499",
+        "T1499.001",
+        "T1530",
+        "T1548.001",
+        "T1556",
+        "T1557",
+        "T1562.008",
+        "T1565.001",
+        "T1574"
+      ],
+      "rfc_refs": [
+        "CSAF-2.0",
+        "ISO-29147",
+        "ISO-30111",
+        "RFC-4301",
+        "RFC-4303",
+        "RFC-7296",
+        "RFC-9116"
+      ]
+    }
+  },
+  "CVE-2026-63030": {
+    "name": "WordPress Core Interpretation Conflict Vulnerability",
+    "rwep": 79,
+    "cvss": 9.8,
+    "cisa_kev": true,
+    "epss_score": 0.38599,
+    "epss_percentile": 0.98425,
+    "referencing_skills": [
+      "kernel-lpe-triage",
+      "ai-c2-detection",
+      "attack-surface-pentest",
+      "dlp-gap-analysis",
+      "supply-chain-integrity",
+      "identity-assurance",
+      "ot-ics-security",
+      "coordinated-vuln-disclosure",
+      "threat-modeling-methodology",
+      "webapp-security",
+      "sector-healthcare",
+      "sector-financial",
+      "sector-federal-government",
+      "sector-energy",
+      "api-security",
+      "cloud-security",
+      "container-runtime-security",
+      "incident-response-playbook",
+      "email-security-anti-phishing",
+      "age-gates-child-safety",
+      "mail-server-hardening",
+      "network-trust",
+      "audit-log-integrity",
+      "self-update-integrity",
+      "multitenancy-isolation",
+      "decompression-dos",
+      "log-injection-telemetry",
+      "privacy-consent-ops"
+    ],
+    "chain": {
+      "cwes": [
+        {
+          "id": "CWE-1037",
+          "name": "Processor Optimization Removal or Modification of Security-critical Code",
+          "category": "Hardware / Side Channel"
+        },
+        {
+          "id": "CWE-117",
+          "name": "Improper Output Neutralization for Logs",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-1188",
+          "name": "Initialization of a Resource with an Insecure Default",
+          "category": "Configuration"
+        },
+        {
+          "id": "CWE-125",
+          "name": "Out-of-bounds Read",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-1333",
+          "name": "Inefficient Regular Expression Complexity",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-1357",
+          "name": "Reliance on Insufficiently Trustworthy Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-1395",
+          "name": "Dependency on Vulnerable Third-Party Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-1426",
+          "name": "Improper Validation of Generative AI Output",
+          "category": "AI/ML"
+        },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-22",
+          "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
+          "category": "Path/Resource"
+        },
+        {
+          "id": "CWE-269",
+          "name": "Improper Privilege Management",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-284",
+          "name": "Improper Access Control",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-287",
+          "name": "Improper Authentication",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-306",
+          "name": "Missing Authentication for Critical Function",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-345",
+          "name": "Insufficient Verification of Data Authenticity",
+          "category": "Authenticity / Supply Chain"
+        },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-352",
+          "name": "Cross-Site Request Forgery (CSRF)",
+          "category": "Session"
+        },
+        {
+          "id": "CWE-353",
+          "name": "Missing Support for Integrity Check",
+          "category": "Integrity"
+        },
+        {
+          "id": "CWE-362",
+          "name": "Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)",
+          "category": "Concurrency"
+        },
+        {
+          "id": "CWE-400",
+          "name": "Uncontrolled Resource Consumption",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-409",
+          "name": "Improper Handling of Highly Compressed Data (Data Amplification)",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-416",
+          "name": "Use After Free",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-434",
+          "name": "Unrestricted Upload of File with Dangerous Type",
+          "category": "File Handling"
+        },
+        {
+          "id": "CWE-494",
+          "name": "Download of Code Without Integrity Check",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-502",
+          "name": "Deserialization of Untrusted Data",
+          "category": "Serialization"
+        },
+        {
+          "id": "CWE-532",
+          "name": "Insertion of Sensitive Information into Log File",
+          "category": "Information Disclosure"
+        },
+        {
+          "id": "CWE-611",
+          "name": "Improper Restriction of XML External Entity Reference",
+          "category": "XML / Injection"
+        },
+        {
+          "id": "CWE-639",
+          "name": "Authorization Bypass Through User-Controlled Key",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-668",
+          "name": "Exposure of Resource to Wrong Sphere",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-732",
+          "name": "Incorrect Permission Assignment for Critical Resource",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-77",
+          "name": "Improper Neutralization of Special Elements used in a Command (Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-770",
+          "name": "Allocation of Resources Without Limits or Throttling",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-776",
+          "name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')",
+          "category": "XML"
+        },
+        {
+          "id": "CWE-778",
+          "name": "Insufficient Logging",
+          "category": "Logging"
+        },
+        {
+          "id": "CWE-78",
+          "name": "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-787",
+          "name": "Out-of-bounds Write",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-79",
+          "name": "Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-798",
+          "name": "Use of Hard-coded Credentials",
+          "category": "Credentials"
+        },
+        {
+          "id": "CWE-807",
+          "name": "Reliance on Untrusted Inputs in a Security Decision",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-829",
+          "name": "Inclusion of Functionality from Untrusted Control Sphere",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-834",
+          "name": "Excessive Iteration",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-862",
+          "name": "Missing Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-89",
+          "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-918",
+          "name": "Server-Side Request Forgery (SSRF)",
+          "category": "Network"
+        },
+        {
+          "id": "CWE-93",
+          "name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-94",
+          "name": "Improper Control of Generation of Code (Code Injection)",
+          "category": "Injection"
+        }
+      ],
+      "atlas": [
+        {
+          "id": "AML.T0010",
+          "name": "ML Supply Chain Compromise",
+          "tactic": "Initial Access"
+        },
+        {
+          "id": "AML.T0017",
+          "name": "Discover ML Model Ontology",
+          "tactic": "Discovery"
+        },
+        {
+          "id": "AML.T0018",
+          "name": "Backdoor ML Model",
+          "tactic": "Persistence"
+        },
+        {
+          "id": "AML.T0043",
+          "name": "Craft Adversarial Data",
+          "tactic": "ML Attack Staging"
+        },
+        {
+          "id": "AML.T0051",
+          "name": "LLM Prompt Injection",
+          "tactic": "Execution"
+        },
+        {
+          "id": "AML.T0096",
+          "name": "AI API as Covert C2 Channel",
+          "tactic": "Command and Control"
+        }
+      ],
+      "d3fend": [
+        {
+          "id": "D3-ASLR",
+          "name": "Address Space Layout Randomization",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-CA",
+          "name": "Certificate Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-CBAN",
+          "name": "Certificate-based Authentication",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-CSPP",
+          "name": "Client-server Payload Profiling",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-DA",
+          "name": "Domain Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-EAL",
+          "name": "Executable Allowlisting",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-EHB",
+          "name": "Executable Hashbased Allowlist",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-IOPR",
