@blamejs/exceptd-skills 0.18.24 → 0.18.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/CHANGELOG.md +8 -0
  2. package/data/_indexes/_meta.json +8 -8
  3. package/data/_indexes/activity-feed.json +10 -10
  4. package/data/_indexes/catalog-summaries.json +4 -4
  5. package/data/_indexes/chains.json +91307 -17170
  6. package/data/attack-techniques.json +19 -2
  7. package/data/cve-catalog.json +2005 -484
  8. package/data/cwe-catalog.json +5 -1
  9. package/data/framework-control-gaps.json +1156 -14
  10. package/data/zeroday-lessons.json +246 -2
  11. package/lib/validate-package.js +5 -2
  12. package/manifest.json +53 -53
  13. package/package.json +2 -2
  14. package/sbom.cdx.json +42 -27
  15. package/scripts/check-framework-gap-coverage.js +103 -0
  16. package/scripts/predeploy.js +11 -0
package/data/framework-control-gaps.json CHANGED
@@ -240,15 +240,37 @@
240
240
  "status": "open",
241
241
  "opened_date": "2026-05-13",
242
242
  "evidence_cves": [
243
+ "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
244
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
245
+ "CVE-2007-0671",
246
+ "CVE-2008-0015",
243
247
  "CVE-2008-4128",
248
+ "CVE-2009-0238",
249
+ "CVE-2009-0556",
250
+ "CVE-2009-1537",
251
+ "CVE-2009-3459",
252
+ "CVE-2010-0249",
253
+ "CVE-2010-0806",
254
+ "CVE-2010-3765",
255
+ "CVE-2011-3402",
256
+ "CVE-2012-1854",
244
257
  "CVE-2012-4792",
258
+ "CVE-2013-0643",
245
259
  "CVE-2013-0648",
260
+ "CVE-2013-3893",
261
+ "CVE-2013-3918",
246
262
  "CVE-2014-0497",
247
263
  "CVE-2014-0502",
248
264
  "CVE-2016-3714",
249
265
  "CVE-2017-3506",
250
266
  "CVE-2018-9276",
251
267
  "CVE-2019-16278",
268
+ "CVE-2020-13965",
269
+ "CVE-2020-17519",
270
+ "CVE-2020-7796",
271
+ "CVE-2021-21311",
272
+ "CVE-2021-26828",
273
+ "CVE-2021-26829",
252
274
  "CVE-2021-3129",
253
275
  "CVE-2022-23748",
254
276
  "CVE-2023-20273",
@@ -268,6 +290,9 @@
268
290
  "CVE-2023-41993",
269
291
  "CVE-2023-42793",
270
292
  "CVE-2023-46604",
293
+ "CVE-2023-51764",
294
+ "CVE-2023-51765",
295
+ "CVE-2023-51766",
271
296
  "CVE-2023-5217",
272
297
  "CVE-2023-6345",
273
298
  "CVE-2023-6548",
@@ -280,6 +305,8 @@
280
305
  "CVE-2024-29059",
281
306
  "CVE-2024-29988",
282
307
  "CVE-2024-30040",
308
+ "CVE-2024-3154",
309
+ "CVE-2024-37383",
283
310
  "CVE-2024-38112",
284
311
  "CVE-2024-38178",
285
312
  "CVE-2024-38189",
@@ -287,6 +314,7 @@
287
314
  "CVE-2024-38217",
288
315
  "CVE-2024-38226",
289
316
  "CVE-2024-41710",
317
+ "CVE-2024-42009",
290
318
  "CVE-2024-43461",
291
319
  "CVE-2024-43572",
292
320
  "CVE-2024-43573",
@@ -294,12 +322,62 @@
294
322
  "CVE-2024-49039",
295
323
  "CVE-2024-4947",
296
324
  "CVE-2024-55956",
325
+ "CVE-2024-56145",
297
326
  "CVE-2024-7262",
327
+ "CVE-2024-7971",
298
328
  "CVE-2024-8957",
299
329
  "CVE-2024-9463",
300
330
  "CVE-2024-9680",
301
331
  "CVE-2025-0411",
302
- "CVE-2026-48939"
332
+ "CVE-2025-11953",
333
+ "CVE-2025-13223",
334
+ "CVE-2025-27915",
335
+ "CVE-2025-30066",
336
+ "CVE-2025-30154",
337
+ "CVE-2025-30397",
338
+ "CVE-2025-31125",
339
+ "CVE-2025-33053",
340
+ "CVE-2025-48700",
341
+ "CVE-2025-48927",
342
+ "CVE-2025-4919",
343
+ "CVE-2025-49844",
344
+ "CVE-2025-53690",
345
+ "CVE-2025-53773",
346
+ "CVE-2025-54313",
347
+ "CVE-2025-55319",
348
+ "CVE-2025-59374",
349
+ "CVE-2025-6558",
350
+ "CVE-2025-66376",
351
+ "CVE-2025-68461",
352
+ "CVE-2025-68664",
353
+ "CVE-2025-68665",
354
+ "CVE-2025-8088",
355
+ "CVE-2026-0770",
356
+ "CVE-2026-21509",
357
+ "CVE-2026-21513",
358
+ "CVE-2026-21514",
359
+ "CVE-2026-22778",
360
+ "CVE-2026-24061",
361
+ "CVE-2026-30615",
362
+ "CVE-2026-30623",
363
+ "CVE-2026-32201",
364
+ "CVE-2026-32202",
365
+ "CVE-2026-34621",
366
+ "CVE-2026-3910",
367
+ "CVE-2026-39884",
368
+ "CVE-2026-39987",
369
+ "CVE-2026-42897",
370
+ "CVE-2026-48027",
371
+ "CVE-2026-48939",
372
+ "CVE-2026-5281",
373
+ "CVE-2026-7482",
374
+ "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
375
+ "MAL-2026-3083",
376
+ "MAL-2026-MOIKA-DEPCONFUSION",
377
+ "MAL-2026-NODE-IPC-STEALER",
378
+ "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
379
+ "MAL-2026-TANSTACK-MINI",
380
+ "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
303
381
  ],
304
382
  "atlas_refs": [
305
383
  "AML.T0010",
@@ -334,7 +412,11 @@
334
412
  "real_requirement": "Backups cover AI-system artefacts (model weights, RAG corpora, plugin registries, AI-tool configuration files) with off-network retention; backup-integrity verification includes per-document hash comparison for RAG corpora to detect corpus poisoning; documented 'AI-system restore to last-known-good' workflow that maps to detected AI-incident classes.",
335
413
  "status": "open",
336
414
  "opened_date": "2026-05-13",
337
- "evidence_cves": [],
415
+ "evidence_cves": [
416
+ "CVE-2022-23812",
417
+ "CVE-2024-1708",
418
+ "CVE-2024-37085"
419
+ ],
338
420
  "atlas_refs": [
339
421
  "AML.T0010",
340
422
  "AML.T0020",
@@ -367,7 +449,14 @@
367
449
  "real_requirement": "MFA covers human identities at ML2+ with phishing-resistant factors (WebAuthn/passkeys, FIDO2). AI-provider credentials use short-lived OIDC tokens with mandatory rotation, never long-lived bearer keys. MCP server authentication uses signed JWTs / mTLS in production. Deepfake-grade phishing assumed; MFA decisions treat SMS/voice as insufficient.",
368
450
  "status": "open",
369
451
  "opened_date": "2026-05-13",
370
- "evidence_cves": [],
452
+ "evidence_cves": [
453
+ "CVE-2024-39891",
454
+ "CVE-2025-32975",
455
+ "CVE-2025-48928",
456
+ "CVE-2025-55241",
457
+ "CVE-2025-5777",
458
+ "CVE-2026-20182"
459
+ ],
371
460
  "atlas_refs": [
372
461
  "AML.T0055"
373
462
  ],
@@ -402,39 +491,76 @@
402
491
  "status": "open",
403
492
  "opened_date": "2026-05-13",
404
493
  "evidence_cves": [
494
+ "CVE-2008-4250",
495
+ "CVE-2010-3962",
496
+ "CVE-2011-0411",
405
497
  "CVE-2014-100005",
406
498
  "CVE-2014-2120",
499
+ "CVE-2014-3931",
500
+ "CVE-2014-6278",
407
501
  "CVE-2014-8361",
502
+ "CVE-2015-7755",
503
+ "CVE-2016-10033",
408
504
  "CVE-2016-20017",
505
+ "CVE-2016-7836",
409
506
  "CVE-2017-1000253",
507
+ "CVE-2017-1000353",
410
508
  "CVE-2017-12637",
411
509
  "CVE-2017-3066",
412
510
  "CVE-2017-6884",
511
+ "CVE-2017-7921",
413
512
  "CVE-2018-0824",
513
+ "CVE-2018-14634",
414
514
  "CVE-2018-14667",
415
515
  "CVE-2018-14933",
416
516
  "CVE-2018-15133",
417
517
  "CVE-2018-19410",
518
+ "CVE-2018-4063",
418
519
  "CVE-2018-8639",
520
+ "CVE-2019-0344",
419
521
  "CVE-2019-11001",
522
+ "CVE-2019-19006",
523
+ "CVE-2019-5418",
524
+ "CVE-2019-6693",
525
+ "CVE-2019-9621",
420
526
  "CVE-2019-9874",
421
527
  "CVE-2019-9875",
422
528
  "CVE-2020-0618",
529
+ "CVE-2020-10148",
423
530
  "CVE-2020-11023",
424
531
  "CVE-2020-14644",
425
532
  "CVE-2020-15069",
426
533
  "CVE-2020-15415",
534
+ "CVE-2020-17103-REREGRESSION-2026",
535
+ "CVE-2020-24363",
536
+ "CVE-2020-25078",
537
+ "CVE-2020-25079",
427
538
  "CVE-2020-2551",
428
539
  "CVE-2020-2883",
429
540
  "CVE-2020-3259",
541
+ "CVE-2020-9715",
430
542
  "CVE-2021-20035",
431
543
  "CVE-2021-20124",
544
+ "CVE-2021-22054",
545
+ "CVE-2021-22175",
546
+ "CVE-2021-22555",
547
+ "CVE-2021-22681",
432
548
  "CVE-2021-26086",
549
+ "CVE-2021-27137",
550
+ "CVE-2021-30952",
551
+ "CVE-2021-31196",
552
+ "CVE-2021-32030",
553
+ "CVE-2021-33515",
433
554
  "CVE-2021-36380",
555
+ "CVE-2021-39935",
434
556
  "CVE-2021-40407",
435
557
  "CVE-2021-40655",
436
558
  "CVE-2021-41277",
559
+ "CVE-2021-43226",
560
+ "CVE-2021-43798",
561
+ "CVE-2021-44529",
437
562
  "CVE-2022-0185",
563
+ "CVE-2022-20775",
438
564
  "CVE-2022-21445",
439
565
  "CVE-2022-22071",
440
566
  "CVE-2022-22265",
@@ -442,17 +568,25 @@
442
568
  "CVE-2022-23227",
443
569
  "CVE-2022-24816",
444
570
  "CVE-2022-2586",
571
+ "CVE-2022-38028",
572
+ "CVE-2022-40799",
445
573
  "CVE-2022-43769",
446
574
  "CVE-2022-43939",
575
+ "CVE-2022-48503",
447
576
  "CVE-2022-48618",
577
+ "CVE-2023-0386",
448
578
  "CVE-2023-1671",
449
579
  "CVE-2023-20118",
580
+ "CVE-2023-21529",
450
581
  "CVE-2023-21608",
451
582
  "CVE-2023-22515",
452
583
  "CVE-2023-22518",
453
584
  "CVE-2023-22527",
454
585
  "CVE-2023-23752",
586
+ "CVE-2023-24955",
455
587
  "CVE-2023-25280",
588
+ "CVE-2023-2533",
589
+ "CVE-2023-27351",
456
590
  "CVE-2023-28229",
457
591
  "CVE-2023-28434",
458
592
  "CVE-2023-28461",
@@ -460,19 +594,24 @@
460
594
  "CVE-2023-29357",
461
595
  "CVE-2023-33063",
462
596
  "CVE-2023-33106",
597
+ "CVE-2023-33538",
463
598
  "CVE-2023-34048",
464
599
  "CVE-2023-34192",
465
600
  "CVE-2023-35082",
601
+ "CVE-2023-3519",
466
602
  "CVE-2023-35674",
467
603
  "CVE-2023-36036",
604
+ "CVE-2023-36424",
468
605
  "CVE-2023-36802",
469
606
  "CVE-2023-38203",
607
+ "CVE-2023-39780",
470
608
  "CVE-2023-40044",
471
609
  "CVE-2023-41061",
472
610
  "CVE-2023-41064",
473
611
  "CVE-2023-41265",
474
612
  "CVE-2023-41266",
475
613
  "CVE-2023-41763",
614
+ "CVE-2023-41974",
476
615
  "CVE-2023-41990",
477
616
  "CVE-2023-41991",
478
617
  "CVE-2023-41992",
@@ -480,8 +619,12 @@
480
619
  "CVE-2023-42824",
481
620
  "CVE-2023-42916",
482
621
  "CVE-2023-42917",
622
+ "CVE-2023-43000",
623
+ "CVE-2023-43208",
624
+ "CVE-2023-4346",
483
625
  "CVE-2023-43770",
484
626
  "CVE-2023-44221",
627
+ "CVE-2023-44487",
485
628
  "CVE-2023-45249",
486
629
  "CVE-2023-45727",
487
630
  "CVE-2023-46747",
@@ -491,53 +634,74 @@
491
634
  "CVE-2023-4762",