+          "name": "Input/Output Profiling Resource",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-MFA",
+          "name": "Multi-factor Authentication",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-NI",
+          "name": "Network Isolation",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-NTA",
+          "name": "Network Traffic Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-NTPM",
+          "name": "Network Traffic Policy Mapping",
+          "tactic": "Model"
+        },
+        {
+          "id": "D3-PA",
+          "name": "Process Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-PHRA",
+          "name": "Process Hardware Resource Access",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-PSEP",
+          "name": "Process Segment Execution Prevention",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-RPA",
+          "name": "Remote Process Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-SCP",
+          "name": "System Call Filtering",
+          "tactic": "Isolate"
+        }
+      ],
+      "framework_gaps": [
+        {
+          "id": "AU-Essential-8-App-Hardening",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "User application hardening"
+        },
+        {
+          "id": "AU-Essential-8-Backup",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Regular backups"
+        },
+        {
+          "id": "AU-Essential-8-MFA",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Multi-factor authentication"
+        },
+        {
+          "id": "AU-Essential-8-Patch",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Patch operating systems"
+        },
+        {
+          "id": "AU-ISM-1556",
+          "framework": "au-ism",
+          "control_name": "Multi-factor authentication for privileged users (telecom NMS application)"
+        },
+        {
+          "id": "CIS-Controls-v8-Control7",
+          "framework": "CIS Controls v8",
+          "control_name": "Continuous Vulnerability Management"
+        },
+        {
+          "id": "CMMC-2.0-Level-2",
+          "framework": "CMMC 2.0 (Cybersecurity Maturity Model Certification) Level 2",
+          "control_name": "Level 2 — Advanced (110 NIST 800-171 Rev 2 controls)"
+        },
+        {
+          "id": "CycloneDX-v1.6-SBOM",
+          "framework": "CycloneDX v1.6 (OWASP SBOM standard)",
+          "control_name": "Software Bill of Materials"
+        },
+        {
+          "id": "FedRAMP-Rev5-Moderate",
+          "framework": "FedRAMP Rev 5 Moderate",
+          "control_name": "FedRAMP Moderate baseline (NIST 800-53 Rev 5 tailoring)"
+        },
+        {
+          "id": "HIPAA-Security-Rule-164.312(a)(1)",
+          "framework": "HIPAA Security Rule (45 CFR § 164.312)",
+          "control_name": "Access control standard (technical safeguards)"
+        },
+        {
+          "id": "HITRUST-CSF-v11.4-09.l",
+          "framework": "HITRUST CSF v11.4",
+          "control_name": "Outsourced services management"
+        },
+        {
+          "id": "IEC-62443-3-3",
+          "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
+          "control_name": "System security requirements and security levels"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.15",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Logging"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.16",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Monitoring activities"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.21",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Security of network services"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.28",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Secure coding"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.30",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Outsourced development"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.8",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Management of technical vulnerabilities"
+        },
+        {
+          "id": "ISO-IEC-23894-2023-clause-7",
+          "framework": "ISO/IEC 23894:2023 (AI Risk Management Guidance)",
+          "control_name": "AI risk management process"
+        },
+        {
+          "id": "ISO-IEC-42001-2023-clause-6.1.2",
+          "framework": "ISO/IEC 42001:2023 (AI Management System)",
+          "control_name": "AI risk assessment"
+        },
+        {
+          "id": "NERC-CIP-007-6-R4",
+          "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
+          "control_name": "Security event monitoring"
+        },
+        {
+          "id": "NIS2-Art21-incident-handling",
+          "framework": "EU NIS2 Directive (2022/2555)",
+          "control_name": "Incident handling"
+        },
+        {
+          "id": "NIS2-Art21-network-security",
+          "framework": "EU NIS2 Directive (Directive (EU) 2022/2555)",
+          "control_name": "Security of network and information systems"
+        },
+        {
+          "id": "NIS2-Art21-patch-management",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Vulnerability handling and disclosure"
+        },
+        {
+          "id": "NIST-800-115",
+          "framework": "NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)",
+          "control_name": "Technical Guide to Information Security Testing and Assessment"
+        },
+        {
+          "id": "NIST-800-218-SSDF",
+          "framework": "NIST SP 800-218 (Secure Software Development Framework v1.1)",
+          "control_name": "Secure Software Development Framework"
+        },
+        {
+          "id": "NIST-800-53-AC-2",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Account Management"
+        },
+        {
+          "id": "NIST-800-53-AC-3",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Access Enforcement"
+        },
+        {
+          "id": "NIST-800-53-CM-7",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Least Functionality"
+        },
+        {
+          "id": "NIST-800-53-SA-12",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Supply Chain Protection"
+        },
+        {
+          "id": "NIST-800-53-SC-28",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Protection of Information at Rest"
+        },
+        {
+          "id": "NIST-800-53-SC-7",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Boundary Protection"
+        },
+        {
+          "id": "NIST-800-53-SC-8",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Transmission Confidentiality and Integrity"
+        },
+        {
+          "id": "NIST-800-53-SI-2",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Flaw Remediation"
+        },
+        {
+          "id": "NIST-800-53-SI-3",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Malicious Code Protection"
+        },
+        {
+          "id": "NIST-800-53-SR-11",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Component Authenticity"
+        },
+        {
+          "id": "NIST-800-63B-rev4",
+          "framework": "NIST SP 800-63B Rev 4 (Digital Identity Guidelines — Authentication & Lifecycle Mgmt)",
+          "control_name": "Authentication and Lifecycle Management (AAL/IAL/FAL)"
+        },
+        {
+          "id": "NIST-800-82r3",
+          "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
+          "control_name": "Guide to Operational Technology (OT) Security"
+        },
+        {
+          "id": "OWASP-ASVS-v5.0-V14",
+          "framework": "OWASP ASVS v5.0",
+          "control_name": "Configuration verification"
+        },
+        {
+          "id": "OWASP-LLM-Top-10-2025-LLM01",
+          "framework": "OWASP Top 10 for LLM Applications 2025",
+          "control_name": "Prompt Injection"
+        },
+        {
+          "id": "OWASP-Pen-Testing-Guide-v5",
+          "framework": "OWASP Web Security Testing Guide v5 (WSTG)",
+          "control_name": "Web application penetration testing methodology"
+        },
+        {
+          "id": "PCI-DSS-4.0-6.3.3",
+          "framework": "PCI DSS 4.0",
+          "control_name": "All system components are protected from known vulnerabilities by installing applicable security patches/updates"
+        },
+        {
+          "id": "PSD2-RTS-SCA",
+          "framework": "EU PSD2 Regulatory Technical Standards on Strong Customer Authentication (Commission Delegated Regulation (EU) 2018/389)",
+          "control_name": "Strong Customer Authentication and Common and Secure Communication"
+        },
+        {
+          "id": "PTES-Pre-engagement",
+          "framework": "Penetration Testing Execution Standard (PTES)",
+          "control_name": "Pre-engagement Interactions"
+        },
+        {
+          "id": "SLSA-v1.0-Build-L3",
+          "framework": "SLSA v1.0 (Supply-chain Levels for Software Artifacts) — Build Track",
+          "control_name": "Hardened build platform with non-falsifiable provenance"
+        },
+        {
+          "id": "SOC2-CC6-logical-access",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "Logical and Physical Access Controls"
+        },
+        {
+          "id": "SOC2-CC7-anomaly-detection",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "SOC2-CC9-vendor-management",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "SPDX-v3.0-SBOM",
+          "framework": "SPDX v3.0 (ISO/IEC 5962-aligned SBOM standard)",
+          "control_name": "Software Package Data Exchange — SBOM"
+        },
+        {
+          "id": "SWIFT-CSCF-v2026-1.1",
+          "framework": "SWIFT Customer Security Controls Framework v2026",
+          "control_name": "SWIFT Environment Protection"
+        },
+        {
+          "id": "UK-CAF-A1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Governance"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        },
+        {
+          "id": "UK-CAF-B4",
+          "framework": "UK NCSC Cyber Assessment Framework (CAF)",
+          "control_name": "System security"
+        },
+        {
+          "id": "UK-CAF-C1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Security monitoring"
+        },
+        {
+          "id": "UK-CAF-D1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Response and recovery planning"
+        },
+        {
+          "id": "VEX-CSAF-v2.1",
+          "framework": "VEX via OASIS CSAF 2.1 (Common Security Advisory Framework)",
+          "control_name": "Vulnerability Exploitability eXchange profile"
+        }
+      ],
+      "attack_refs": [
+        "T0855",
+        "T0883",
+        "T1036",
+        "T1041",
+        "T1059",
+        "T1068",
+        "T1070",
+        "T1071",
+        "T1071.003",
+        "T1071.004",
+        "T1078",
+        "T1102",
+        "T1110",
+        "T1133",
+        "T1190",
+        "T1195.001",
+        "T1195.002",
+        "T1213",
+        "T1486",
+        "T1499",
+        "T1499.001",
+        "T1505",
+        "T1530",
+        "T1548.001",
+        "T1552",
+        "T1554",
+        "T1556",
+        "T1557",
+        "T1562.008",
+        "T1565.001",
+        "T1566",
+        "T1566.001",
+        "T1566.002",
+        "T1566.003",
+        "T1567",
+        "T1568",
+        "T1574",
+        "T1610",
+        "T1611"
+      ],
+      "rfc_refs": [
+        "CSAF-2.0",
+        "ISO-29147",
+        "ISO-30111",
+        "RFC-4301",
+        "RFC-4303",
+        "RFC-6376",
+        "RFC-6545",
+        "RFC-6546",
+        "RFC-6749",
+        "RFC-7208",
+        "RFC-7296",
+        "RFC-7489",
+        "RFC-7519",
+        "RFC-7970",
+        "RFC-8032",
+        "RFC-8446",
+        "RFC-8461",
+        "RFC-8616",
+        "RFC-8725",
+        "RFC-9000",
+        "RFC-9114",
+        "RFC-9116",
+        "RFC-9180",
+        "RFC-9421",
+        "RFC-9458",
+        "RFC-9700"
+      ]
+    }
+  },
+  "CVE-2026-0770": {
+    "name": "Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability",
+    "rwep": 82,
+    "cvss": 9.8,
+    "cisa_kev": true,
+    "epss_score": 0.54503,
+    "epss_percentile": 0.98911,
+    "referencing_skills": [
+      "kernel-lpe-triage",
+      "ai-attack-surface",
+      "mcp-agent-trust",
+      "rag-pipeline-security",
+      "ai-c2-detection",
+      "attack-surface-pentest",
+      "dlp-gap-analysis",
+      "supply-chain-integrity",
+      "ot-ics-security",
+      "coordinated-vuln-disclosure",
+      "threat-modeling-methodology",
+      "webapp-security",
+      "ai-risk-management",
+      "sector-federal-government",
+      "sector-energy",
+      "api-security",
+      "container-runtime-security",
+      "mlops-security",
+      "email-security-anti-phishing",
+      "mail-server-hardening",
+      "network-trust",
+      "audit-log-integrity",
+      "self-update-integrity",
+      "multitenancy-isolation",
+      "decompression-dos",
+      "log-injection-telemetry",
+      "privacy-consent-ops"
+    ],
+    "chain": {
+      "cwes": [
+        {
+          "id": "CWE-1037",
+          "name": "Processor Optimization Removal or Modification of Security-critical Code",
+          "category": "Hardware / Side Channel"
+        },
+        {
+          "id": "CWE-1039",
+          "name": "Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations",
+          "category": "AI/ML"
+        },
+        {
+          "id": "CWE-117",
+          "name": "Improper Output Neutralization for Logs",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-1188",
+          "name": "Initialization of a Resource with an Insecure Default",
+          "category": "Configuration"
+        },
+        {
+          "id": "CWE-125",
+          "name": "Out-of-bounds Read",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-1333",
+          "name": "Inefficient Regular Expression Complexity",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-1357",
+          "name": "Reliance on Insufficiently Trustworthy Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-1395",
+          "name": "Dependency on Vulnerable Third-Party Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-1426",
+          "name": "Improper Validation of Generative AI Output",
+          "category": "AI/ML"
+        },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-22",
+          "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
+          "category": "Path/Resource"
+        },
+        {
+          "id": "CWE-269",
+          "name": "Improper Privilege Management",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-284",
+          "name": "Improper Access Control",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-287",
+          "name": "Improper Authentication",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-306",
+          "name": "Missing Authentication for Critical Function",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-345",
+          "name": "Insufficient Verification of Data Authenticity",
+          "category": "Authenticity / Supply Chain"
+        },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-352",
+          "name": "Cross-Site Request Forgery (CSRF)",
+          "category": "Session"
+        },
+        {
+          "id": "CWE-353",
+          "name": "Missing Support for Integrity Check",
+          "category": "Integrity"
+        },
+        {
+          "id": "CWE-362",
+          "name": "Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)",
+          "category": "Concurrency"
+        },
+        {
+          "id": "CWE-400",
+          "name": "Uncontrolled Resource Consumption",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-409",
+          "name": "Improper Handling of Highly Compressed Data (Data Amplification)",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-416",
+          "name": "Use After Free",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-434",
+          "name": "Unrestricted Upload of File with Dangerous Type",
+          "category": "File Handling"
+        },
+        {
+          "id": "CWE-494",
+          "name": "Download of Code Without Integrity Check",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-502",
+          "name": "Deserialization of Untrusted Data",
+          "category": "Serialization"
+        },
+        {
+          "id": "CWE-532",
+          "name": "Insertion of Sensitive Information into Log File",
+          "category": "Information Disclosure"
+        },
+        {
+          "id": "CWE-611",
+          "name": "Improper Restriction of XML External Entity Reference",
+          "category": "XML / Injection"
+        },
+        {
+          "id": "CWE-639",
+          "name": "Authorization Bypass Through User-Controlled Key",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-668",
+          "name": "Exposure of Resource to Wrong Sphere",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-732",
+          "name": "Incorrect Permission Assignment for Critical Resource",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-77",
+          "name": "Improper Neutralization of Special Elements used in a Command (Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-770",
+          "name": "Allocation of Resources Without Limits or Throttling",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-776",
+          "name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')",
+          "category": "XML"
+        },
+        {
+          "id": "CWE-778",
+          "name": "Insufficient Logging",
+          "category": "Logging"
+        },
+        {
+          "id": "CWE-78",
+          "name": "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-787",