492
635
  "CVE-2023-48365",
493
636
  "CVE-2023-4863",
637
+ "CVE-2023-48788",
494
638
  "CVE-2023-49103",
495
639
  "CVE-2023-4911",
496
640
  "CVE-2023-4966",
497
641
  "CVE-2023-49897",
642
+ "CVE-2023-50387",
643
+ "CVE-2023-50868",
644
+ "CVE-2023-52163",
498
645
  "CVE-2023-5631",
499
646
  "CVE-2023-6549",
500
647
  "CVE-2023-7024",
501
648
  "CVE-2023-7028",
649
+ "CVE-2024-0012",
502
650
  "CVE-2024-0519",
651
+ "CVE-2024-0769",
503
652
  "CVE-2024-1086",
653
+ "CVE-2024-11182",
504
654
  "CVE-2024-11667",
505
655
  "CVE-2024-11680",
506
656
  "CVE-2024-1212",
507
657
  "CVE-2024-12356",
508
658
  "CVE-2024-12686",
659
+ "CVE-2024-12987",
509
660
  "CVE-2024-13159",
510
661
  "CVE-2024-13160",
511
662
  "CVE-2024-13161",
663
+ "CVE-2024-1709",
664
+ "CVE-2024-20399",
512
665
  "CVE-2024-20439",
513
666
  "CVE-2024-20767",
514
667
  "CVE-2024-20953",
668
+ "CVE-2024-21287",
515
669
  "CVE-2024-21413",
670
+ "CVE-2024-21626",
516
671
  "CVE-2024-21887",
517
672
  "CVE-2024-21893",
518
673
  "CVE-2024-23113",
519
674
  "CVE-2024-23222",
520
675
  "CVE-2024-23225",
521
676
  "CVE-2024-23296",
677
+ "CVE-2024-23897",
678
+ "CVE-2024-24919",
522
679
  "CVE-2024-26169",
523
680
  "CVE-2024-27198",
681
+ "CVE-2024-27199",
524
682
  "CVE-2024-27348",
683
+ "CVE-2024-27443",
684
+ "CVE-2024-28986",
525
685
  "CVE-2024-28995",
526
686
  "CVE-2024-29745",
527
687
  "CVE-2024-29748",
528
688
  "CVE-2024-29824",
529
689
  "CVE-2024-30051",
530
690
  "CVE-2024-30088",
691
+ "CVE-2024-3094",
531
692
  "CVE-2024-32113",
532
693
  "CVE-2024-3272",
533
694
  "CVE-2024-3273",
534
695
  "CVE-2024-3393",
535
696
  "CVE-2024-3400",
697
+ "CVE-2024-34102",
536
698
  "CVE-2024-35250",
537
699
  "CVE-2024-36401",
538
700
  "CVE-2024-36971",
701
+ "CVE-2024-37079",
539
702
  "CVE-2024-38014",
540
703
  "CVE-2024-38080",
704
+ "CVE-2024-38094",
541
705
  "CVE-2024-38106",
542
706
  "CVE-2024-38107",
543
707
  "CVE-2024-38178",
@@ -545,96 +709,292 @@
545
709
  "CVE-2024-38475",
546
710
  "CVE-2024-38812",
547
711
  "CVE-2024-38813",
712
+ "CVE-2024-38856",
713
+ "CVE-2024-4040",
714
+ "CVE-2024-40635",
548
715
  "CVE-2024-40711",
549
716
  "CVE-2024-40766",
550
717
  "CVE-2024-40890",
551
718
  "CVE-2024-40891",
552
719
  "CVE-2024-43047",
720
+ "CVE-2024-43451",
721
+ "CVE-2024-43468",
722
+ "CVE-2024-4358",
553
723
  "CVE-2024-44309",
554
724
  "CVE-2024-45195",
555
725
  "CVE-2024-45519",
726
+ "CVE-2024-4577",
556
727
  "CVE-2024-4610",
557
728
  "CVE-2024-4671",
558
729
  "CVE-2024-47575",
559
730
  "CVE-2024-4761",
560
731
  "CVE-2024-48248",
732
+ "CVE-2024-4879",
561
733
  "CVE-2024-4885",
562
734
  "CVE-2024-49035",
563
735
  "CVE-2024-49138",
564
736
  "CVE-2024-50302",
565
737
  "CVE-2024-50603",
738
+ "CVE-2024-50623",
566
739
  "CVE-2024-51378",
567
740
  "CVE-2024-51567",
741
+ "CVE-2024-5217",
568
742
  "CVE-2024-5274",
569
743
  "CVE-2024-53104",
570
744
  "CVE-2024-53150",
571
745
  "CVE-2024-53197",
572
746
  "CVE-2024-53704",
747
+ "CVE-2024-54085",
573
748
  "CVE-2024-55550",
574
749
  "CVE-2024-55591",
750
+ "CVE-2024-57726",
575
751
  "CVE-2024-57727",
752
+ "CVE-2024-57728",
576
753
  "CVE-2024-57968",
577
754
  "CVE-2024-58136",
578
755
  "CVE-2024-5910",
756
+ "CVE-2024-6670",
757
+ "CVE-2024-7399",
579
758
  "CVE-2024-7593",
759
+ "CVE-2024-7694",
580
760
  "CVE-2024-7965",
761
+ "CVE-2024-8068",
762
+ "CVE-2024-8069",
581
763
  "CVE-2024-8190",
582
764
  "CVE-2024-8956",
583
765
  "CVE-2024-9379",
584
766
  "CVE-2024-9380",
767
+ "CVE-2024-9465",
585
768
  "CVE-2024-9474",
769
+ "CVE-2024-9537",
586
770
  "CVE-2025-0108",
587
771
  "CVE-2025-0111",
772
+ "CVE-2025-0133",
588
773
  "CVE-2025-0994",
774
+ "CVE-2025-10035",
775
+ "CVE-2025-10585",
776
+ "CVE-2025-1094",
777
+ "CVE-2025-11371",
778
+ "CVE-2025-11837",
779
+ "CVE-2025-12480",
780
+ "CVE-2025-12686",
589
781
  "CVE-2025-1316",
782
+ "CVE-2025-14174",
783
+ "CVE-2025-14611",
784
+ "CVE-2025-14733",
785
+ "CVE-2025-14847",
786
+ "CVE-2025-15556",
590
787
  "CVE-2025-1976",
788
+ "CVE-2025-20281",
789
+ "CVE-2025-20333",
790
+ "CVE-2025-20337",
791
+ "CVE-2025-20352",
792
+ "CVE-2025-20362",
793
+ "CVE-2025-20393",
794
+ "CVE-2025-21042",
795
+ "CVE-2025-21043",
591
796
  "CVE-2025-21333",
592
797
  "CVE-2025-21334",
593
798
  "CVE-2025-21335",
594
799
  "CVE-2025-21418",
800
+ "CVE-2025-21479",
801
+ "CVE-2025-21480",
595
802
  "CVE-2025-21590",
803
+ "CVE-2025-22224",
804
+ "CVE-2025-22225",
805
+ "CVE-2025-22226",
596
806
  "CVE-2025-23006",
597
807
  "CVE-2025-23209",
808
+ "CVE-2025-24016",
598
809
  "CVE-2025-24054",
599
810
  "CVE-2025-24085",
811
+ "CVE-2025-24201",
600
812
  "CVE-2025-24472",
601
813
  "CVE-2025-24813",
814
+ "CVE-2025-24893",
602
815
  "CVE-2025-24983",
603
816
  "CVE-2025-24984",
604
817
  "CVE-2025-24985",
605
818
  "CVE-2025-24989",
819
+ "CVE-2025-24990",
606
820
  "CVE-2025-24991",
607
821
  "CVE-2025-24993",
608
822
  "CVE-2025-25181",
823
+ "CVE-2025-25257",
824
+ "CVE-2025-26399",
609
825
  "CVE-2025-26633",
826
+ "CVE-2025-27038",
827
+ "CVE-2025-2746",
828
+ "CVE-2025-2747",
829
+ "CVE-2025-2749",
830
+ "CVE-2025-2775",
831
+ "CVE-2025-2776",
610
832
  "CVE-2025-2783",
833
+ "CVE-2025-27920",
834
+ "CVE-2025-29635",
611
835
  "CVE-2025-29824",
612
836
  "CVE-2025-30406",
613
837
  "CVE-2025-31200",
614
838
  "CVE-2025-31201",
839
+ "CVE-2025-31277",
840
+ "CVE-2025-32432",
841
+ "CVE-2025-32433",
842
+ "CVE-2025-32463",
843
+ "CVE-2025-32701",
844
+ "CVE-2025-32706",
845
+ "CVE-2025-32709",
846
+ "CVE-2025-32756",
847
+ "CVE-2025-33073",
848
+ "CVE-2025-34026",
615
849
  "CVE-2025-34028",
850
+ "CVE-2025-35939",
851
+ "CVE-2025-37164",
852
+ "CVE-2025-38352",
616
853
  "CVE-2025-3928",
854
+ "CVE-2025-3935",
855
+ "CVE-2025-4008",
856
+ "CVE-2025-40536",
857
+ "CVE-2025-40551",
858
+ "CVE-2025-40602",
859
+ "CVE-2025-41244",
617
860
  "CVE-2025-42599",
861
+ "CVE-2025-42999",
862
+ "CVE-2025-43200",
863
+ "CVE-2025-43300",
864
+ "CVE-2025-43510",
865
+ "CVE-2025-43520",
866
+ "CVE-2025-43529",
867
+ "CVE-2025-4427",
868
+ "CVE-2025-4428",
869
+ "CVE-2025-4632",
870
+ "CVE-2025-47812",
871
+ "CVE-2025-47813",
872
+ "CVE-2025-47827",
873
+ "CVE-2025-48384",
874
+ "CVE-2025-48543",
875
+ "CVE-2025-48572",
876
+ "CVE-2025-48633",
877
+ "CVE-2025-48703",
878
+ "CVE-2025-49113",
879
+ "CVE-2025-49704",
880
+ "CVE-2025-49706",
881
+ "CVE-2025-5086",
882
+ "CVE-2025-52691",
883
+ "CVE-2025-53521",
884
+ "CVE-2025-53770",
885
+ "CVE-2025-54068",
886
+ "CVE-2025-5419",
887
+ "CVE-2025-54236",
888
+ "CVE-2025-54253",
889
+ "CVE-2025-54309",
890
+ "CVE-2025-54948",
891
+ "CVE-2025-55177",
892
+ "CVE-2025-55182",
893
+ "CVE-2025-57819",
894
+ "CVE-2025-58034",
895
+ "CVE-2025-58360",
896
+ "CVE-2025-59230",
897
+ "CVE-2025-59287",
898
+ "CVE-2025-59389",
899
+ "CVE-2025-59529",
900
+ "CVE-2025-59689",
901
+ "CVE-2025-59718",
902
+ "CVE-2025-60710",
903
+ "CVE-2025-61757",
904
+ "CVE-2025-61882",
905
+ "CVE-2025-61884",
906
+ "CVE-2025-61932",
907
+ "CVE-2025-6204",
908
+ "CVE-2025-6205",
909
+ "CVE-2025-6218",
910
+ "CVE-2025-62215",
911
+ "CVE-2025-62221",
912
+ "CVE-2025-62847",
913
+ "CVE-2025-62848",
914
+ "CVE-2025-62849",
915
+ "CVE-2025-64328",
916
+ "CVE-2025-64446",
917
+ "CVE-2025-6543",
918
+ "CVE-2025-6554",
919
+ "CVE-2025-66644",
618
920
  "CVE-2025-67038",
921
+ "CVE-2025-68613",
922
+ "CVE-2025-68645",
923
+ "CVE-2025-6965",
924
+ "CVE-2025-7775",
925
+ "CVE-2025-8110",
926
+ "CVE-2025-8875",
927
+ "CVE-2025-8876",
928
+ "CVE-2025-9242",
929
+ "CVE-2025-9377",
930
+ "CVE-2026-0300",
619
931
  "CVE-2026-12569",
932
+ "CVE-2026-1281",
933
+ "CVE-2026-1340",
620
934
  "CVE-2026-15410",
935
+ "CVE-2026-1603",
936
+ "CVE-2026-1731",
937
+ "CVE-2026-20045",
938
+ "CVE-2026-20122",
939
+ "CVE-2026-20127",
940
+ "CVE-2026-20128",
941
+ "CVE-2026-20131",
942
+ "CVE-2026-20133",
621
943
  "CVE-2026-20230",
622
944
  "CVE-2026-20253",
623
945
  "CVE-2026-20262",
946
+ "CVE-2026-20700",
947
+ "CVE-2026-20805",
948
+ "CVE-2026-20963",
949
+ "CVE-2026-21385",
950
+ "CVE-2026-21510",
951
+ "CVE-2026-21519",
952
+ "CVE-2026-21525",
953
+ "CVE-2026-21533",
954
+ "CVE-2026-21643",
955
+ "CVE-2026-22719",
956
+ "CVE-2026-22769",
957
+ "CVE-2026-23760",
958
+ "CVE-2026-2441",
959
+ "CVE-2026-24423",
960
+ "CVE-2026-24858",
624
961
  "CVE-2026-25089",
962
+ "CVE-2026-25108",
963
+ "CVE-2026-3055",
964
+ "CVE-2026-31431",
965
+ "CVE-2026-31635",
966
+ "CVE-2026-33634",
967
+ "CVE-2026-33825",
968
+ "CVE-2026-34197",
625
969
  "CVE-2026-34908",
626
970
  "CVE-2026-34909",
627
971
  "CVE-2026-34910",
972
+ "CVE-2026-3502",
973
+ "CVE-2026-35616",
974
+ "CVE-2026-3909",
628
975
  "CVE-2026-39808",
976
+ "CVE-2026-41940",
977
+ "CVE-2026-42208",
978
+ "CVE-2026-42945",
979
+ "CVE-2026-43284",
980
+ "CVE-2026-43500",
981
+ "CVE-2026-45321",
629
982
  "CVE-2026-45659",
630
983
  "CVE-2026-46817",
984
+ "CVE-2026-48282",
631
985
  "CVE-2026-48558",
632
986
  "CVE-2026-48907",
633
987
  "CVE-2026-54420",
988
+ "CVE-2026-55255",
634
989
  "CVE-2026-56155",
635
990
  "CVE-2026-56164",
636
991
  "CVE-2026-56290",
637
- "CVE-2026-56291"
992
+ "CVE-2026-56291",
993
+ "CVE-2026-58644",
994
+ "CVE-2026-60137",
995
+ "CVE-2026-63030",
996
+ "CVE-2026-6973",
997
+ "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP"
638
998
  ],
639
999
  "atlas_refs": [],
640
1000
  "attack_refs": [
@@ -1535,7 +1895,12 @@
1535
1895
  "real_requirement": "A.8.16 must be extended with AI-specific monitoring: LLM API query monitoring (which processes query which APIs), behavioral baseline for expected AI tool usage patterns, alerting on AI API queries from unexpected processes or at unexpected volumes.",
1536
1896
  "status": "open",
1537
1897
  "opened_date": "2026-02-01",
1538
- "evidence_cves": [],
1898
+ "evidence_cves": [
1899
+ "CVE-2024-1212",
1900
+ "CVE-2024-12686",
1901
+ "CVE-2026-15409",
1902
+ "CVE-2026-42897"
1903
+ ],
1539
1904
  "atlas_refs": [
1540
1905
  "AML.T0096"
1541
1906
  ],
@@ -1573,8 +1938,13 @@
1573
1938
  "CVE-2022-36551",
1574
1939
  "CVE-2024-0132",
1575
1940
  "CVE-2024-21626",
1941
+ "CVE-2024-3154",
1942
+ "CVE-2024-47575",
1943
+ "CVE-2024-49039",
1944
+ "CVE-2024-9474",
1576
1945
  "CVE-2025-23266",
1577
1946
  "CVE-2025-25297",
1947
+ "CVE-2025-53767",
1578
1948
  "CVE-2025-56520",
1579
1949
  "CVE-2026-22219",
1580
1950
  "CVE-2026-7473"
@@ -1609,37 +1979,50 @@
1609
1979
  "status": "open",
1610
1980
  "opened_date": "2026-01-01",
1611
1981
  "evidence_cves": [
1982
+ "CVE-2020-29574",
1612
1983
  "CVE-2023-43472",
1613
1984
  "CVE-2023-6016",
1614
1985
  "CVE-2023-6571",
1986
+ "CVE-2024-12356",
1615
1987
  "CVE-2024-12366",
1616
1988
  "CVE-2024-24590",
1617
1989
  "CVE-2024-24591",
1618
1990
  "CVE-2024-2912",
1619
1991
  "CVE-2024-31462",
1992
+ "CVE-2024-32113",
1620
1993
  "CVE-2024-37052",
1621
1994
  "CVE-2024-37060",
1995
+ "CVE-2024-51378",
1622
1996
  "CVE-2024-5565",
1623
1997
  "CVE-2024-9526",
1624
1998
  "CVE-2025-0133",
1999
+ "CVE-2025-0994",
1625
2000
  "CVE-2025-10164",
1626
2001
  "CVE-2025-1094",
2002
+ "CVE-2025-23006",
1627
2003
  "CVE-2025-27363",
1628
2004
  "CVE-2025-27520",
1629
2005
  "CVE-2025-3248",
1630
2006
  "CVE-2025-3466",
1631
2007
  "CVE-2025-51480",
2008
+ "CVE-2025-55319",
2009
+ "CVE-2025-68664",
2010
+ "CVE-2025-68665",
1632
2011
  "CVE-2025-68668",
1633
2012
  "CVE-2025-6965",
1634
2013
  "CVE-2026-10520",
2014
+ "CVE-2026-15410",
1635
2015
  "CVE-2026-20245",
1636
2016
  "CVE-2026-21858",
1637
2017
  "CVE-2026-21877",
1638
2018
  "CVE-2026-22218",
2019
+ "CVE-2026-22778",
1639
2020
  "CVE-2026-30623",
1640
2021
  "CVE-2026-31229",
1641
2022
  "CVE-2026-31230",
1642
2023
  "CVE-2026-33017",
2024
+ "CVE-2026-39884",
2025
+ "CVE-2026-42208",
1643
2026
  "CVE-2026-42271",
1644
2027
  "CVE-2026-45247",
1645
2028
  "CVE-2026-5760"
@@ -1781,6 +2164,7 @@
1781
2164
  "CVE-2020-25078",
1782
2165
  "CVE-2020-25079",
1783
2166
  "CVE-2020-2551",
2167
+ "CVE-2020-2883",
1784
2168
  "CVE-2020-3259",
1785
2169
  "CVE-2020-7796",
1786
2170
  "CVE-2020-9715",
@@ -1795,11 +2179,13 @@
1795
2179
  "CVE-2021-26086",
1796
2180
  "CVE-2021-26828",
1797
2181
  "CVE-2021-26829",
2182
+ "CVE-2021-27137",
1798
2183
  "CVE-2021-30952",
1799
2184
  "CVE-2021-31196",
1800
2185
  "CVE-2021-3129",
1801
2186
  "CVE-2021-32030",
1802
2187
  "CVE-2021-33044",
2188
+ "CVE-2021-33045",
1803
2189
  "CVE-2021-33515",
1804
2190
  "CVE-2021-36380",
1805
2191
  "CVE-2021-38371",
@@ -1854,6 +2240,7 @@
1854
2240
  "CVE-2023-34048",
1855
2241
  "CVE-2023-34192",
1856
2242
  "CVE-2023-35082",
2243
+ "CVE-2023-3519",
1857
2244
  "CVE-2023-35674",
1858
2245
  "CVE-2023-36033",
1859
2246
  "CVE-2023-36036",
@@ -1935,6 +2322,8 @@
1935
2322
  "CVE-2024-11392",
1936
2323
  "CVE-2024-11393",
1937
2324
  "CVE-2024-11394",
2325
+ "CVE-2024-11667",
2326
+ "CVE-2024-11680",
1938
2327
  "CVE-2024-12987",
1939
2328
  "CVE-2024-13059",
1940
2329
  "CVE-2024-13159",
@@ -1949,12 +2338,14 @@
1949
2338
  "CVE-2024-20953",
1950
2339
  "CVE-2024-21287",
1951
2340
  "CVE-2024-21338",
2341
+ "CVE-2024-21413",
1952
2342
  "CVE-2024-21513",
1953
2343
  "CVE-2024-21575",
1954
2344
  "CVE-2024-21576",
1955
2345
  "CVE-2024-21762",
1956
2346
  "CVE-2024-21887",
1957
2347
  "CVE-2024-21893",
2348
+ "CVE-2024-23113",
1958
2349
  "CVE-2024-23222",
1959
2350
  "CVE-2024-23225",
1960
2351
  "CVE-2024-23296",
@@ -1967,12 +2358,15 @@
1967
2358
  "CVE-2024-27348",
1968
2359
  "CVE-2024-27443",
1969
2360
  "CVE-2024-28986",
2361
+ "CVE-2024-28987",
1970
2362
  "CVE-2024-28995",
1971
2363
  "CVE-2024-29745",
1972
2364
  "CVE-2024-29748",
1973
2365
  "CVE-2024-30051",
2366
+ "CVE-2024-30088",
1974
2367
  "CVE-2024-3273",
1975
2368
  "CVE-2024-32896",
2369
+ "CVE-2024-3400",
1976
2370
  "CVE-2024-34102",
1977
2371
  "CVE-2024-35250",
1978
2372
  "CVE-2024-36401",
@@ -1984,18 +2378,28 @@
1984
2378
  "CVE-2024-38094",
1985
2379
  "CVE-2024-38106",
1986
2380
  "CVE-2024-38107",
2381
+ "CVE-2024-38112",
1987
2382
  "CVE-2024-38178",
1988
2383
  "CVE-2024-38189",
1989
2384
  "CVE-2024-38193",
1990
2385
  "CVE-2024-38475",
2386
+ "CVE-2024-38812",
2387
+ "CVE-2024-38813",
1991
2388
  "CVE-2024-38856",
1992
2389
  "CVE-2024-39722",
1993
2390
  "CVE-2024-4040",
2391
+ "CVE-2024-40635",
2392
+ "CVE-2024-40891",
2393
+ "CVE-2024-41713",
1994
2394
  "CVE-2024-42009",
1995
2395
  "CVE-2024-42478",
1996
2396
  "CVE-2024-42479",
2397
+ "CVE-2024-43047",
1997
2398
  "CVE-2024-43468",
2399
+ "CVE-2024-43572",
2400
+ "CVE-2024-43573",
1998
2401
  "CVE-2024-4358",
2402
+ "CVE-2024-44308",
1999
2403
  "CVE-2024-44309",
2000
2404
  "CVE-2024-4610",
2001
2405
  "CVE-2024-4671",
@@ -2005,9 +2409,11 @@
2005
2409
  "CVE-2024-4885",
2006
2410
  "CVE-2024-4889",
2007
2411
  "CVE-2024-49035",
2412
+ "CVE-2024-49138",
2008
2413
  "CVE-2024-4947",
2009
2414
  "CVE-2024-50050",
2010
2415
  "CVE-2024-50302",
2416
+ "CVE-2024-50603",
2011
2417
  "CVE-2024-51567",
2012
2418
  "CVE-2024-5217",
2013
2419
  "CVE-2024-5274",
@@ -2015,6 +2421,8 @@
2015
2421
  "CVE-2024-53197",
2016
2422
  "CVE-2024-53704",
2017
2423
  "CVE-2024-54085",
2424
+ "CVE-2024-55550",
2425
+ "CVE-2024-55591",
2018
2426
  "CVE-2024-56145",
2019
2427
  "CVE-2024-57726",
2020
2428
  "CVE-2024-57727",
@@ -2033,6 +2441,7 @@
2033
2441
  "CVE-2024-8069",
2034
2442
  "CVE-2024-8190",
2035
2443
  "CVE-2024-8963",
2444
+ "CVE-2024-9380",
2036
2445
  "CVE-2024-9463",
2037
2446
  "CVE-2024-9465",
2038
2447
  "CVE-2025-0111",
@@ -2042,6 +2451,7 @@
2042
2451
  "CVE-2025-11371",
2043
2452
  "CVE-2025-11953",
2044
2453
  "CVE-2025-12480",
2454
+ "CVE-2025-12686",
2045
2455
  "CVE-2025-1316",
2046
2456
  "CVE-2025-13223",
2047
2457
  "CVE-2025-14174",
@@ -2059,6 +2469,9 @@
2059
2469
  "CVE-2025-20393",
2060
2470
  "CVE-2025-21042",
2061
2471
  "CVE-2025-21043",
2472
+ "CVE-2025-21333",
2473
+ "CVE-2025-21334",
2474
+ "CVE-2025-21335",
2062
2475
  "CVE-2025-21391",
2063
2476
  "CVE-2025-21418",
2064
2477
  "CVE-2025-21479",
@@ -2165,6 +2578,7 @@
2165
2578
  "CVE-2025-53521",
2166
2579
  "CVE-2025-53690",
2167
2580
  "CVE-2025-53770",
2581
+ "CVE-2025-53773",
2168
2582
  "CVE-2025-54068",
2169
2583
  "CVE-2025-54136",
2170
2584
  "CVE-2025-5419",
@@ -2195,6 +2609,9 @@
2195
2609
  "CVE-2025-6218",
2196
2610
  "CVE-2025-62215",
2197
2611
  "CVE-2025-62221",
2612
+ "CVE-2025-62847",
2613
+ "CVE-2025-62848",
2614
+ "CVE-2025-62849",
2198
2615
  "CVE-2025-64328",
2199
2616
  "CVE-2025-64446",
2200
2617
  "CVE-2025-64496",
@@ -2220,6 +2637,7 @@
2220
2637
  "CVE-2026-0257",
2221
2638
  "CVE-2026-0300",
2222
2639
  "CVE-2026-0766",
2640
+ "CVE-2026-0770",
2223
2641
  "CVE-2026-11645",
2224
2642
  "CVE-2026-12569",
2225
2643
  "CVE-2026-1281",
@@ -2259,6 +2677,7 @@
2259
2677
  "CVE-2026-2441",
2260
2678
  "CVE-2026-24423",
2261
2679
  "CVE-2026-24858",
2680
+ "CVE-2026-25089",
2262
2681
  "CVE-2026-25108",
2263
2682
  "CVE-2026-25592",
2264
2683
  "CVE-2026-26015",
@@ -2287,10 +2706,13 @@
2287
2706
  "CVE-2026-35616",
2288
2707
  "CVE-2026-3909",
2289
2708
  "CVE-2026-3910",
2709
+ "CVE-2026-39808",
2290
2710
  "CVE-2026-40933",
2291
2711
  "CVE-2026-41091",
2292
2712
  "CVE-2026-41940",
2293
2713
  "CVE-2026-42945",
2714
+ "CVE-2026-43284",
2715
+ "CVE-2026-43500",
2294
2716
  "CVE-2026-45247",
2295
2717
  "CVE-2026-45498",
2296
2718
  "CVE-2026-45659",
@@ -2309,6 +2731,8 @@
2309
2731
  "CVE-2026-54420",
2310
2732
  "CVE-2026-56291",
2311
2733
  "CVE-2026-58644",
2734
+ "CVE-2026-60137",
2735
+ "CVE-2026-63030",
2312
2736
  "CVE-2026-9082"
2313
2737
  ],
2314
2738
  "atlas_refs": [],
@@ -2452,6 +2876,7 @@
2452
2876
  "status": "open",
2453
2877
  "opened_date": "2026-05-13",
2454
2878
  "evidence_cves": [
2879
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
2455
2880
  "CVE-2023-21237",
2456
2881
  "CVE-2023-21608",
2457
2882
  "CVE-2023-22515",
@@ -2464,6 +2889,7 @@
2464
2889
  "CVE-2023-4966",
2465
2890
  "CVE-2023-5631",
2466
2891
  "CVE-2023-7028",
2892
+ "CVE-2024-11182",
2467
2893
  "CVE-2024-21412",
2468
2894
  "CVE-2024-26169",
2469
2895
  "CVE-2024-29988",
@@ -2472,6 +2898,7 @@
2472
2898
  "CVE-2024-38094",
2473
2899
  "CVE-2024-38193",
2474
2900
  "CVE-2024-38213",
2901
+ "CVE-2024-38217",
2475
2902
  "CVE-2024-38226",
2476
2903
  "CVE-2024-43451",
2477
2904
  "CVE-2024-49039",
@@ -2481,9 +2908,17 @@
2481
2908
  "CVE-2024-55956",
2482
2909
  "CVE-2024-7971",
2483
2910
  "CVE-2025-21391",
2911
+ "CVE-2025-24016",
2912
+ "CVE-2025-27915",
2913
+ "CVE-2025-43200",
2914
+ "CVE-2025-48700",
2915
+ "CVE-2025-55177",
2916
+ "CVE-2025-59689",
2917
+ "CVE-2026-32202",
2484
2918
  "CVE-2026-39987",
2485
2919
  "CVE-2026-42208",
2486
- "CVE-2026-42897"
2920
+ "CVE-2026-42897",
2921
+ "CVE-2026-63030"
2487
2922
  ],
2488
2923
  "atlas_refs": [
2489
2924
  "AML.T0051",
@@ -2519,18 +2954,34 @@
2519
2954
  "status": "open",
2520
2955
  "opened_date": "2026-03-15",
2521
2956
  "evidence_cves": [
2957
+ "CVE-2007-0671",
2958
+ "CVE-2009-0238",
2959