+          "name": "Out-of-bounds Write",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-79",
+          "name": "Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-798",
+          "name": "Use of Hard-coded Credentials",
+          "category": "Credentials"
+        },
+        {
+          "id": "CWE-807",
+          "name": "Reliance on Untrusted Inputs in a Security Decision",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-829",
+          "name": "Inclusion of Functionality from Untrusted Control Sphere",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-834",
+          "name": "Excessive Iteration",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-862",
+          "name": "Missing Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-89",
+          "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-918",
+          "name": "Server-Side Request Forgery (SSRF)",
+          "category": "Network"
+        },
+        {
+          "id": "CWE-93",
+          "name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-94",
+          "name": "Improper Control of Generation of Code (Code Injection)",
+          "category": "Injection"
+        }
+      ],
+      "atlas": [
+        {
+          "id": "AML.T0010",
+          "name": "ML Supply Chain Compromise",
+          "tactic": "Initial Access"
+        },
+        {
+          "id": "AML.T0016",
+          "name": "Obtain Capabilities: Develop Capabilities",
+          "tactic": "Resource Development"
+        },
+        {
+          "id": "AML.T0017",
+          "name": "Discover ML Model Ontology",
+          "tactic": "Discovery"
+        },
+        {
+          "id": "AML.T0018",
+          "name": "Backdoor ML Model",
+          "tactic": "Persistence"
+        },
+        {
+          "id": "AML.T0020",
+          "name": "Poison Training Data",
+          "tactic": "ML Attack Staging"
+        },
+        {
+          "id": "AML.T0043",
+          "name": "Craft Adversarial Data",
+          "tactic": "ML Attack Staging"
+        },
+        {
+          "id": "AML.T0051",
+          "name": "LLM Prompt Injection",
+          "tactic": "Execution"
+        },
+        {
+          "id": "AML.T0054",
+          "name": "LLM Jailbreak",
+          "tactic": "Defense Evasion"
+        },
+        {
+          "id": "AML.T0096",
+          "name": "AI API as Covert C2 Channel",
+          "tactic": "Command and Control"
+        }
+      ],
+      "d3fend": [
+        {
+          "id": "D3-ASLR",
+          "name": "Address Space Layout Randomization",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-CA",
+          "name": "Certificate Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-CAA",
+          "name": "Credential Access Auditing",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-CBAN",
+          "name": "Certificate-based Authentication",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-CSPP",
+          "name": "Client-server Payload Profiling",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-DA",
+          "name": "Domain Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-EAL",
+          "name": "Executable Allowlisting",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-EHB",
+          "name": "Executable Hashbased Allowlist",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-FAPA",
+          "name": "File Access Pattern Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-FCR",
+          "name": "File Content Rules",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-IOPR",
+          "name": "Input/Output Profiling Resource",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-MFA",
+          "name": "Multi-factor Authentication",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-NI",
+          "name": "Network Isolation",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-NTA",
+          "name": "Network Traffic Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-NTPM",
+          "name": "Network Traffic Policy Mapping",
+          "tactic": "Model"
+        },
+        {
+          "id": "D3-PA",
+          "name": "Process Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-PHRA",
+          "name": "Process Hardware Resource Access",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-PSEP",
+          "name": "Process Segment Execution Prevention",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-SCP",
+          "name": "System Call Filtering",
+          "tactic": "Isolate"
+        }
+      ],
+      "framework_gaps": [
+        {
+          "id": "ALL-AI-PIPELINE-INTEGRITY",
+          "framework": "ALL",
+          "control_name": "AI Pipeline Integrity"
+        },
+        {
+          "id": "ALL-MCP-TOOL-TRUST",
+          "framework": "ALL",
+          "control_name": "MCP/Agent Tool Trust Boundaries"
+        },
+        {
+          "id": "ALL-PROMPT-INJECTION-ACCESS-CONTROL",
+          "framework": "ALL",
+          "control_name": "Prompt Injection as Access Control Failure"
+        },
+        {
+          "id": "AU-Essential-8-App-Hardening",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "User application hardening"
+        },
+        {
+          "id": "AU-Essential-8-Backup",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Regular backups"
+        },
+        {
+          "id": "AU-Essential-8-Patch",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Patch operating systems"
+        },
+        {
+          "id": "AU-ISM-1556",
+          "framework": "au-ism",
+          "control_name": "Multi-factor authentication for privileged users (telecom NMS application)"
+        },
+        {
+          "id": "CIS-Controls-v8-Control7",
+          "framework": "CIS Controls v8",
+          "control_name": "Continuous Vulnerability Management"
+        },
+        {
+          "id": "CMMC-2.0-Level-2",
+          "framework": "CMMC 2.0 (Cybersecurity Maturity Model Certification) Level 2",
+          "control_name": "Level 2 — Advanced (110 NIST 800-171 Rev 2 controls)"
+        },
+        {
+          "id": "CycloneDX-v1.6-SBOM",
+          "framework": "CycloneDX v1.6 (OWASP SBOM standard)",
+          "control_name": "Software Bill of Materials"
+        },
+        {
+          "id": "EU-AI-Act-Art-15",
+          "framework": "EU Artificial Intelligence Act (2024/1689)",
+          "control_name": "Accuracy, robustness and cybersecurity"
+        },
+        {
+          "id": "FedRAMP-Rev5-Moderate",
+          "framework": "FedRAMP Rev 5 Moderate",
+          "control_name": "FedRAMP Moderate baseline (NIST 800-53 Rev 5 tailoring)"
+        },
+        {
+          "id": "HIPAA-Security-Rule-164.312(a)(1)",
+          "framework": "HIPAA Security Rule (45 CFR § 164.312)",
+          "control_name": "Access control standard (technical safeguards)"
+        },
+        {
+          "id": "HITRUST-CSF-v11.4-09.l",
+          "framework": "HITRUST CSF v11.4",
+          "control_name": "Outsourced services management"
+        },
+        {
+          "id": "IEC-62443-3-3",
+          "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
+          "control_name": "System security requirements and security levels"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.15",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Logging"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.16",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Monitoring activities"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.21",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Security of network services"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.28",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Secure coding"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.30",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Outsourced development"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.8",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Management of technical vulnerabilities"
+        },
+        {
+          "id": "ISO-IEC-23894-2023-clause-7",
+          "framework": "ISO/IEC 23894:2023 (AI Risk Management Guidance)",
+          "control_name": "AI risk management process"
+        },
+        {
+          "id": "ISO-IEC-42001-2023-clause-6.1.2",
+          "framework": "ISO/IEC 42001:2023 (AI Management System)",
+          "control_name": "AI risk assessment"
+        },
+        {
+          "id": "NERC-CIP-007-6-R4",
+          "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
+          "control_name": "Security event monitoring"
+        },
+        {
+          "id": "NIS2-Art21-incident-handling",
+          "framework": "EU NIS2 Directive (2022/2555)",
+          "control_name": "Incident handling"
+        },
+        {
+          "id": "NIS2-Art21-network-security",