+ "CVE-2009-0556",
2960
+ "CVE-2009-1537",
2961
+ "CVE-2010-0249",
2962
+ "CVE-2010-3765",
2963
+ "CVE-2010-3962",
2964
+ "CVE-2011-3402",
2965
+ "CVE-2012-1854",
2966
+ "CVE-2013-3918",
2522
2967
  "CVE-2017-1000253",
2523
2968
  "CVE-2018-0824",
2524
2969
  "CVE-2020-0618",
2525
2970
  "CVE-2020-15415",
2971
+ "CVE-2020-9715",
2972
+ "CVE-2021-22555",
2973
+ "CVE-2021-30952",
2526
2974
  "CVE-2021-31196",
2527
2975
  "CVE-2021-3129",
2528
2976
  "CVE-2021-41277",
2977
+ "CVE-2021-43226",
2529
2978
  "CVE-2022-0185",
2530
2979
  "CVE-2022-1471",
2531
2980
  "CVE-2022-22071",
2532
2981
  "CVE-2022-2586",
2982
+ "CVE-2022-48503",
2533
2983
  "CVE-2022-48618",
2984
+ "CVE-2023-0386",
2534
2985
  "CVE-2023-22527",
2535
2986
  "CVE-2023-28229",
2536
2987
  "CVE-2023-29300",
@@ -2542,16 +2993,19 @@
2542
2993
  "CVE-2023-35674",
2543
2994
  "CVE-2023-36033",
2544
2995
  "CVE-2023-36036",
2996
+ "CVE-2023-36424",
2545
2997
  "CVE-2023-36563",
2546
2998
  "CVE-2023-36584",
2547
2999
  "CVE-2023-36802",
2548
3000
  "CVE-2023-38831",
2549
3001
  "CVE-2023-40044",
2550
3002
  "CVE-2023-41179",
3003
+ "CVE-2023-41974",
2551
3004
  "CVE-2023-41990",
2552
3005
  "CVE-2023-4211",
2553
3006
  "CVE-2023-42916",
2554
3007
  "CVE-2023-42917",
3008
+ "CVE-2023-43000",
2555
3009
  "CVE-2023-43654",
2556
3010
  "CVE-2023-44467",
2557
3011
  "CVE-2023-46604",
@@ -2574,6 +3028,7 @@
2574
3028
  "CVE-2024-11394",
2575
3029
  "CVE-2024-13059",
2576
3030
  "CVE-2024-1561",
3031
+ "CVE-2024-1709",
2577
3032
  "CVE-2024-21338",
2578
3033
  "CVE-2024-21351",
2579
3034
  "CVE-2024-21413",
@@ -2584,10 +3039,12 @@
2584
3039
  "CVE-2024-23225",
2585
3040
  "CVE-2024-23296",
2586
3041
  "CVE-2024-27132",
3042
+ "CVE-2024-27443",
2587
3043
  "CVE-2024-29745",
2588
3044
  "CVE-2024-29748",
2589
3045
  "CVE-2024-30051",
2590
3046
  "CVE-2024-30088",
3047
+ "CVE-2024-32896",
2591
3048
  "CVE-2024-35250",
2592
3049
  "CVE-2024-36971",
2593
3050
  "CVE-2024-37032",
@@ -2607,38 +3064,93 @@
2607
3064
  "CVE-2024-50050",
2608
3065
  "CVE-2024-5274",
2609
3066
  "CVE-2024-6587",
3067
+ "CVE-2024-7399",
2610
3068
  "CVE-2024-7965",
3069
+ "CVE-2024-8068",
2611
3070
  "CVE-2024-8190",
2612
3071
  "CVE-2025-10585",
2613
3072
  "CVE-2025-1094",
3073
+ "CVE-2025-13223",
2614
3074
  "CVE-2025-14174",
2615
3075
  "CVE-2025-1550",
2616
3076
  "CVE-2025-1753",
3077
+ "CVE-2025-20337",
3078
+ "CVE-2025-21042",
3079
+ "CVE-2025-21043",
2617
3080
  "CVE-2025-23254",
2618
3081
  "CVE-2025-23266",
3082
+ "CVE-2025-24201",
3083
+ "CVE-2025-24893",
3084
+ "CVE-2025-24990",
3085
+ "CVE-2025-25257",
3086
+ "CVE-2025-26399",
3087
+ "CVE-2025-27038",
3088
+ "CVE-2025-2747",
2619
3089
  "CVE-2025-30165",
2620
3090
  "CVE-2025-30202",
3091
+ "CVE-2025-30397",
3092
+ "CVE-2025-31277",
3093
+ "CVE-2025-32432",
3094
+ "CVE-2025-32433",
2621
3095
  "CVE-2025-32434",
2622
3096
  "CVE-2025-32444",
3097
+ "CVE-2025-32706",
3098
+ "CVE-2025-32709",
3099
+ "CVE-2025-33053",
2623
3100
  "CVE-2025-33236",
2624
3101
  "CVE-2025-34291",
2625
3102
  "CVE-2025-38352",
3103
+ "CVE-2025-41244",
2626
3104
  "CVE-2025-43300",
3105
+ "CVE-2025-43510",
3106
+ "CVE-2025-43520",
3107
+ "CVE-2025-4632",
3108
+ "CVE-2025-48543",
3109
+ "CVE-2025-48633",
3110
+ "CVE-2025-4919",
2627
3111
  "CVE-2025-49596",
3112
+ "CVE-2025-53521",
3113
+ "CVE-2025-53690",
2628
3114
  "CVE-2025-54136",
3115
+ "CVE-2025-5419",
3116
+ "CVE-2025-54236",
2629
3117
  "CVE-2025-60455",
3118
+ "CVE-2025-60710",
3119
+ "CVE-2025-6205",
3120
+ "CVE-2025-6218",
3121
+ "CVE-2025-62215",
3122
+ "CVE-2025-62221",
3123
+ "CVE-2025-64328",
2630
3124
  "CVE-2025-64496",
2631
3125
  "CVE-2025-64513",
3126
+ "CVE-2025-6554",
3127
+ "CVE-2025-66376",
3128
+ "CVE-2025-66644",
2632
3129
  "CVE-2025-67818",
3130
+ "CVE-2025-7775",
2633
3131
  "CVE-2025-8747",
3132
+ "CVE-2025-8876",
3133
+ "CVE-2025-9377",
2634
3134
  "CVE-2026-0766",
3135
+ "CVE-2026-1281",
3136
+ "CVE-2026-1340",
3137
+ "CVE-2026-20045",
3138
+ "CVE-2026-20700",
3139
+ "CVE-2026-20805",
3140
+ "CVE-2026-21385",
3141
+ "CVE-2026-21510",
3142
+ "CVE-2026-21513",
3143
+ "CVE-2026-21519",
3144
+ "CVE-2026-21533",
2635
3145
  "CVE-2026-22252",
2636
3146
  "CVE-2026-22688",
3147
+ "CVE-2026-22769",
2637
3148
  "CVE-2026-24206",
2638
3149
  "CVE-2026-24207",
2639
3150
  "CVE-2026-24213",
2640
3151
  "CVE-2026-24214",
2641
3152
  "CVE-2026-24215",
3153
+ "CVE-2026-2441",
2642
3154
  "CVE-2026-25089",
2643
3155
  "CVE-2026-25592",
2644
3156
  "CVE-2026-26015",
@@ -2649,18 +3161,25 @@
2649
3161
  "CVE-2026-30624",
2650
3162
  "CVE-2026-30625",
2651
3163
  "CVE-2026-31431",
3164
+ "CVE-2026-32201",
3165
+ "CVE-2026-33825",
2652
3166
  "CVE-2026-34159",
3167
+ "CVE-2026-34621",
2653
3168
  "CVE-2026-34926",
3169
+ "CVE-2026-3909",
3170
+ "CVE-2026-3910",
2654
3171
  "CVE-2026-39808",
2655
3172
  "CVE-2026-39884",
2656
3173
  "CVE-2026-40933",
2657
3174
  "CVE-2026-41091",
3175
+ "CVE-2026-43500",
2658
3176
  "CVE-2026-45247",
2659
3177
  "CVE-2026-45321",
2660
3178
  "CVE-2026-45498",
2661
3179
  "CVE-2026-45829",
2662
3180
  "CVE-2026-46300",
2663
3181
  "CVE-2026-46333",
3182
+ "CVE-2026-5281",
2664
3183
  "CVE-2026-58644",
2665
3184
  "CVE-2026-9082",
2666
3185
  "MAL-2026-3083"
@@ -3488,6 +4007,7 @@
3488
4007
  "CVE-2021-26086",
3489
4008
  "CVE-2021-26828",
3490
4009
  "CVE-2021-26829",
4010
+ "CVE-2021-27137",
3491
4011
  "CVE-2021-30952",
3492
4012
  "CVE-2021-31196",
3493
4013
  "CVE-2021-3129",
@@ -3968,6 +4488,7 @@
3968
4488
  "CVE-2026-0257",
3969
4489
  "CVE-2026-0300",
3970
4490
  "CVE-2026-0766",
4491
+ "CVE-2026-0770",
3971
4492
  "CVE-2026-11645",
3972
4493
  "CVE-2026-12569",
3973
4494
  "CVE-2026-1281",
@@ -4070,6 +4591,8 @@
4070
4591
  "CVE-2026-56164",
4071
4592
  "CVE-2026-56291",
4072
4593
  "CVE-2026-58644",
4594
+ "CVE-2026-60137",
4595
+ "CVE-2026-63030",
4073
4596
  "CVE-2026-6973",
4074
4597
  "CVE-2026-7473",
4075
4598
  "CVE-2026-9082"
@@ -5185,17 +5708,31 @@
5185
5708
  "status": "open",
5186
5709
  "opened_date": "2026-05-13",
5187
5710
  "evidence_cves": [
5711
+ "CVE-2015-7755",
5712
+ "CVE-2016-7836",
5713
+ "CVE-2017-7921",
5188
5714
  "CVE-2018-19410",
5189
5715
  "CVE-2018-9276",
5716
+ "CVE-2019-19006",
5717
+ "CVE-2019-6693",
5718
+ "CVE-2020-24363",
5190
5719
  "CVE-2020-2883",
5191
5720
  "CVE-2020-3259",
5721
+ "CVE-2021-20124",
5722
+ "CVE-2021-22681",
5723
+ "CVE-2021-32030",
5724
+ "CVE-2021-33044",
5192
5725
  "CVE-2021-33045",
5193
5726
  "CVE-2022-1471",
5727
+ "CVE-2022-22948",
5728
+ "CVE-2022-23227",
5194
5729
  "CVE-2023-20198",
5195
5730
  "CVE-2023-20269",
5196
5731
  "CVE-2023-22515",
5197
5732
  "CVE-2023-22518",
5198
5733
  "CVE-2023-23752",
5734
+ "CVE-2023-24955",
5735
+ "CVE-2023-27351",
5199
5736
  "CVE-2023-27524",
5200
5737
  "CVE-2023-28434",
5201
5738
  "CVE-2023-29357",
@@ -5206,37 +5743,92 @@
5206
5743
  "CVE-2023-42793",
5207
5744
  "CVE-2023-43654",
5208
5745
  "CVE-2023-43791",
5746
+ "CVE-2023-45249",
5209
5747
  "CVE-2023-46747",
5210
5748
  "CVE-2023-46748",
5211
5749
  "CVE-2023-47117",
5212
5750
  "CVE-2023-48022",
5213
5751
  "CVE-2023-4966",
5752
+ "CVE-2023-50224",
5753
+ "CVE-2023-52163",
5214
5754
  "CVE-2023-6019",
5215
5755
  "CVE-2023-6021",
5216
5756
  "CVE-2023-6448",
5217
5757
  "CVE-2023-6548",
5758
+ "CVE-2023-7028",
5218
5759
  "CVE-2024-0012",
5219
5760
  "CVE-2024-12776",
5761
+ "CVE-2024-1709",
5762
+ "CVE-2024-20399",
5220
5763
  "CVE-2024-21410",
5764
+ "CVE-2024-28986",
5765
+ "CVE-2024-28987",
5221
5766
  "CVE-2024-28995",
5767
+ "CVE-2024-3272",
5222
5768
  "CVE-2024-4358",
5223
5769
  "CVE-2024-45195",
5224
5770
  "CVE-2024-4889",
5225
5771
  "CVE-2024-49138",
5772
+ "CVE-2024-54085",
5773
+ "CVE-2024-57726",
5226
5774
  "CVE-2024-57727",
5227
5775
  "CVE-2024-6587",
5228
5776
  "CVE-2024-7593",
5229
5777
  "CVE-2024-8956",
5778
+ "CVE-2024-9463",
5779
+ "CVE-2024-9465",
5780
+ "CVE-2025-10725",
5781
+ "CVE-2025-12480",
5230
5782
  "CVE-2025-1796",
5783
+ "CVE-2025-20281",
5784
+ "CVE-2025-20337",
5785
+ "CVE-2025-20362",
5786
+ "CVE-2025-21085",
5787
+ "CVE-2025-2746",
5788
+ "CVE-2025-2747",
5789
+ "CVE-2025-32433",
5790
+ "CVE-2025-32975",
5791
+ "CVE-2025-34026",
5792
+ "CVE-2025-3935",
5793
+ "CVE-2025-40536",
5794
+ "CVE-2025-40602",
5795
+ "CVE-2025-4427",
5796
+ "CVE-2025-48700",
5797
+ "CVE-2025-48928",
5798
+ "CVE-2025-49113",
5799
+ "CVE-2025-49706",
5800
+ "CVE-2025-53767",
5801
+ "CVE-2025-54236",
5802
+ "CVE-2025-54309",
5803
+ "CVE-2025-55241",
5804
+ "CVE-2025-5777",
5805
+ "CVE-2025-57819",
5806
+ "CVE-2025-59718",
5807
+ "CVE-2025-61757",
5231
5808
  "CVE-2025-64513",
5232
5809
  "CVE-2025-69286",
5233
5810
  "CVE-2026-0257",
5811
+ "CVE-2026-1603",
5812
+ "CVE-2026-1731",
5813
+ "CVE-2026-20127",
5814
+ "CVE-2026-20128",
5815
+ "CVE-2026-20182",
5234
5816
  "CVE-2026-20245",
5817
+ "CVE-2026-21533",
5818
+ "CVE-2026-22769",
5819
+ "CVE-2026-23760",
5235
5820
  "CVE-2026-24206",
5236
5821
  "CVE-2026-24207",
5822
+ "CVE-2026-24858",
5237
5823
  "CVE-2026-26190",
5824
+ "CVE-2026-3055",
5825
+ "CVE-2026-33634",
5826
+ "CVE-2026-39987",
5827
+ "CVE-2026-41940",
5238
5828
  "CVE-2026-41947",
5239
5829
  "CVE-2026-41950",
5830
+ "CVE-2026-42208",
5831
+ "CVE-2026-46817",
5240
5832
  "CVE-2026-50751",
5241
5833
  "CVE-2026-55255",
5242
5834
  "CVE-2026-56155",
@@ -5276,23 +5868,39 @@
5276
5868
  "status": "open",
5277
5869
  "opened_date": "2026-05-13",
5278
5870
  "evidence_cves": [
5871
+ "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