+          "framework": "EU NIS2 Directive (Directive (EU) 2022/2555)",
+          "control_name": "Security of network and information systems"
+        },
+        {
+          "id": "NIS2-Art21-patch-management",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Vulnerability handling and disclosure"
+        },
+        {
+          "id": "NIST-800-115",
+          "framework": "NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)",
+          "control_name": "Technical Guide to Information Security Testing and Assessment"
+        },
+        {
+          "id": "NIST-800-218-SSDF",
+          "framework": "NIST SP 800-218 (Secure Software Development Framework v1.1)",
+          "control_name": "Secure Software Development Framework"
+        },
+        {
+          "id": "NIST-800-53-AC-2",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Account Management"
+        },
+        {
+          "id": "NIST-800-53-AC-3",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Access Enforcement"
+        },
+        {
+          "id": "NIST-800-53-CM-7",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Least Functionality"
+        },
+        {
+          "id": "NIST-800-53-SA-12",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Supply Chain Protection"
+        },
+        {
+          "id": "NIST-800-53-SC-28",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Protection of Information at Rest"
+        },
+        {
+          "id": "NIST-800-53-SC-7",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Boundary Protection"
+        },
+        {
+          "id": "NIST-800-53-SC-8",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Transmission Confidentiality and Integrity"
+        },
+        {
+          "id": "NIST-800-53-SI-12",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Information Management and Retention"
+        },
+        {
+          "id": "NIST-800-53-SI-2",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Flaw Remediation"
+        },
+        {
+          "id": "NIST-800-53-SI-3",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Malicious Code Protection"
+        },
+        {
+          "id": "NIST-800-53-SR-11",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Component Authenticity"
+        },
+        {
+          "id": "NIST-800-82r3",
+          "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
+          "control_name": "Guide to Operational Technology (OT) Security"
+        },
+        {
+          "id": "NIST-AI-RMF-MEASURE-2.5",
+          "framework": "NIST AI RMF 1.0",
+          "control_name": "AI system to human interaction evaluation"
+        },
+        {
+          "id": "OWASP-ASVS-v5.0-V14",
+          "framework": "OWASP ASVS v5.0",
+          "control_name": "Configuration verification"
+        },
+        {
+          "id": "OWASP-LLM-Top-10-2025-LLM01",
+          "framework": "OWASP Top 10 for LLM Applications 2025",
+          "control_name": "Prompt Injection"
+        },
+        {
+          "id": "OWASP-LLM-Top-10-2025-LLM02",
+          "framework": "OWASP Top 10 for LLM Applications 2025",
+          "control_name": "Sensitive Information Disclosure"
+        },
+        {
+          "id": "OWASP-LLM-Top-10-2025-LLM06",
+          "framework": "OWASP Top 10 for LLM Applications 2025",
+          "control_name": "Excessive Agency"
+        },
+        {
+          "id": "OWASP-LLM-Top-10-2025-LLM08",
+          "framework": "OWASP Top 10 for LLM Applications 2025",
+          "control_name": "Vector and Embedding Weaknesses"
+        },
+        {
+          "id": "OWASP-Pen-Testing-Guide-v5",
+          "framework": "OWASP Web Security Testing Guide v5 (WSTG)",
+          "control_name": "Web application penetration testing methodology"
+        },
+        {
+          "id": "PCI-DSS-4.0-6.3.3",
+          "framework": "PCI DSS 4.0",
+          "control_name": "All system components are protected from known vulnerabilities by installing applicable security patches/updates"
+        },
+        {
+          "id": "PTES-Pre-engagement",
+          "framework": "Penetration Testing Execution Standard (PTES)",
+          "control_name": "Pre-engagement Interactions"
+        },
+        {
+          "id": "SLSA-v1.0-Build-L3",
+          "framework": "SLSA v1.0 (Supply-chain Levels for Software Artifacts) — Build Track",
+          "control_name": "Hardened build platform with non-falsifiable provenance"
+        },
+        {
+          "id": "SOC2-CC6-logical-access",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "Logical and Physical Access Controls"
+        },
+        {
+          "id": "SOC2-CC7-anomaly-detection",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "SOC2-CC9-vendor-management",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "SPDX-v3.0-SBOM",
+          "framework": "SPDX v3.0 (ISO/IEC 5962-aligned SBOM standard)",
+          "control_name": "Software Package Data Exchange — SBOM"
+        },
+        {
+          "id": "SWIFT-CSCF-v2026-1.1",
+          "framework": "SWIFT Customer Security Controls Framework v2026",
+          "control_name": "SWIFT Environment Protection"
+        },
+        {
+          "id": "UK-CAF-A1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Governance"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        },
+        {
+          "id": "UK-CAF-B4",
+          "framework": "UK NCSC Cyber Assessment Framework (CAF)",
+          "control_name": "System security"
+        },
+        {
+          "id": "UK-CAF-C1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Security monitoring"
+        },
+        {
+          "id": "UK-CAF-D1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Response and recovery planning"
+        },
+        {
+          "id": "VEX-CSAF-v2.1",
+          "framework": "VEX via OASIS CSAF 2.1 (Common Security Advisory Framework)",
+          "control_name": "Vulnerability Exploitability eXchange profile"
+        }
+      ],
+      "attack_refs": [
+        "T0855",
+        "T0883",
+        "T1036",
+        "T1041",
+        "T1059",
+        "T1068",
+        "T1070",
+        "T1071",
+        "T1071.003",
+        "T1071.004",
+        "T1078",
+        "T1102",
+        "T1133",
+        "T1190",
+        "T1195.001",
+        "T1195.002",
+        "T1213",
+        "T1499",
+        "T1499.001",
+        "T1505",
+        "T1530",
+        "T1548.001",
+        "T1554",
+        "T1556",
+        "T1557",
+        "T1562.008",
+        "T1565",
+        "T1565.001",
+        "T1566",
+        "T1566.001",
+        "T1566.002",
+        "T1566.003",
+        "T1567",
+        "T1568",
+        "T1574",
+        "T1610",
+        "T1611"
+      ],
+      "rfc_refs": [
+        "CSAF-2.0",
+        "ISO-29147",
+        "ISO-30111",
+        "RFC-4301",
+        "RFC-4303",
+        "RFC-6376",
+        "RFC-6749",
+        "RFC-7208",
+        "RFC-7296",
+        "RFC-7489",
+        "RFC-7519",
+        "RFC-8032",
+        "RFC-8446",
+        "RFC-8461",
+        "RFC-8616",
+        "RFC-8725",
+        "RFC-9000",
+        "RFC-9114",
+        "RFC-9116",
+        "RFC-9180",
+        "RFC-9421",
+        "RFC-9458",
+        "RFC-9700"
+      ]
+    }
+  },
+  "CVE-2021-27137": {
+    "name": "DD-WRT Stack-Based Buffer Overflow Vulnerability",
+    "rwep": 70,
+    "cvss": 8.1,
+    "cisa_kev": true,
+    "epss_score": 0.10809,
+    "epss_percentile": 0.95377,
+    "referencing_skills": [
+      "kernel-lpe-triage",
+      "attack-surface-pentest",
+      "ot-ics-security",
+      "coordinated-vuln-disclosure",
+      "sector-energy",
+      "mail-server-hardening",
+      "network-trust",
+      "audit-log-integrity",
+      "self-update-integrity",
+      "multitenancy-isolation",
+      "decompression-dos",
+      "log-injection-telemetry",
+      "privacy-consent-ops"
+    ],
+    "chain": {
+      "cwes": [
+        {
+          "id": "CWE-1037",
+          "name": "Processor Optimization Removal or Modification of Security-critical Code",
+          "category": "Hardware / Side Channel"
+        },
+        {
+          "id": "CWE-117",
+          "name": "Improper Output Neutralization for Logs",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-125",
+          "name": "Out-of-bounds Read",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-1333",
+          "name": "Inefficient Regular Expression Complexity",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-1357",
+          "name": "Reliance on Insufficiently Trustworthy Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-1395",
+          "name": "Dependency on Vulnerable Third-Party Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-22",
+          "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
+          "category": "Path/Resource"
+        },