5279
5872
  "CVE-2014-2120",
5873
+ "CVE-2018-14933",
5874
+ "CVE-2020-10148",
5280
5875
  "CVE-2020-13965",
5281
5876
  "CVE-2023-29360",
5282
5877
  "CVE-2023-34048",
5283
5878
  "CVE-2023-36025",
5284
5879
  "CVE-2023-41265",
5285
5880
  "CVE-2023-41266",
5881
+ "CVE-2023-48788",
5882
+ "CVE-2023-51766",
5286
5883
  "CVE-2023-5631",
5884
+ "CVE-2024-20359",
5287
5885
  "CVE-2024-21351",
5288
5886
  "CVE-2024-21412",
5289
5887
  "CVE-2024-21887",
5290
5888
  "CVE-2024-23897",
5291
5889
  "CVE-2024-24919",
5292
5890
  "CVE-2024-38094",
5891
+ "CVE-2024-38193",
5892
+ "CVE-2024-38213",
5293
5893
  "CVE-2024-41710",
5894
+ "CVE-2024-43461",
5294
5895
  "CVE-2024-49039",
5295
- "CVE-2025-0994"
5896
+ "CVE-2024-4947",
5897
+ "CVE-2024-55956",
5898
+ "CVE-2024-57728",
5899
+ "CVE-2024-6670",
5900
+ "CVE-2025-0994",
5901
+ "CVE-2025-24016",
5902
+ "CVE-2025-27915",
5903
+ "CVE-2026-32202"
5296
5904
  ],
5297
5905
  "atlas_refs": [
5298
5906
  "AML.T0096",
@@ -5331,11 +5939,20 @@
5331
5939
  "evidence_cves": [
5332
5940
  "CVE-2023-41061",
5333
5941
  "CVE-2023-41064",
5942
+ "CVE-2023-44487",
5943
+ "CVE-2024-1708",
5334
5944
  "CVE-2024-20481",
5335
5945
  "CVE-2024-3393",
5946
+ "CVE-2024-37085",
5947
+ "CVE-2024-40766",
5948
+ "CVE-2024-4577",
5336
5949
  "CVE-2024-51567",
5337
5950
  "CVE-2025-21391",
5338
- "CVE-2025-21418"
5951
+ "CVE-2025-21418",
5952
+ "CVE-2025-59389",
5953
+ "CVE-2025-61882",
5954
+ "CVE-2025-8671",
5955
+ "CVE-2026-21525"
5339
5956
  ],
5340
5957
  "atlas_refs": [],
5341
5958
  "attack_refs": [
@@ -5540,7 +6157,9 @@
5540
6157
  "real_requirement": "CAF B5 + signaling-anomaly detection + gNB firmware attestation outcome test + slice-isolation outcome test.",
5541
6158
  "status": "open",
5542
6159
  "opened_date": "2026-05-15",
5543
- "evidence_cves": [],
6160
+ "evidence_cves": [
6161
+ "CVE-2023-50387"
6162
+ ],
5544
6163
  "atlas_refs": [],
5545
6164
  "attack_refs": [
5546
6165
  "T1199",
@@ -6443,12 +7062,21 @@
6443
7062
  "status": "open",
6444
7063
  "opened_date": "2026-05-15",
6445
7064
  "evidence_cves": [
7065
+ "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
7066
+ "CVE-2008-0015",
7067
+ "CVE-2009-3459",
6446
7068
  "CVE-2012-4792",
6447
7069
  "CVE-2013-0643",
6448
7070
  "CVE-2013-0648",
7071
+ "CVE-2013-3893",
6449
7072
  "CVE-2014-0497",
7073
+ "CVE-2014-0502",
7074
+ "CVE-2014-100005",
7075
+ "CVE-2014-6278",
7076
+ "CVE-2016-10033",
6450
7077
  "CVE-2017-12637",
6451
7078
  "CVE-2017-3066",
7079
+ "CVE-2018-14634",
6452
7080
  "CVE-2018-14667",
6453
7081
  "CVE-2018-14933",
6454
7082
  "CVE-2018-15133",
@@ -6457,6 +7085,8 @@
6457
7085
  "CVE-2018-9276",
6458
7086
  "CVE-2019-0344",
6459
7087
  "CVE-2019-11001",
7088
+ "CVE-2019-5418",
7089
+ "CVE-2019-9621",
6460
7090
  "CVE-2019-9874",
6461
7091
  "CVE-2019-9875",
6462
7092
  "CVE-2020-11023",
@@ -6465,18 +7095,24 @@
6465
7095
  "CVE-2020-2551",
6466
7096
  "CVE-2020-29574",
6467
7097
  "CVE-2020-3259",
7098
+ "CVE-2020-7796",
6468
7099
  "CVE-2021-26086",
7100
+ "CVE-2021-32030",
7101
+ "CVE-2021-43798",
6469
7102
  "CVE-2021-44207",
6470
7103
  "CVE-2021-44529",
6471
7104
  "CVE-2022-21445",
6472
7105
  "CVE-2022-22265",
6473
7106
  "CVE-2022-23227",
6474
7107
  "CVE-2022-24816",
7108
+ "CVE-2022-38028",
7109
+ "CVE-2022-40799",
6475
7110
  "CVE-2022-43769",
6476
7111
  "CVE-2022-43939",
6477
7112
  "CVE-2023-1671",
6478
7113
  "CVE-2023-20118",
6479
7114
  "CVE-2023-23752",
7115
+ "CVE-2023-2533",
6480
7116
  "CVE-2023-27524",
6481
7117
  "CVE-2023-28461",
6482
7118
  "CVE-2023-34192",
@@ -6493,6 +7129,7 @@
6493
7129
  "CVE-2023-5217",
6494
7130
  "CVE-2023-6571",
6495
7131
  "CVE-2024-0012",
7132
+ "CVE-2024-0769",
6496
7133
  "CVE-2024-11680",
6497
7134
  "CVE-2024-12366",
6498
7135
  "CVE-2024-12686",
@@ -6511,17 +7148,22 @@
6511
7148
  "CVE-2024-2912",
6512
7149
  "CVE-2024-29824",
6513
7150
  "CVE-2024-32113",
7151
+ "CVE-2024-3272",
6514
7152
  "CVE-2024-34102",
6515
7153
  "CVE-2024-36401",
7154
+ "CVE-2024-38178",
7155
+ "CVE-2024-38189",
6516
7156
  "CVE-2024-38475",
6517
7157
  "CVE-2024-38813",
6518
7158
  "CVE-2024-40890",
6519
7159
  "CVE-2024-40891",
6520
7160
  "CVE-2024-41710",
6521
7161
  "CVE-2024-41713",
7162
+ "CVE-2024-42009",
6522
7163
  "CVE-2024-43047",
6523
7164
  "CVE-2024-43093",
6524
7165
  "CVE-2024-43461",
7166
+ "CVE-2024-43468",
6525
7167
  "CVE-2024-43572",
6526
7168
  "CVE-2024-43573",
6527
7169
  "CVE-2024-44308",
@@ -6539,11 +7181,13 @@
6539
7181
  "CVE-2024-53197",
6540
7182
  "CVE-2024-55550",
6541
7183
  "CVE-2024-5565",
7184
+ "CVE-2024-56145",
6542
7185
  "CVE-2024-57727",
6543
7186
  "CVE-2024-57968",
6544
7187
  "CVE-2024-58136",
6545
7188
  "CVE-2024-6670",
6546
7189
  "CVE-2024-7593",
7190
+ "CVE-2024-7694",
6547
7191
  "CVE-2024-8956",
6548
7192
  "CVE-2024-8957",
6549
7193
  "CVE-2024-9379",
@@ -6552,10 +7196,18 @@
6552
7196
  "CVE-2024-9537",
6553
7197
  "CVE-2025-0111",
6554
7198
  "CVE-2025-0411",
7199
+ "CVE-2025-12480",
7200
+ "CVE-2025-12686",
7201
+ "CVE-2025-14611",
7202
+ "CVE-2025-14847",
7203
+ "CVE-2025-21085",
6555
7204
  "CVE-2025-21333",
6556
7205
  "CVE-2025-21334",
6557
7206
  "CVE-2025-21335",
6558
7207
  "CVE-2025-21418",
7208
+ "CVE-2025-21479",
7209
+ "CVE-2025-21480",
7210
+ "CVE-2025-22226",
6559
7211
  "CVE-2025-23006",
6560
7212
  "CVE-2025-23209",
6561
7213
  "CVE-2025-24054",
@@ -6569,20 +7221,60 @@
6569
7221
  "CVE-2025-24993",
6570
7222
  "CVE-2025-25181",
6571
7223
  "CVE-2025-26633",
7224
+ "CVE-2025-2749",
6572
7225
  "CVE-2025-27520",
7226
+ "CVE-2025-2775",
7227
+ "CVE-2025-2776",
6573
7228
  "CVE-2025-2783",
6574
7229
  "CVE-2025-29824",
6575
7230
  "CVE-2025-30406",
6576
7231
  "CVE-2025-31200",
6577
7232
  "CVE-2025-31201",
7233
+ "CVE-2025-32463",
7234
+ "CVE-2025-32701",
7235
+ "CVE-2025-32975",
6578
7236
  "CVE-2025-34028",
6579
7237
  "CVE-2025-3466",
7238
+ "CVE-2025-35939",
6580
7239
  "CVE-2025-3928",
7240
+ "CVE-2025-40536",
7241
+ "CVE-2025-40551",
6581
7242
  "CVE-2025-42599",
7243
+ "CVE-2025-43529",
7244
+ "CVE-2025-4427",
6582
7245
  "CVE-2025-47729",
7246
+ "CVE-2025-47813",
7247
+ "CVE-2025-47827",
7248
+ "CVE-2025-48384",
7249
+ "CVE-2025-48572",
7250
+ "CVE-2025-48703",
7251
+ "CVE-2025-48928",
7252
+ "CVE-2025-49113",
7253
+ "CVE-2025-53773",
7254
+ "CVE-2025-54068",
7255
+ "CVE-2025-54253",
7256
+ "CVE-2025-59230",
7257
+ "CVE-2025-59374",
7258
+ "CVE-2025-6204",
7259
+ "CVE-2025-62847",
7260
+ "CVE-2025-62849",
7261
+ "CVE-2025-6558",
7262
+ "CVE-2025-68461",
7263
+ "CVE-2025-68613",
7264
+ "CVE-2025-8088",
7265
+ "CVE-2025-8110",
7266
+ "CVE-2025-8875",
6583
7267
  "CVE-2026-0300",
6584
7268
  "CVE-2026-12569",
6585
7269
  "CVE-2026-20253",
7270
+ "CVE-2026-20963",
7271
+ "CVE-2026-21509",
7272
+ "CVE-2026-21514",
7273
+ "CVE-2026-21643",
7274
+ "CVE-2026-22719",
7275
+ "CVE-2026-3055",
7276
+ "CVE-2026-33634",
7277
+ "CVE-2026-34197",
6586
7278
  "CVE-2026-42945",
6587
7279
  "CVE-2026-45659",
6588
7280
  "CVE-2026-46817",
@@ -6593,7 +7285,8 @@
6593
7285
  "CVE-2026-54420",
6594
7286
  "CVE-2026-55255",
6595
7287
  "CVE-2026-56155",
6596
- "CVE-2026-56291"
7288
+ "CVE-2026-56291",
7289
+ "CVE-2026-60137"
6597
7290
  ],
6598
7291
  "atlas_refs": [],
6599
7292
  "attack_refs": [
@@ -7266,22 +7959,28 @@
7266
7959
  "CVE-2023-36584",
7267
7960
  "CVE-2024-21351",
7268
7961
  "CVE-2024-21412",
7962
+ "CVE-2024-26169",
7269
7963
  "CVE-2024-29988",
7270
7964
  "CVE-2024-30040",
7271
7965
  "CVE-2024-38213",
7272
7966
  "CVE-2024-38217",
7273
7967
  "CVE-2024-38226",
7274
7968
  "CVE-2024-43461",
7969
+ "CVE-2024-45519",
7275
7970
  "CVE-2024-4978",
7276
7971
  "CVE-2024-53104",
7277
7972
  "CVE-2024-7262",
7973
+ "CVE-2024-9680",
7974
+ "CVE-2025-0411",
7278
7975
  "CVE-2025-11837",
7279
7976
  "CVE-2025-30400",
7280
7977
  "CVE-2026-11645",
7281
7978
  "CVE-2026-32202",
7282
7979
  "CVE-2026-33825",
7283
7980
  "CVE-2026-56290",
7284
- "CVE-2026-6973"
7981
+ "CVE-2026-6973",
7982
+ "MAL-2026-NODE-IPC-STEALER",
7983
+ "MAL-2026-TANSTACK-MINI"
7285
7984
  ],
7286
7985
  "atlas_refs": [],
7287
7986
  "attack_refs": [
@@ -7403,57 +8102,123 @@
7403
8102
  "status": "open",
7404
8103
  "opened_date": "2026-05-17",
7405
8104
  "evidence_cves": [
8105
+ "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
8106
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
8107
+ "CVE-2007-0671",
8108
+ "CVE-2008-0015",
8109
+ "CVE-2008-4128",
8110
+ "CVE-2008-4250",
8111
+ "CVE-2009-0238",
8112
+ "CVE-2009-0556",
8113
+ "CVE-2009-1537",
8114
+ "CVE-2009-3459",
8115
+ "CVE-2010-0249",
8116
+ "CVE-2010-0806",
8117
+ "CVE-2010-3765",
8118
+ "CVE-2010-3962",
7406
8119
  "CVE-2011-0411",
8120
+ "CVE-2011-3402",
8121
+ "CVE-2012-1854",
8122
+ "CVE-2012-4792",
7407
8123
  "CVE-2013-0643",
8124
+ "CVE-2013-0648",
8125
+ "CVE-2013-3893",
8126
+ "CVE-2013-3918",
8127
+ "CVE-2014-0497",
7408
8128
  "CVE-2014-0502",
8129
+ "CVE-2014-100005",
8130
+ "CVE-2014-3931",
8131
+ "CVE-2014-6278",
7409
8132
  "CVE-2014-8361",
8133
+ "CVE-2016-10033",
7410
8134
  "CVE-2016-20017",
7411
8135
  "CVE-2016-3714",
7412
8136
  "CVE-2017-1000253",
8137
+ "CVE-2017-1000353",
7413
8138
  "CVE-2017-12637",
7414
8139
  "CVE-2017-3066",
7415
8140
  "CVE-2017-3506",
7416
8141
  "CVE-2017-6884",
8142
+ "CVE-2018-0824",
8143
+ "CVE-2018-14634",
7417
8144
  "CVE-2018-14667",
7418
8145
  "CVE-2018-15133",
8146
+ "CVE-2018-4063",
7419
8147
  "CVE-2018-8639",
7420
8148
  "CVE-2019-0344",
8149
+ "CVE-2019-11001",
7421
8150
  "CVE-2019-16278",
8151
+ "CVE-2019-5418",
8152
+ "CVE-2019-7256",
8153
+ "CVE-2019-9621",
7422
8154
  "CVE-2019-9874",
7423
8155
  "CVE-2019-9875",
8156
+ "CVE-2020-0618",
7424
8157
  "CVE-2020-11023",
8158
+ "CVE-2020-14644",
7425
8159
  "CVE-2020-15069",
7426
8160
  "CVE-2020-15415",
8161
+ "CVE-2020-17103-REREGRESSION-2026",
7427
8162
  "CVE-2020-17519",
8163
+ "CVE-2020-25078",
8164
+ "CVE-2020-25079",
7428
8165
  "CVE-2020-2551",
7429
8166
  "CVE-2020-29574",
8167
+ "CVE-2020-7796",
8168
+ "CVE-2020-9715",
7430
8169
  "CVE-2021-20035",
8170
+ "CVE-2021-20123",
8171
+ "CVE-2021-21311",
8172
+ "CVE-2021-22054",
8173
+ "CVE-2021-22175",
8174
+ "CVE-2021-22555",
7431
8175
  "CVE-2021-26086",
8176
+ "CVE-2021-26828",
8177
+ "CVE-2021-26829",
8178
+ "CVE-2021-27137",
8179
+ "CVE-2021-30952",
8180
+ "CVE-2021-31196",
7432
8181
  "CVE-2021-3129",
7433
8182
  "CVE-2021-33515",
7434
8183
  "CVE-2021-36380",
7435
8184
  "CVE-2021-38371",
8185
+ "CVE-2021-39935",
8186
+ "CVE-2021-40407",
8187
+ "CVE-2021-40655",
8188
+ "CVE-2021-41277",
8189
+ "CVE-2021-43226",
8190
+ "CVE-2021-43798",
7436
8191
  "CVE-2021-44207",
7437
8192
  "CVE-2021-44529",
8193
+ "CVE-2022-0185",
7438
8194
  "CVE-2022-0492",
8195
+ "CVE-2022-20775",
7439
8196
  "CVE-2022-21445",
7440
8197
  "CVE-2022-22071",
7441
8198
  "CVE-2022-22265",
7442
8199
  "CVE-2022-23748",
7443
8200
  "CVE-2022-23812",
8201
+ "CVE-2022-24816",
8202
+ "CVE-2022-2586",
7444
8203
  "CVE-2022-36551",
8204
+ "CVE-2022-37055",
7445
8205
  "CVE-2022-38028",
8206
+ "CVE-2022-40799",
7446
8207
  "CVE-2022-43769",
7447
8208
  "CVE-2022-43939",
8209
+ "CVE-2022-48503",
7448
8210
  "CVE-2022-48618",
8211
+ "CVE-2023-0386",
7449
8212
  "CVE-2023-1671",
7450
8213
  "CVE-2023-20109",
7451
8214
  "CVE-2023-20118",
7452
8215
  "CVE-2023-20273",
7453
8216
  "CVE-2023-21237",
8217
+ "CVE-2023-21529",
7454
8218
  "CVE-2023-21608",
7455
8219
  "CVE-2023-22527",
7456
8220
  "CVE-2023-25280",
8221
+ "CVE-2023-2533",
7457
8222
  "CVE-2023-26369",
7458
8223
  "CVE-2023-28229",
7459
8224
  "CVE-2023-28461",
@@ -7463,10 +8228,13 @@
7463
8228
  "CVE-2023-33106",
7464
8229
  "CVE-2023-33107",
7465
8230
  "CVE-2023-33246",
8231
+ "CVE-2023-33538",
7466
8232
  "CVE-2023-34192",
8233
+ "CVE-2023-3519",
7467
8234
  "CVE-2023-35674",
7468
8235
  "CVE-2023-36033",
7469
8236
  "CVE-2023-36036",
8237
+ "CVE-2023-36424",
7470
8238
  "CVE-2023-36584",
7471
8239
  "CVE-2023-36802",
7472
8240
  "CVE-2023-36844",
@@ -7475,9 +8243,12 @@
7475
8243
  "CVE-2023-36851",
7476
8244
  "CVE-2023-38203",
7477
8245
  "CVE-2023-38831",
8246
+ "CVE-2023-38950",
8247
+ "CVE-2023-39780",
7478
8248
  "CVE-2023-40044",
7479
8249
  "CVE-2023-41179",
7480
8250
  "CVE-2023-41763",
8251
+ "CVE-2023-41974",
7481
8252
  "CVE-2023-41990",
7482
8253
  "CVE-2023-41991",
7483
8254
  "CVE-2023-41992",
@@ -7486,7 +8257,10 @@
7486
8257
  "CVE-2023-42824",
7487
8258
  "CVE-2023-42916",
7488
8259
  "CVE-2023-42917",
8260
+ "CVE-2023-43000",
8261
+ "CVE-2023-43208",
7489
8262
  "CVE-2023-4346",
8263
+ "CVE-2023-43472",
7490
8264
  "CVE-2023-43770",
7491
8265
  "CVE-2023-43791",
7492
8266
  "CVE-2023-44221",
@@ -7503,7 +8277,10 @@
7503
8277
  "CVE-2023-49103",
7504
8278
  "CVE-2023-4911",
7505
8279
  "CVE-2023-49897",
8280
+ "CVE-2023-50868",
7506
8281
  "CVE-2023-51449",
8282
+ "CVE-2023-51764",
8283
+ "CVE-2023-51765",
7507
8284
  "CVE-2023-5217",
7508
8285
  "CVE-2023-6016",
7509
8286
  "CVE-2023-6038",
@@ -7515,7 +8292,10 @@
7515
8292
  "CVE-2024-0129",
7516
8293
  "CVE-2024-0132",
7517
8294
  "CVE-2024-0519",
8295
+ "CVE-2024-0769",
8296
+ "CVE-2024-1086",
7518
8297
  "CVE-2024-11120",
8298
+ "CVE-2024-11182",
7519
8299
  "CVE-2024-11392",
7520
8300
  "CVE-2024-11393",
7521
8301
  "CVE-2024-11394",
@@ -7526,11 +8306,13 @@
7526
8306
  "CVE-2024-12366",
7527
8307
  "CVE-2024-12450",
7528
8308
  "CVE-2024-12686",
8309
+ "CVE-2024-12987",
7529
8310
  "CVE-2024-13059",
7530
8311
  "CVE-2024-13159",
7531
8312
  "CVE-2024-13160",
7532
8313
  "CVE-2024-13161",
7533
8314
  "CVE-2024-1561",
8315
+ "CVE-2024-20353",
7534
8316
  "CVE-2024-20439",
7535
8317
  "CVE-2024-20767",
7536
8318
  "CVE-2024-20953",
@@ -7541,33 +8323,51 @@
7541
8323
  "CVE-2024-21513",
7542
8324
  "CVE-2024-21575",
7543
8325
  "CVE-2024-21576",
8326
+ "CVE-2024-21626",
7544
8327
  "CVE-2024-21762",
7545
8328
  "CVE-2024-21893",
7546
8329
  "CVE-2024-23113",
7547
8330
  "CVE-2024-23222",
7548
8331
  "CVE-2024-23225",
7549
8332
  "CVE-2024-23296",
8333
+ "CVE-2024-23692",
7550
8334
  "CVE-2024-24590",
7551
8335
  "CVE-2024-24591",
8336
+ "CVE-2024-26169",
7552
8337
  "CVE-2024-27132",
7553
8338
  "CVE-2024-27198",
8339
+ "CVE-2024-27199",
7554
8340
  "CVE-2024-27348",
8341
+ "CVE-2024-27443",
7555
8342
  "CVE-2024-29059",
7556
8343
  "CVE-2024-2912",
8344
+ "CVE-2024-29745",
7557
8345
  "CVE-2024-29748",
7558
8346
  "CVE-2024-29824",
7559
8347
  "CVE-2024-29988",
8348
+ "CVE-2024-30040",
8349
+ "CVE-2024-30051",
7560
8350
  "CVE-2024-30088",
8351
+ "CVE-2024-3094",
7561
8352
  "CVE-2024-31462",
8353
+ "CVE-2024-3154",
7562
8354
  "CVE-2024-32113",
8355
+ "CVE-2024-3273",
7563
8356
  "CVE-2024-32896",
7564
8357
  "CVE-2024-3400",
8358
+ "CVE-2024-34102",
8359
+ "CVE-2024-35250",
7565
8360
  "CVE-2024-36401",
8361
+ "CVE-2024-36971",
7566
8362
  "CVE-2024-37032",
7567
8363
  "CVE-2024-37052",
7568
8364
  "CVE-2024-37060",
8365
+ "CVE-2024-37079",
7569
8366
  "CVE-2024-37383",
8367
+ "CVE-2024-38014",
8368
+ "CVE-2024-38080",
7570
8369
  "CVE-2024-38106",
8370
+ "CVE-2024-38107",
7571
8371
  "CVE-2024-38112",
7572
8372
  "CVE-2024-38178",
7573
8373
  "CVE-2024-38189",
@@ -7579,32 +8379,41 @@
7579
8379
  "CVE-2024-38856",
7580
8380
  "CVE-2024-39717",
7581
8381
  "CVE-2024-39722",
8382
+ "CVE-2024-39891",
7582
8383
  "CVE-2024-4040",
8384
+ "CVE-2024-40635",
7583
8385
  "CVE-2024-40711",
7584
8386
  "CVE-2024-40890",
7585
8387
  "CVE-2024-40891",
7586
8388
  "CVE-2024-41713",
8389
+ "CVE-2024-42009",
7587
8390
  "CVE-2024-42478",
7588
8391
  "CVE-2024-42479",
7589
8392
  "CVE-2024-43047",
7590
8393
  "CVE-2024-43093",
7591
8394
  "CVE-2024-43451",
8395
+ "CVE-2024-43468",
7592
8396
  "CVE-2024-43572",
7593
8397
  "CVE-2024-43573",
7594
8398
  "CVE-2024-44308",
7595
8399
  "CVE-2024-44309",
7596
8400
  "CVE-2024-45519",
7597
8401
  "CVE-2024-4610",
8402
+ "CVE-2024-4671",
7598
8403
  "CVE-2024-47575",
7599
8404
  "CVE-2024-4761",
7600
8405
  "CVE-2024-48248",
8406
+ "CVE-2024-4879",
7601
8407
  "CVE-2024-4885",
7602
8408
  "CVE-2024-49035",
8409
+ "CVE-2024-4978",
7603
8410
  "CVE-2024-50050",
7604
8411
  "CVE-2024-50302",
7605
8412
  "CVE-2024-50603",
7606
8413
  "CVE-2024-50623",
7607
8414
  "CVE-2024-51378",
8415
+ "CVE-2024-5217",
8416
+ "CVE-2024-5274",
7608
8417
  "CVE-2024-53104",
7609
8418
  "CVE-2024-53150",
7610
8419
  "CVE-2024-53197",
@@ -7612,32 +8421,64 @@
7612
8421
  "CVE-2024-55550",
7613
8422
  "CVE-2024-55591",
7614
8423
  "CVE-2024-5565",
8424
+ "CVE-2024-56145",
7615
8425
  "CVE-2024-57968",
7616
8426
  "CVE-2024-58136",
7617
8427
  "CVE-2024-5910",
7618
8428
  "CVE-2024-6047",
7619
8429
  "CVE-2024-7262",
8430
+ "CVE-2024-7399",
8431
+ "CVE-2024-7694",
8432
+ "CVE-2024-7965",
7620
8433
  "CVE-2024-7971",
8434
+ "CVE-2024-8068",
8435
+ "CVE-2024-8069",
8436
+ "CVE-2024-8190",
7621
8437
  "CVE-2024-8957",
7622
8438
  "CVE-2024-8963",
7623
8439
  "CVE-2024-9379",
7624
8440
  "CVE-2024-9380",
7625
8441
  "CVE-2024-9474",
7626
8442
  "CVE-2024-9526",
8443
+ "CVE-2024-9537",
7627
8444
  "CVE-2024-9680",
7628
8445
  "CVE-2025-0108",
7629
8446
  "CVE-2025-0111",
8447
+ "CVE-2025-0133",
7630
8448
  "CVE-2025-0282",
7631
8449
  "CVE-2025-0411",
8450
+ "CVE-2025-10035",
7632
8451
  "CVE-2025-10164",
8452
+ "CVE-2025-10585",
8453
+ "CVE-2025-1094",
8454
+ "CVE-2025-11371",
8455
+ "CVE-2025-11837",
8456
+ "CVE-2025-11953",
8457
+ "CVE-2025-12686",
7633
8458
  "CVE-2025-1316",
8459
+ "CVE-2025-13223",
8460
+ "CVE-2025-14174",
8461
+ "CVE-2025-14611",
8462
+ "CVE-2025-14733",
8463
+ "CVE-2025-14847",
7634
8464
  "CVE-2025-1550",
8465
+ "CVE-2025-15556",
7635
8466
  "CVE-2025-1753",
7636
8467
  "CVE-2025-1976",
8468
+ "CVE-2025-20333",
8469
+ "CVE-2025-20352",
8470
+ "CVE-2025-20393",
8471
+ "CVE-2025-21042",
8472
+ "CVE-2025-21043",
7637
8473
  "CVE-2025-21333",
7638
8474
  "CVE-2025-21334",
7639
8475
  "CVE-2025-21335",
8476
+ "CVE-2025-21479",
8477
+ "CVE-2025-21480",
7640
8478
  "CVE-2025-21590",
8479
+ "CVE-2025-22224",
8480
+ "CVE-2025-22225",
8481
+ "CVE-2025-22226",
7641
8482
  "CVE-2025-22457",
7642
8483
  "CVE-2025-23006",
7643
8484
  "CVE-2025-23209",
@@ -7646,113 +8487,270 @@
7646
8487
  "CVE-2025-24054",
7647
8488
  "CVE-2025-24085",
7648
8489
  "CVE-2025-24200",
8490
+ "CVE-2025-24201",
7649
8491
  "CVE-2025-24472",
7650
8492
  "CVE-2025-24813",
8493
+ "CVE-2025-24893",
7651
8494
  "CVE-2025-24983",
7652
8495
  "CVE-2025-24984",
7653
8496
  "CVE-2025-24985",
7654
8497
  "CVE-2025-24989",
8498
+ "CVE-2025-24990",
7655
8499
  "CVE-2025-24991",
7656
8500
  "CVE-2025-24993",
7657
8501
  "CVE-2025-25181",
8502
+ "CVE-2025-25257",
7658
8503
  "CVE-2025-25297",
8504
+ "CVE-2025-26399",
7659
8505
  "CVE-2025-26633",
8506
+ "CVE-2025-27038",
7660
8507
  "CVE-2025-27363",
8508
+ "CVE-2025-2749",
7661
8509
  "CVE-2025-27520",
8510
+ "CVE-2025-2775",
8511
+ "CVE-2025-2776",
7662
8512
  "CVE-2025-2783",
8513
+ "CVE-2025-27920",
8514
+ "CVE-2025-29635",
7663
8515
  "CVE-2025-29824",
8516
+ "CVE-2025-30066",