+        {
+          "id": "CWE-269",
+          "name": "Improper Privilege Management",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-284",
+          "name": "Improper Access Control",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-287",
+          "name": "Improper Authentication",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-290",
+          "name": "Authentication Bypass by Spoofing",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-306",
+          "name": "Missing Authentication for Critical Function",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-345",
+          "name": "Insufficient Verification of Data Authenticity",
+          "category": "Authenticity / Supply Chain"
+        },
+        {
+          "id": "CWE-347",
+          "name": "Improper Verification of Cryptographic Signature",
+          "category": "Cryptography"
+        },
+        {
+          "id": "CWE-352",
+          "name": "Cross-Site Request Forgery (CSRF)",
+          "category": "Session"
+        },
+        {
+          "id": "CWE-353",
+          "name": "Missing Support for Integrity Check",
+          "category": "Integrity"
+        },
+        {
+          "id": "CWE-362",
+          "name": "Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)",
+          "category": "Concurrency"
+        },
+        {
+          "id": "CWE-400",
+          "name": "Uncontrolled Resource Consumption",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-409",
+          "name": "Improper Handling of Highly Compressed Data (Data Amplification)",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-416",
+          "name": "Use After Free",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-434",
+          "name": "Unrestricted Upload of File with Dangerous Type",
+          "category": "File Handling"
+        },
+        {
+          "id": "CWE-494",
+          "name": "Download of Code Without Integrity Check",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-532",
+          "name": "Insertion of Sensitive Information into Log File",
+          "category": "Information Disclosure"
+        },
+        {
+          "id": "CWE-611",
+          "name": "Improper Restriction of XML External Entity Reference",
+          "category": "XML / Injection"
+        },
+        {
+          "id": "CWE-639",
+          "name": "Authorization Bypass Through User-Controlled Key",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-668",
+          "name": "Exposure of Resource to Wrong Sphere",
+          "category": "Access Control"
+        },
+        {
+          "id": "CWE-672",
+          "name": "Operation on a Resource after Expiration or Release",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-732",
+          "name": "Incorrect Permission Assignment for Critical Resource",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-77",
+          "name": "Improper Neutralization of Special Elements used in a Command (Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-770",
+          "name": "Allocation of Resources Without Limits or Throttling",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-776",
+          "name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')",
+          "category": "XML"
+        },
+        {
+          "id": "CWE-778",
+          "name": "Insufficient Logging",
+          "category": "Logging"
+        },
+        {
+          "id": "CWE-78",
+          "name": "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-787",
+          "name": "Out-of-bounds Write",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-79",
+          "name": "Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-798",
+          "name": "Use of Hard-coded Credentials",
+          "category": "Credentials"
+        },
+        {
+          "id": "CWE-807",
+          "name": "Reliance on Untrusted Inputs in a Security Decision",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-829",
+          "name": "Inclusion of Functionality from Untrusted Control Sphere",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-834",
+          "name": "Excessive Iteration",
+          "category": "Resource Management"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-89",
+          "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-918",
+          "name": "Server-Side Request Forgery (SSRF)",
+          "category": "Network"
+        },
+        {
+          "id": "CWE-93",
+          "name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')",
+          "category": "Injection"
+        }
+      ],
+      "atlas": [
+        {
+          "id": "AML.T0010",
+          "name": "ML Supply Chain Compromise",
+          "tactic": "Initial Access"
+        },
+        {
+          "id": "AML.T0043",
+          "name": "Craft Adversarial Data",
+          "tactic": "ML Attack Staging"
+        },
+        {
+          "id": "AML.T0051",
+          "name": "LLM Prompt Injection",
+          "tactic": "Execution"
+        }
+      ],
+      "d3fend": [
+        {
+          "id": "D3-ASLR",
+          "name": "Address Space Layout Randomization",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-CSPP",
+          "name": "Client-server Payload Profiling",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-EAL",
+          "name": "Executable Allowlisting",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-NI",
+          "name": "Network Isolation",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-NTA",
+          "name": "Network Traffic Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-NTPM",
+          "name": "Network Traffic Policy Mapping",
+          "tactic": "Model"
+        },
+        {
+          "id": "D3-PA",
+          "name": "Process Analysis",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-PHRA",
+          "name": "Process Hardware Resource Access",
+          "tactic": "Isolate"
+        },
+        {
+          "id": "D3-PSEP",
+          "name": "Process Segment Execution Prevention",
+          "tactic": "Harden"
+        },
+        {
+          "id": "D3-SCP",
+          "name": "System Call Filtering",
+          "tactic": "Isolate"
+        }
+      ],
+      "framework_gaps": [
+        {
+          "id": "AU-Essential-8-App-Hardening",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "User application hardening"
+        },
+        {
+          "id": "AU-Essential-8-Backup",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Regular backups"
+        },
+        {
+          "id": "AU-Essential-8-Patch",
+          "framework": "ASD Essential Eight (AU)",
+          "control_name": "Patch operating systems"
+        },
+        {
+          "id": "AU-ISM-1556",
+          "framework": "au-ism",
+          "control_name": "Multi-factor authentication for privileged users (telecom NMS application)"
+        },
+        {
+          "id": "CIS-Controls-v8-Control7",
+          "framework": "CIS Controls v8",
+          "control_name": "Continuous Vulnerability Management"
+        },
+        {
+          "id": "IEC-62443-3-3",
+          "framework": "IEC 62443-3-3 (Industrial communication networks — security for IACS)",
+          "control_name": "System security requirements and security levels"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.15",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Logging"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.21",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Security of network services"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.8",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Management of technical vulnerabilities"
+        },
+        {
+          "id": "NERC-CIP-007-6-R4",
+          "framework": "NERC CIP-007-6 (BES Cyber System Security Management)",
+          "control_name": "Security event monitoring"
+        },
+        {
+          "id": "NIS2-Art21-incident-handling",
+          "framework": "EU NIS2 Directive (2022/2555)",
+          "control_name": "Incident handling"
+        },
+        {
+          "id": "NIS2-Art21-network-security",
+          "framework": "EU NIS2 Directive (Directive (EU) 2022/2555)",
+          "control_name": "Security of network and information systems"
+        },
+        {
+          "id": "NIS2-Art21-patch-management",
+          "framework": "EU NIS2 Directive",
+          "control_name": "Vulnerability handling and disclosure"
+        },
+        {
+          "id": "NIST-800-115",
+          "framework": "NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)",
+          "control_name": "Technical Guide to Information Security Testing and Assessment"
+        },
+        {
+          "id": "NIST-800-218-SSDF",
+          "framework": "NIST SP 800-218 (Secure Software Development Framework v1.1)",