8517
+ "CVE-2025-30154",
7664
8518
  "CVE-2025-30165",
7665
8519
  "CVE-2025-30202",
8520
+ "CVE-2025-30397",
7666
8521
  "CVE-2025-30400",
7667
8522
  "CVE-2025-30406",
8523
+ "CVE-2025-31125",
7668
8524
  "CVE-2025-31161",
7669
8525
  "CVE-2025-31200",
7670
8526
  "CVE-2025-31201",
8527
+ "CVE-2025-31277",
7671
8528
  "CVE-2025-31324",
8529
+ "CVE-2025-32432",
7672
8530
  "CVE-2025-32434",
7673
8531
  "CVE-2025-32444",
8532
+ "CVE-2025-32463",
7674
8533
  "CVE-2025-3248",
8534
+ "CVE-2025-32701",
8535
+ "CVE-2025-32706",
8536
+ "CVE-2025-32709",
8537
+ "CVE-2025-32756",
8538
+ "CVE-2025-33053",
8539
+ "CVE-2025-33073",
7675
8540
  "CVE-2025-33236",
7676
8541
  "CVE-2025-34028",
7677
8542
  "CVE-2025-34291",
7678
8543
  "CVE-2025-3466",
8544
+ "CVE-2025-35939",
8545
+ "CVE-2025-37164",
8546
+ "CVE-2025-38352",
7679
8547
  "CVE-2025-3928",
8548
+ "CVE-2025-4008",
8549
+ "CVE-2025-40551",
8550
+ "CVE-2025-41244",
7680
8551
  "CVE-2025-42599",
8552
+ "CVE-2025-42999",
8553
+ "CVE-2025-43200",
8554
+ "CVE-2025-43300",
8555
+ "CVE-2025-43510",
8556
+ "CVE-2025-43520",
8557
+ "CVE-2025-43529",
8558
+ "CVE-2025-4428",
8559
+ "CVE-2025-4632",
7681
8560
  "CVE-2025-47729",
8561
+ "CVE-2025-47812",
8562
+ "CVE-2025-47813",
8563
+ "CVE-2025-47827",
8564
+ "CVE-2025-48384",
8565
+ "CVE-2025-48543",
8566
+ "CVE-2025-48572",
7682
8567
  "CVE-2025-48595",
8568
+ "CVE-2025-48633",
8569
+ "CVE-2025-48703",
8570
+ "CVE-2025-48927",
8571
+ "CVE-2025-4919",
7683
8572
  "CVE-2025-49596",
8573
+ "CVE-2025-49704",
8574
+ "CVE-2025-49844",
8575
+ "CVE-2025-5086",
7684
8576
  "CVE-2025-51480",
8577
+ "CVE-2025-52691",
8578
+ "CVE-2025-53521",
8579
+ "CVE-2025-53690",
8580
+ "CVE-2025-53770",
8581
+ "CVE-2025-53773",
8582
+ "CVE-2025-54068",
7685
8583
  "CVE-2025-54136",
8584
+ "CVE-2025-5419",
8585
+ "CVE-2025-54253",
8586
+ "CVE-2025-54313",
8587
+ "CVE-2025-54948",
8588
+ "CVE-2025-55177",
8589
+ "CVE-2025-55182",
8590
+ "CVE-2025-55319",
7686
8591
  "CVE-2025-56520",
8592
+ "CVE-2025-58034",
8593
+ "CVE-2025-58360",
8594
+ "CVE-2025-59230",
8595
+ "CVE-2025-59287",
8596
+ "CVE-2025-59374",
8597
+ "CVE-2025-59529",
8598
+ "CVE-2025-59689",
7687
8599
  "CVE-2025-60455",
8600
+ "CVE-2025-60710",
8601
+ "CVE-2025-61884",
8602
+ "CVE-2025-61932",
8603
+ "CVE-2025-6204",
8604
+ "CVE-2025-6205",
8605
+ "CVE-2025-6218",
8606
+ "CVE-2025-62215",
8607
+ "CVE-2025-62221",
8608
+ "CVE-2025-62847",
8609
+ "CVE-2025-62848",
8610
+ "CVE-2025-62849",
8611
+ "CVE-2025-64328",
8612
+ "CVE-2025-64446",
7688
8613
  "CVE-2025-64496",
8614
+ "CVE-2025-6543",
8615
+ "CVE-2025-6554",
8616
+ "CVE-2025-6558",
8617
+ "CVE-2025-66376",
8618
+ "CVE-2025-66644",
7689
8619
  "CVE-2025-67038",
7690
8620
  "CVE-2025-67818",
8621
+ "CVE-2025-68461",
8622
+ "CVE-2025-68613",
8623
+ "CVE-2025-68645",
8624
+ "CVE-2025-68664",
8625
+ "CVE-2025-68665",
7691
8626
  "CVE-2025-68668",
8627
+ "CVE-2025-6965",
8628
+ "CVE-2025-7775",
8629
+ "CVE-2025-8088",
8630
+ "CVE-2025-8110",
7692
8631
  "CVE-2025-8747",
8632
+ "CVE-2025-8875",
8633
+ "CVE-2025-8876",
8634
+ "CVE-2025-9242",
8635
+ "CVE-2025-9377",
8636
+ "CVE-2026-0300",
7693
8637
  "CVE-2026-0766",
8638
+ "CVE-2026-0770",
7694
8639
  "CVE-2026-10520",
7695
8640
  "CVE-2026-11645",
7696
8641
  "CVE-2026-12569",
8642
+ "CVE-2026-1281",
8643
+ "CVE-2026-1340",
7697
8644
  "CVE-2026-15409",
7698
8645
  "CVE-2026-15410",
8646
+ "CVE-2026-20045",
8647
+ "CVE-2026-20122",
8648
+ "CVE-2026-20131",
8649
+ "CVE-2026-20133",
7699
8650
  "CVE-2026-20230",
7700
8651
  "CVE-2026-20253",
7701
8652
  "CVE-2026-20262",
8653
+ "CVE-2026-20700",
8654
+ "CVE-2026-20805",
8655
+ "CVE-2026-20963",
8656
+ "CVE-2026-21385",
8657
+ "CVE-2026-21509",
8658
+ "CVE-2026-21510",
8659
+ "CVE-2026-21513",
8660
+ "CVE-2026-21514",
8661
+ "CVE-2026-21519",
8662
+ "CVE-2026-21643",
7702
8663
  "CVE-2026-21858",
7703
8664
  "CVE-2026-21877",
7704
8665
  "CVE-2026-22218",
7705
8666
  "CVE-2026-22219",
7706
8667
  "CVE-2026-22252",
7707
8668
  "CVE-2026-22688",
8669
+ "CVE-2026-22719",
8670
+ "CVE-2026-22778",
8671
+ "CVE-2026-24061",
7708
8672
  "CVE-2026-24213",
7709
8673
  "CVE-2026-24214",
7710
8674
  "CVE-2026-24215",
8675
+ "CVE-2026-2441",
8676
+ "CVE-2026-24423",
7711
8677
  "CVE-2026-25089",
8678
+ "CVE-2026-25108",
7712
8679
  "CVE-2026-25592",
7713
8680
  "CVE-2026-26015",
7714
8681
  "CVE-2026-28318",
7715
8682
  "CVE-2026-3059",
7716
8683
  "CVE-2026-3060",
8684
+ "CVE-2026-30615",
7717
8685
  "CVE-2026-30616",
7718
8686
  "CVE-2026-30617",
8687
+ "CVE-2026-30623",
7719
8688
  "CVE-2026-30624",
7720
8689
  "CVE-2026-30625",
7721
8690
  "CVE-2026-31229",
7722
8691
  "CVE-2026-31230",
8692
+ "CVE-2026-31431",
8693
+ "CVE-2026-31635",
8694
+ "CVE-2026-32201",
7723
8695
  "CVE-2026-33017",
8696
+ "CVE-2026-33825",
7724
8697
  "CVE-2026-34159",
8698
+ "CVE-2026-34197",
8699
+ "CVE-2026-34621",
7725
8700
  "CVE-2026-34908",
7726
8701
  "CVE-2026-34909",
7727
8702
  "CVE-2026-34910",
7728
8703
  "CVE-2026-34926",
8704
+ "CVE-2026-3502",
7729
8705
  "CVE-2026-35273",
8706
+ "CVE-2026-35616",
8707
+ "CVE-2026-3909",
8708
+ "CVE-2026-3910",
7730
8709
  "CVE-2026-39808",
8710
+ "CVE-2026-39884",
7731
8711
  "CVE-2026-40933",
7732
8712
  "CVE-2026-41091",
7733
8713
  "CVE-2026-42271",
8714
+ "CVE-2026-42897",
8715
+ "CVE-2026-42945",
8716
+ "CVE-2026-43284",
8717
+ "CVE-2026-43500",
7734
8718
  "CVE-2026-45247",
8719
+ "CVE-2026-45321",
7735
8720
  "CVE-2026-45498",
7736
8721
  "CVE-2026-45659",
7737
8722
  "CVE-2026-45829",
7738
8723
  "CVE-2026-46300",
7739
8724
  "CVE-2026-46333",
8725
+ "CVE-2026-48027",
7740
8726
  "CVE-2026-48172",
7741
8727
  "CVE-2026-48282",
7742
8728
  "CVE-2026-48558",
7743
8729
  "CVE-2026-48907",
7744
8730
  "CVE-2026-48908",
7745
8731
  "CVE-2026-48939",
8732
+ "CVE-2026-5281",
7746
8733
  "CVE-2026-54420",
7747
8734
  "CVE-2026-56164",
7748
8735
  "CVE-2026-56291",
7749
8736
  "CVE-2026-5760",
7750
8737
  "CVE-2026-58644",
8738
+ "CVE-2026-60137",
8739
+ "CVE-2026-63030",
8740
+ "CVE-2026-6973",
7751
8741
  "CVE-2026-7473",
8742
+ "CVE-2026-7482",
7752
8743
  "CVE-2026-8398",
7753
8744
  "CVE-2026-9082",
8745
+ "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
8746
+ "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
8747
+ "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
8748
+ "MAL-2026-3083",
7754
8749
  "MAL-2026-MOIKA-DEPCONFUSION",
8750
+ "MAL-2026-NODE-IPC-STEALER",
8751
+ "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
7755
8752
  "MAL-2026-SHAI-HULUD-OSS",
8753
+ "MAL-2026-TANSTACK-MINI",
7756
8754
  "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
7757
8755
  ],
7758
8756
  "atlas_refs": [],
@@ -7784,15 +8782,18 @@
7784
8782
  "status": "open",
7785
8783
  "opened_date": "2026-05-17",
7786
8784
  "evidence_cves": [
8785
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
7787
8786
  "CVE-2019-7256",
7788
8787
  "CVE-2020-29574",
7789
8788
  "CVE-2021-20123",
7790
8789
  "CVE-2021-33044",
7791
8790
  "CVE-2021-33045",
8791
+ "CVE-2021-38371",
7792
8792
  "CVE-2021-44207",
7793
8793
  "CVE-2022-0492",
7794
8794
  "CVE-2022-1471",
7795
8795
  "CVE-2022-36551",
8796
+ "CVE-2022-37055",
7796
8797
  "CVE-2023-20109",
7797
8798
  "CVE-2023-20198",
7798
8799
  "CVE-2023-20269",
@@ -7801,13 +8802,16 @@
7801
8802
  "CVE-2023-36033",
7802
8803
  "CVE-2023-36844",
7803
8804
  "CVE-2023-36851",
8805
+ "CVE-2023-38950",
7804
8806
  "CVE-2023-41179",
8807
+ "CVE-2023-43472",
7805
8808
  "CVE-2023-43654",
7806
8809
  "CVE-2023-43791",
7807
8810
  "CVE-2023-44467",
7808
8811
  "CVE-2023-46748",
7809
8812
  "CVE-2023-47117",
7810
8813
  "CVE-2023-48022",
8814
+ "CVE-2023-50224",
7811
8815
  "CVE-2023-51449",
7812
8816
  "CVE-2023-6016",
7813
8817
  "CVE-2023-6019",
@@ -7860,9 +8864,11 @@
7860
8864
  "CVE-2024-9526",
7861
8865
  "CVE-2025-0282",
7862
8866
  "CVE-2025-10164",
8867
+ "CVE-2025-10725",
7863
8868
  "CVE-2025-1550",
7864
8869
  "CVE-2025-1753",
7865
8870
  "CVE-2025-1796",
8871
+ "CVE-2025-21085",
7866
8872
  "CVE-2025-21391",
7867
8873
  "CVE-2025-22457",
7868
8874
  "CVE-2025-23254",
@@ -7886,6 +8892,7 @@
7886
8892
  "CVE-2025-48595",
7887
8893
  "CVE-2025-49596",
7888
8894
  "CVE-2025-51480",
8895
+ "CVE-2025-53767",
7889
8896
  "CVE-2025-54136",
7890
8897
  "CVE-2025-56520",
7891
8898
  "CVE-2025-60455",
@@ -7894,6 +8901,7 @@
7894
8901
  "CVE-2025-67818",
7895
8902
  "CVE-2025-68668",
7896
8903
  "CVE-2025-69286",
8904
+ "CVE-2025-8671",
7897
8905
  "CVE-2025-8747",
7898
8906
  "CVE-2026-0257",
7899
8907
  "CVE-2026-0766",
@@ -7944,7 +8952,8 @@
7944
8952
  "CVE-2026-5760",
7945
8953
  "CVE-2026-7473",
7946
8954
  "CVE-2026-8398",
7947
- "CVE-2026-9082"
8955
+ "CVE-2026-9082",
8956
+ "MAL-2024-PYPI-ULTRALYTICS-XMRIG"
7948
8957
  ],
7949
8958
  "atlas_refs": [],
7950
8959
  "attack_refs": [
@@ -8012,17 +9021,32 @@
8012
9021
  "status": "open",
8013
9022
  "opened_date": "2026-05-17",
8014
9023
  "evidence_cves": [
9024
+ "CVE-2020-10148",
9025
+ "CVE-2022-23748",
8015
9026
  "CVE-2022-23812",
8016
9027
  "CVE-2024-11120",
9028
+ "CVE-2024-21626",
8017
9029
  "CVE-2024-24590",
8018
9030
  "CVE-2024-24591",
9031
+ "CVE-2024-3094",
8019
9032
  "CVE-2024-3154",
8020
9033
  "CVE-2024-37052",
8021
9034
  "CVE-2024-37060",
8022
9035
  "CVE-2024-6047",
9036
+ "CVE-2025-11837",
9037
+ "CVE-2025-15556",
9038
+ "CVE-2025-30066",
9039
+ "CVE-2025-30154",
9040
+ "CVE-2025-3935",
9041
+ "CVE-2025-54313",
9042
+ "CVE-2025-59287",
9043
+ "CVE-2026-30615",