+          "control_name": "Secure Software Development Framework"
+        },
+        {
+          "id": "NIST-800-53-AC-3",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Access Enforcement"
+        },
+        {
+          "id": "NIST-800-53-SC-8",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Transmission Confidentiality and Integrity"
+        },
+        {
+          "id": "NIST-800-53-SI-2",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Flaw Remediation"
+        },
+        {
+          "id": "NIST-800-53-SR-11",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Component Authenticity"
+        },
+        {
+          "id": "NIST-800-82r3",
+          "framework": "NIST SP 800-82 Rev 3 (Guide to OT Security)",
+          "control_name": "Guide to Operational Technology (OT) Security"
+        },
+        {
+          "id": "OWASP-Pen-Testing-Guide-v5",
+          "framework": "OWASP Web Security Testing Guide v5 (WSTG)",
+          "control_name": "Web application penetration testing methodology"
+        },
+        {
+          "id": "PCI-DSS-4.0-6.3.3",
+          "framework": "PCI DSS 4.0",
+          "control_name": "All system components are protected from known vulnerabilities by installing applicable security patches/updates"
+        },
+        {
+          "id": "PTES-Pre-engagement",
+          "framework": "Penetration Testing Execution Standard (PTES)",
+          "control_name": "Pre-engagement Interactions"
+        },
+        {
+          "id": "SOC2-CC7-anomaly-detection",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "System Operations — Threat and Vulnerability Management"
+        },
+        {
+          "id": "SOC2-CC9-vendor-management",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "Risk Mitigation — Vendor and Business Partner Risk"
+        },
+        {
+          "id": "UK-CAF-A1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Governance"
+        },
+        {
+          "id": "UK-CAF-B2",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Identity and access control"
+        },
+        {
+          "id": "UK-CAF-B4",
+          "framework": "UK NCSC Cyber Assessment Framework (CAF)",
+          "control_name": "System security"
+        },
+        {
+          "id": "UK-CAF-D1",
+          "framework": "UK NCSC Cyber Assessment Framework v3.2",
+          "control_name": "Response and recovery planning"
+        }
+      ],
+      "attack_refs": [
+        "T0855",
+        "T0883",
+        "T1036",
+        "T1059",
+        "T1068",
+        "T1070",
+        "T1071.003",
+        "T1071.004",
+        "T1078",
+        "T1133",
+        "T1190",
+        "T1195.002",
+        "T1213",
+        "T1499",
+        "T1499.001",
+        "T1530",
+        "T1548.001",
+        "T1556",
+        "T1557",
+        "T1562.008",
+        "T1565.001",
+        "T1574"
+      ],
+      "rfc_refs": [
+        "CSAF-2.0",
+        "ISO-29147",
+        "ISO-30111",
+        "RFC-4301",
+        "RFC-4303",
+        "RFC-7296",
+        "RFC-9116"
+      ]
+    }
+  },
   "CWE-20": {
     "name": "Improper Input Validation",
     "category": "Validation",
@@ -419523,6 +422083,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -420094,6 +422655,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -420219,6 +422781,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -420555,6 +423119,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -421120,6 +423685,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -421245,6 +423811,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -421497,6 +424065,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -421998,6 +424567,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -422113,6 +424683,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-9082",
       "MAL-2026-3083",
       "MAL-2026-MOIKA-DEPCONFUSION",
@@ -422355,6 +424927,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -422856,6 +425429,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -422971,6 +425545,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-9082",
       "MAL-2026-3083",
       "MAL-2026-MOIKA-DEPCONFUSION",
@@ -423228,6 +425804,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -423729,6 +426306,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -423844,6 +426422,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-9082",
       "MAL-2026-3083",
       "MAL-2026-MOIKA-DEPCONFUSION",
@@ -424337,6 +426917,7 @@
       "CVE-2025-8747",
       "CVE-2026-0257",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-20245",
@@ -424389,6 +426970,7 @@
       "CVE-2026-56155",
       "CVE-2026-56290",
       "CVE-2026-5760",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
       "MAL-2026-3083",
@@ -424632,6 +427214,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -425150,6 +427733,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-11645",
       "CVE-2026-12569",
       "CVE-2026-1281",
@@ -425258,6 +427842,8 @@
       "CVE-2026-56290",
       "CVE-2026-56291",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-9082",
@@ -425660,6 +428246,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -426236,6 +428823,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -426361,6 +428949,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -426841,6 +429431,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -427357,6 +429948,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -427473,6 +430065,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
@@ -427694,6 +430288,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -428201,6 +430796,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-11645",
       "CVE-2026-12569",
       "CVE-2026-1281",
@@ -428311,6 +430907,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-9082",
@@ -428892,6 +431490,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -429410,6 +432009,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -429526,6 +432126,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
@@ -429862,6 +432464,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -430349,6 +432952,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-11645",
       "CVE-2026-12569",
       "CVE-2026-1281",
@@ -430455,6 +433059,8 @@
       "CVE-2026-56290",
       "CVE-2026-56291",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
@@ -431023,6 +433629,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -431577,6 +434184,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -431696,6 +434304,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -432055,6 +434665,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -432571,6 +435182,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -432687,6 +435299,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
@@ -432768,6 +435382,7 @@
       "CVE-2021-20123",
       "CVE-2021-20124",
       "CVE-2021-26086",
+      "CVE-2021-27137",
       "CVE-2021-3129",
       "CVE-2021-33044",
       "CVE-2021-33045",
@@ -433065,6 +435680,7 @@
       "CVE-2025-8747",
       "CVE-2026-0257",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -433126,6 +435742,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-7473",
       "CVE-2026-8398",
       "CVE-2026-9082",
@@ -433355,6 +435973,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -433873,6 +436492,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-11645",
       "CVE-2026-12569",
       "CVE-2026-1281",
@@ -433981,6 +436601,8 @@
       "CVE-2026-56290",
       "CVE-2026-56291",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-9082",
@@ -434210,6 +436832,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -434728,6 +437351,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-11645",
       "CVE-2026-12569",
       "CVE-2026-1281",
@@ -434836,6 +437460,8 @@
       "CVE-2026-56290",
       "CVE-2026-56291",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-9082",
@@ -435177,6 +437803,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -435692,6 +438319,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -435808,6 +438436,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
@@ -436089,6 +438719,7 @@
       "CVE-2021-20123",
       "CVE-2021-20124",
       "CVE-2021-26086",
+      "CVE-2021-27137",
       "CVE-2021-3129",
       "CVE-2021-33044",
       "CVE-2021-33045",
@@ -436428,6 +439059,7 @@
       "CVE-2025-8747",
       "CVE-2026-0257",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -436494,6 +439126,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-7473",
       "CVE-2026-8398",
       "CVE-2026-9082",
@@ -436871,6 +439505,7 @@
       "CVE-2025-69286",
       "CVE-2025-6965",
       "CVE-2026-0257",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-20245",
       "CVE-2026-21858",
@@ -436899,6 +439534,7 @@
       "CVE-2026-56155",