9044
+ "CVE-2026-30623",
8023
9045
  "CVE-2026-31229",
8024
9046
  "CVE-2026-31230",
9047
+ "CVE-2026-48027",
8025
9048
  "CVE-2026-8398",
9049
+ "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
8026
9050
  "MAL-2026-MOIKA-DEPCONFUSION",
8027
9051
  "MAL-2026-NODE-IPC-STEALER",
8028
9052
  "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
@@ -8161,6 +9185,7 @@
8161
9185
  "opened_date": "2026-05-18",
8162
9186
  "evidence_cves": [
8163
9187
  "CVE-2020-10148",
9188
+ "CVE-2021-44207",
8164
9189
  "CVE-2023-20198",
8165
9190
  "CVE-2023-20269",
8166
9191
  "CVE-2023-43791",
@@ -8169,16 +9194,25 @@
8169
9194
  "CVE-2023-6038",
8170
9195
  "CVE-2023-6448",
8171
9196
  "CVE-2024-12776",
9197
+ "CVE-2024-1709",
9198
+ "CVE-2024-20767",
8172
9199
  "CVE-2024-21182",
9200
+ "CVE-2024-29824",
9201
+ "CVE-2024-40766",
9202
+ "CVE-2025-10725",
8173
9203
  "CVE-2025-1796",
8174
9204
  "CVE-2025-3248",
8175
9205
  "CVE-2025-55241",
9206
+ "CVE-2026-20182",
8176
9207
  "CVE-2026-24206",
8177
9208
  "CVE-2026-24207",
8178
9209
  "CVE-2026-33017",
8179
9210
  "CVE-2026-35273",
9211
+ "CVE-2026-39987",
8180
9212
  "CVE-2026-41947",
8181
- "CVE-2026-41950"
9213
+ "CVE-2026-41950",
9214
+ "CVE-2026-55255",
9215
+ "CVE-2026-56164"
8182
9216
  ],
8183
9217
  "atlas_refs": [],
8184
9218
  "attack_refs": [
@@ -8210,6 +9244,9 @@
8210
9244
  "status": "open",
8211
9245
  "opened_date": "2026-05-18",
8212
9246
  "evidence_cves": [
9247
+ "CVE-2024-20481",
9248
+ "CVE-2024-3393",
9249
+ "CVE-2024-40711",
8213
9250
  "CVE-2025-59389"
8214
9251
  ],
8215
9252
  "atlas_refs": [],
@@ -8403,27 +9440,53 @@
8403
9440
  "status": "open",
8404
9441
  "opened_date": "2026-05-18",
8405
9442
  "evidence_cves": [
9443
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
8406
9444
  "CVE-2008-4128",
9445
+ "CVE-2008-4250",
9446
+ "CVE-2010-0806",
9447
+ "CVE-2011-0411",
8407
9448
  "CVE-2014-2120",
9449
+ "CVE-2014-3931",
8408
9450
  "CVE-2014-8361",
9451
+ "CVE-2015-7755",
8409
9452
  "CVE-2016-20017",
8410
9453
  "CVE-2016-3714",
9454
+ "CVE-2016-7836",
9455
+ "CVE-2017-1000353",
8411
9456
  "CVE-2017-3506",
8412
9457
  "CVE-2017-6884",
9458
+ "CVE-2017-7921",
9459
+ "CVE-2018-4063",
9460
+ "CVE-2019-19006",
8413
9461
  "CVE-2019-7256",
8414
9462
  "CVE-2020-13965",
8415
9463
  "CVE-2020-17519",
9464
+ "CVE-2020-24363",
9465
+ "CVE-2020-25078",
9466
+ "CVE-2020-25079",
8416
9467
  "CVE-2020-2883",
8417
9468
  "CVE-2021-20035",
8418
9469
  "CVE-2021-20123",
8419
9470
  "CVE-2021-20124",
9471
+ "CVE-2021-21311",
9472
+ "CVE-2021-22054",
9473
+ "CVE-2021-22175",
9474
+ "CVE-2021-22681",
9475
+ "CVE-2021-26828",
9476
+ "CVE-2021-26829",
9477
+ "CVE-2021-27137",
8420
9478
  "CVE-2021-33044",
8421
9479
  "CVE-2021-33045",
9480
+ "CVE-2021-33515",
8422
9481
  "CVE-2021-36380",
9482
+ "CVE-2021-38371",
9483
+ "CVE-2021-39935",
8423
9484
  "CVE-2021-40407",
8424
9485
  "CVE-2021-40655",
9486
+ "CVE-2022-20775",
8425
9487
  "CVE-2022-22948",
8426
9488
  "CVE-2022-36551",
9489
+ "CVE-2022-37055",
8427
9490
  "CVE-2023-20109",
8428
9491
  "CVE-2023-20198",
8429
9492
  "CVE-2023-20269",
@@ -8432,6 +9495,7 @@
8432
9495
  "CVE-2023-28434",
8433
9496
  "CVE-2023-29552",
8434
9497
  "CVE-2023-33246",
9498
+ "CVE-2023-33538",
8435
9499
  "CVE-2023-34048",
8436
9500
  "CVE-2023-35082",
8437
9501
  "CVE-2023-36761",
@@ -8440,7 +9504,10 @@
8440
9504
  "CVE-2023-36846",
8441
9505
  "CVE-2023-36847",
8442
9506
  "CVE-2023-36851",
9507
+ "CVE-2023-38950",
9508
+ "CVE-2023-39780",
8443
9509
  "CVE-2023-4346",
9510
+ "CVE-2023-43472",
8444
9511
  "CVE-2023-44221",
8445
9512
  "CVE-2023-44487",
8446
9513
  "CVE-2023-45249",
@@ -8448,11 +9515,13 @@
8448
9515
  "CVE-2023-47565",
8449
9516
  "CVE-2023-48788",
8450
9517
  "CVE-2023-49897",
9518
+ "CVE-2023-50224",
8451
9519
  "CVE-2023-50387",
8452
9520
  "CVE-2023-50868",
8453
9521
  "CVE-2023-51764",
8454
9522
  "CVE-2023-51765",
8455
9523
  "CVE-2023-51766",
9524
+ "CVE-2023-52163",
8456
9525
  "CVE-2023-6448",
8457
9526
  "CVE-2023-6548",
8458
9527
  "CVE-2023-6549",
@@ -8460,6 +9529,7 @@
8460
9529
  "CVE-2024-11667",
8461
9530
  "CVE-2024-1212",
8462
9531
  "CVE-2024-12450",
9532
+ "CVE-2024-12987",
8463
9533
  "CVE-2024-20353",
8464
9534
  "CVE-2024-20399",
8465
9535
  "CVE-2024-20481",
@@ -8474,29 +9544,77 @@
8474
9544
  "CVE-2024-31462",
8475
9545
  "CVE-2024-3273",
8476
9546
  "CVE-2024-3393",
9547
+ "CVE-2024-37079",
8477
9548
  "CVE-2024-38812",
9549
+ "CVE-2024-39717",
8478
9550
  "CVE-2024-39891",
8479
9551
  "CVE-2024-4040",
9552
+ "CVE-2024-40635",
9553
+ "CVE-2024-4358",
8480
9554
  "CVE-2024-50603",
9555
+ "CVE-2024-54085",
9556
+ "CVE-2024-8069",
8481
9557
  "CVE-2024-9474",
8482
9558
  "CVE-2025-0108",
8483
9559
  "CVE-2025-0282",
8484
9560
  "CVE-2025-10164",
9561
+ "CVE-2025-11371",
9562
+ "CVE-2025-11953",
8485
9563
  "CVE-2025-1316",
9564
+ "CVE-2025-14733",
8486
9565
  "CVE-2025-1976",
9566
+ "CVE-2025-20281",
9567
+ "CVE-2025-20333",
9568
+ "CVE-2025-20352",
9569
+ "CVE-2025-20362",
9570
+ "CVE-2025-20393",
8487
9571
  "CVE-2025-21590",
8488
9572
  "CVE-2025-22457",
8489
9573
  "CVE-2025-24472",
8490
9574
  "CVE-2025-25297",
9575
+ "CVE-2025-2746",
9576
+ "CVE-2025-27920",
9577
+ "CVE-2025-29635",
9578
+ "CVE-2025-31125",
8491
9579
  "CVE-2025-31161",
8492
9580
  "CVE-2025-31324",
9581
+ "CVE-2025-32756",
9582
+ "CVE-2025-33073",
9583
+ "CVE-2025-34026",
9584
+ "CVE-2025-37164",
9585
+ "CVE-2025-4008",
9586
+ "CVE-2025-40602",
9587
+ "CVE-2025-42999",
9588
+ "CVE-2025-4428",
9589
+ "CVE-2025-47812",
9590
+ "CVE-2025-48927",
9591
+ "CVE-2025-49844",
9592
+ "CVE-2025-5086",
8493
9593
  "CVE-2025-51480",
9594
+ "CVE-2025-54309",
9595
+ "CVE-2025-54948",
8494
9596
  "CVE-2025-56520",
9597
+ "CVE-2025-57819",
9598
+ "CVE-2025-58034",
9599
+ "CVE-2025-58360",
9600
+ "CVE-2025-59718",
9601
+ "CVE-2025-61757",
9602
+ "CVE-2025-61932",
9603
+ "CVE-2025-62848",
9604
+ "CVE-2025-64446",
8495
9605
  "CVE-2025-67038",
9606
+ "CVE-2025-68645",
8496
9607
  "CVE-2025-68668",
9608
+ "CVE-2025-9242",
8497
9609
  "CVE-2026-0257",
9610
+ "CVE-2026-0770",
8498
9611
  "CVE-2026-15409",
8499
9612
  "CVE-2026-15410",
9613
+ "CVE-2026-1603",
9614
+ "CVE-2026-20122",
9615
+ "CVE-2026-20127",
9616
+ "CVE-2026-20128",
9617
+ "CVE-2026-20133",
8500
9618
  "CVE-2026-20182",
8501
9619
  "CVE-2026-20230",
8502
9620
  "CVE-2026-20262",
@@ -8504,11 +9622,17 @@
8504
9622
  "CVE-2026-21877",
8505
9623
  "CVE-2026-22218",
8506
9624
  "CVE-2026-22219",
9625
+ "CVE-2026-24061",
9626
+ "CVE-2026-24858",
9627
+ "CVE-2026-25108",
8507
9628
  "CVE-2026-3059",
8508
9629
  "CVE-2026-3060",
8509
9630
  "CVE-2026-34908",
8510
9631
  "CVE-2026-34909",
8511
9632
  "CVE-2026-34910",
9633
+ "CVE-2026-3502",
9634
+ "CVE-2026-35616",
9635
+ "CVE-2026-43284",
8512
9636
  "CVE-2026-50751",
8513
9637
  "CVE-2026-56290",
8514
9638
  "CVE-2026-5760",
@@ -8892,13 +10016,17 @@
8892
10016
  "CVE-2018-9276",
8893
10017
  "CVE-2019-11001",
8894
10018
  "CVE-2019-7256",
10019
+ "CVE-2020-15415",
8895
10020
  "CVE-2021-40407",
8896
10021
  "CVE-2021-41277",
8897
10022
  "CVE-2022-22948",
8898
10023
  "CVE-2023-20273",
10024
+ "CVE-2023-25280",
8899
10025
  "CVE-2023-27524",
8900
10026
  "CVE-2023-29552",
10027
+ "CVE-2023-45727",
8901
10028
  "CVE-2023-49103",
10029
+ "CVE-2024-0012",
8902
10030
  "CVE-2024-11120",
8903
10031
  "CVE-2024-29059",
8904
10032
  "CVE-2024-3272",
@@ -8909,14 +10037,18 @@
8909
10037
  "CVE-2024-43093",
8910
10038
  "CVE-2024-45195",
8911
10039
  "CVE-2024-4577",
10040
+ "CVE-2024-55956",
8912
10041
  "CVE-2024-5910",
8913
10042
  "CVE-2024-6047",
10043
+ "CVE-2024-8956",
8914
10044
  "CVE-2024-8957",
10045
+ "CVE-2024-9379",
8915
10046
  "CVE-2025-0108",
8916
10047
  "CVE-2025-49844",
8917
10048
  "CVE-2025-59529",
8918
10049
  "CVE-2025-8671",
8919
- "CVE-2026-48939"
10050
+ "CVE-2026-48939",
10051
+ "CVE-2026-7482"
8920
10052
  ],
8921
10053
  "theater_test": {
8922
10054
  "claim": "We are compliant with A.8.9 (Configuration management) because we follow the documented requirement: Annex A.8.9 — establishing, documenting, implementing, monitoring, and reviewing configurations of hardware, software, services, and networks. Anchored on a documented baseline and continuous monitori",
@@ -8972,8 +10104,10 @@
8972
10104
  "status": "open",
8973
10105
  "opened_at": "2026-05-18",
8974
10106
  "evidence_cves": [
10107
+ "CVE-2024-43451",
8975
10108
  "CVE-2025-14847",
8976
10109
  "CVE-2025-22226",
10110
+ "CVE-2025-23209",
8977
10111
  "CVE-2025-47729",
8978
10112
  "CVE-2025-69286"
8979
10113
  ],
@@ -9126,7 +10260,9 @@
9126
10260
  "status": "open",
9127
10261
  "opened_at": "2026-05-18",
9128
10262
  "evidence_cves": [
10263
+ "CVE-2025-6543",
9129
10264
  "CVE-2025-8671",
10265
+ "CVE-2026-21525",
9130
10266
  "CVE-2026-31635"
9131
10267
  ],
9132
10268
  "theater_test": {
@@ -9598,9 +10734,15 @@
9598
10734
  "opened_at": "2026-05-18",
9599
10735
  "evidence_cves": [
9600
10736
  "CVE-2022-23812",
10737
+ "CVE-2024-40890",
10738
+ "CVE-2024-50623",
10739
+ "CVE-2026-45321",
10740
+ "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
9601
10741
  "MAL-2025-PYPI-COLORAMA-SOLANA-STEALER",
10742
+ "MAL-2026-3083",
9602
10743
  "MAL-2026-MOIKA-DEPCONFUSION",
9603
10744
  "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
10745
+ "MAL-2026-SHAI-HULUD-OSS",
9604
10746
  "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
9605
10747
  ],
9606
10748
  "theater_test": {