       "CVE-2026-56290",
       "CVE-2026-5760",
+      "CVE-2026-63030",
       "MAL-2026-3083",
       "MAL-2026-MOIKA-DEPCONFUSION",
       "MAL-2026-NODE-IPC-STEALER",
@@ -437355,6 +439991,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -437915,6 +440552,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -438036,6 +440674,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -438454,6 +441094,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -438970,6 +441611,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -439086,6 +441728,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
@@ -439444,6 +442088,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -440006,6 +442651,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -440129,6 +442775,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -440567,6 +443215,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -441073,6 +443722,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -441184,6 +443834,8 @@
       "CVE-2026-56290",
       "CVE-2026-56291",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
@@ -441375,6 +444027,7 @@
       "CVE-2021-20123",
       "CVE-2021-20124",
       "CVE-2021-26086",
+      "CVE-2021-27137",
       "CVE-2021-3129",
       "CVE-2021-33044",
       "CVE-2021-33045",
@@ -441702,6 +444355,7 @@
       "CVE-2025-8747",
       "CVE-2026-0257",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -441768,6 +444422,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-7473",
       "CVE-2026-8398",
       "CVE-2026-9082",
@@ -442202,6 +444858,7 @@
       "CVE-2025-69286",
       "CVE-2025-6965",
       "CVE-2026-0257",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-20245",
       "CVE-2026-21858",
@@ -442233,6 +444890,7 @@
       "CVE-2026-56155",
       "CVE-2026-56290",
       "CVE-2026-5760",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
       "MAL-2026-3083",
@@ -442674,6 +445332,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -443244,6 +445903,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -443369,6 +446029,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
@@ -443891,6 +446553,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -444468,6 +447131,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -444594,6 +447258,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -444791,6 +447457,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -445267,6 +447934,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-11645",
       "CVE-2026-12569",
       "CVE-2026-1281",
@@ -445369,6 +448037,8 @@
       "CVE-2026-56290",
       "CVE-2026-56291",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-9082",
       "MAL-2026-3083"
     ]
@@ -445684,6 +448354,7 @@
       "CVE-2025-6965",
       "CVE-2025-8747",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-20245",
@@ -446121,6 +448792,7 @@
       "CVE-2025-69286",
       "CVE-2025-6965",
       "CVE-2026-0257",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-20245",
       "CVE-2026-21858",
@@ -446152,6 +448824,7 @@
       "CVE-2026-56155",
       "CVE-2026-56290",
       "CVE-2026-5760",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
       "MAL-2026-3083",
@@ -446454,6 +449127,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -446962,6 +449636,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-11645",
       "CVE-2026-12569",
       "CVE-2026-1281",
@@ -447063,6 +449738,8 @@
       "CVE-2026-56290",
       "CVE-2026-56291",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-9082",
       "MAL-2026-3083",
       "MAL-2026-MOIKA-DEPCONFUSION",
@@ -447421,6 +450098,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -447936,6 +450614,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -448052,6 +450731,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-8398",
       "CVE-2026-9082",
       "MAL-2026-3083",
@@ -448644,6 +451325,7 @@
       "CVE-2025-8747",
       "CVE-2026-0257",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-15409",
@@ -448707,6 +451389,7 @@
       "CVE-2026-56290",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-63030",
       "CVE-2026-7473",
       "CVE-2026-8398",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
@@ -449189,6 +451872,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -449748,6 +452432,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -449867,6 +452552,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -450033,6 +452720,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -450553,6 +453241,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-11645",
       "CVE-2026-12569",
       "CVE-2026-1281",
@@ -450664,6 +453353,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-9082"
@@ -450825,6 +453516,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -451364,6 +454056,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -451477,6 +454170,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -451756,6 +454451,7 @@
       "CVE-2021-20123",
       "CVE-2021-20124",
       "CVE-2021-26086",
+      "CVE-2021-27137",
       "CVE-2021-3129",
       "CVE-2021-33044",
       "CVE-2021-33045",
@@ -452085,6 +454781,7 @@
       "CVE-2025-8747",
       "CVE-2026-0257",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -452154,6 +454851,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-7473",
       "CVE-2026-8398",
       "CVE-2026-9082",
@@ -452386,6 +455085,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -452942,6 +455642,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -453060,6 +455761,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
@@ -453426,6 +456129,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -453966,6 +456670,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -454079,6 +456784,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -454299,6 +457006,7 @@
       "CVE-2021-20123",
       "CVE-2021-20124",
       "CVE-2021-26086",
+      "CVE-2021-27137",
       "CVE-2021-3129",
       "CVE-2021-33044",
       "CVE-2021-33045",
@@ -454610,6 +457318,7 @@
       "CVE-2025-8747",
       "CVE-2026-0257",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -454674,6 +457383,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-7473",
       "CVE-2026-7482",
       "CVE-2026-8398",
@@ -454952,6 +457663,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -455501,6 +458213,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -455618,6 +458331,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-7482",
@@ -455769,6 +458484,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -456308,6 +459024,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -456421,6 +459138,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -456568,6 +459287,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -457108,6 +459828,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -457221,6 +459942,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -457371,6 +460094,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -457910,6 +460634,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -458023,6 +460748,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -458558,6 +461285,7 @@
       "CVE-2021-20123",
       "CVE-2021-20124",
       "CVE-2021-26086",
+      "CVE-2021-27137",
       "CVE-2021-3129",
       "CVE-2021-33044",
       "CVE-2021-33045",
@@ -458869,6 +461597,7 @@
       "CVE-2025-8747",
       "CVE-2026-0257",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -458933,6 +461662,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-7473",
       "CVE-2026-7482",
       "CVE-2026-8398",
@@ -459098,6 +461829,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -459618,6 +462350,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-11645",
       "CVE-2026-12569",
       "CVE-2026-1281",
@@ -459729,6 +462462,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-9082"
@@ -459860,6 +462595,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -460399,6 +463135,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -460512,6 +463249,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -460647,6 +463386,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -461186,6 +463926,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -461299,6 +464040,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",
@@ -461439,6 +464182,7 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27137",
       "CVE-2021-30952",
       "CVE-2021-31196",
       "CVE-2021-3129",
@@ -461979,6 +464723,7 @@
       "CVE-2026-0257",
       "CVE-2026-0300",
       "CVE-2026-0766",
+      "CVE-2026-0770",
       "CVE-2026-10520",
       "CVE-2026-11645",
       "CVE-2026-12569",
@@ -462092,6 +464837,8 @@
       "CVE-2026-56291",
       "CVE-2026-5760",
       "CVE-2026-58644",
+      "CVE-2026-60137",
+      "CVE-2026-63030",
       "CVE-2026-6973",
       "CVE-2026-7473",
       "CVE-2026-8398",